Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/x4YjgXDD1-9CNev60blLhrFYEUI.roa
File: x4YjgXDD1-9CNev60blLhrFYEUI.roa (raw, json)
Hash identifier: 19kw7clSVTcxmYqkJ4OlfTr8gd2OGiUW2L0DIbGPFcU=
Subject key identifier: C7:86:23:81:70:C3:D7:EF:42:35:EB:FA:D1:B9:4B:86:B1:58:11:42
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01849E357E6A55F9D9AD9D4CE14DB60B0522
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/x4YjgXDD1-9CNev60blLhrFYEUI.roa
Signing time: Tue 22 Nov 2022 07:20:16 +0000
ROA not before: Tue 22 Nov 2022 07:20:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135752
IP address blocks: 194.5.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:35:7e:6a:55:f9:d9:ad:9d:4c:e1:4d:b6:0b:05:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 22 07:20:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c786238170c3d7ef4235ebfad1b94b86b1581142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:56:86:78:3b:67:88:7e:78:b7:9d:12:ba:
76:a5:72:e3:bf:8f:49:fb:c5:b0:44:bf:0c:15:b1:
52:84:75:33:86:f8:e1:f9:5e:e0:d9:73:4a:29:4b:
9d:62:4f:2f:da:da:ae:d4:e7:f5:5b:be:8d:1e:86:
a5:96:64:b3:e2:77:ea:56:35:cc:64:d9:e2:2d:51:
b9:68:76:0f:bf:6f:b5:18:5e:74:07:c7:29:27:d0:
f8:9c:21:01:b8:9f:89:6a:7d:50:25:f2:32:7f:f0:
ce:82:6a:71:50:1f:7d:c9:ab:fc:0a:b3:f5:61:25:
a9:4b:a3:14:aa:ef:c8:2f:00:fa:e7:a7:fe:d6:22:
c0:b3:64:a9:e9:dc:e1:7c:ff:ff:9c:07:da:08:e6:
c0:25:16:4e:e2:41:bd:e0:7e:45:17:81:52:d5:c4:
88:9a:a0:f9:11:68:7d:10:c7:d0:25:7e:b2:ec:fd:
e9:2d:c9:28:68:92:e5:60:4e:e2:7c:95:b0:3b:05:
88:11:df:33:45:47:72:f4:b2:87:3d:52:57:58:a7:
20:bd:2f:54:ef:e1:ef:8b:26:c1:64:b0:87:c3:45:
94:51:67:e9:a4:17:31:aa:d3:37:b3:38:e5:fe:72:
ab:01:96:7e:a1:3c:a4:ad:a7:2d:2c:c6:5f:5c:e5:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:23:81:70:C3:D7:EF:42:35:EB:FA:D1:B9:4B:86:B1:58:11:42
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/x4YjgXDD1-9CNev60blLhrFYEUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5e:02:25:11:ea:83:28:71:5e:97:e9:cb:6e:b5:20:c5:0e:
be:27:d3:50:7c:1f:15:89:a6:97:1f:25:7a:5e:90:05:1b:2b:
8d:13:6c:06:97:ea:fd:c3:3a:d5:fa:ca:cc:ae:2f:27:f7:02:
da:5f:9d:a7:e8:3b:d9:65:60:39:06:0d:c8:da:16:6d:42:04:
7c:9c:5e:8f:8c:bb:14:08:07:8b:53:23:d7:64:01:ed:8d:0f:
2d:4f:ad:c4:86:6b:1f:5b:2b:55:a8:97:eb:e4:a9:5e:31:5e:
e1:78:ce:6d:fe:55:67:2f:5f:74:a2:92:65:00:78:27:20:da:
39:60:34:a3:2b:fc:1d:c3:c2:44:a6:ab:a5:b8:23:ce:a2:98:
0e:74:7a:6c:e7:ae:26:c6:af:24:f6:48:68:3e:5c:af:6e:2f:
9f:0b:c0:b1:3b:d5:01:82:db:3b:72:d3:c6:9d:54:05:b4:b3:
f6:23:ca:2c:f1:34:99:0a:94:06:b3:bb:72:ee:0e:b7:fa:b4:
21:3c:81:6d:d2:12:8e:ba:b5:08:53:ff:fc:ee:54:67:dc:0d:
b3:25:b7:c0:a7:b0:f2:a2:0a:11:45:5f:35:97:53:35:89:31:
1e:c5:8a:3e:6f:a9:92:c0:60:c6:83:4c:47:d7:1a:87:3e:f4:
b4:6a:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org