Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/bda612-d481-416c-ad90-ecb2486f81eb/1/1BZswQsp0zZVTPWmtfH2xHzvmtg.roa
File: 1BZswQsp0zZVTPWmtfH2xHzvmtg.roa (raw, json)
Hash identifier: DVd724ZuVr+QfBRTPOx6a29yCKzMg6W+9dfwFr7CROU=
Subject key identifier: D4:16:6C:C1:0B:29:D3:36:55:4C:F5:A6:B5:F1:F6:C4:7C:EF:9A:D8
Certificate issuer: /CN=0555544460983616c44a670317a3d06c308f81b0
Certificate serial: 0182D0A03206423B8CEAC0677491908E9616
Authority key identifier: 05:55:54:44:60:98:36:16:C4:4A:67:03:17:A3:D0:6C:30:8F:81:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVVURGCYNhbESmcDF6PQbDCPgbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/bda612-d481-416c-ad90-ecb2486f81eb/1/1BZswQsp0zZVTPWmtfH2xHzvmtg.roa
Signing time: Wed 24 Aug 2022 16:12:15 +0000
ROA not before: Wed 24 Aug 2022 16:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 194.104.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:a0:32:06:42:3b:8c:ea:c0:67:74:91:90:8e:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0555544460983616c44a670317a3d06c308f81b0
Validity
Not Before: Aug 24 16:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4166cc10b29d336554cf5a6b5f1f6c47cef9ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:66:44:7d:ab:0e:17:f7:f3:67:5a:5f:0a:d0:
49:f1:42:37:12:fd:4c:c7:39:b4:8e:e5:a9:62:61:
7d:5b:2e:99:17:db:9c:45:0b:b8:d6:33:d2:08:77:
45:9b:4f:a0:94:53:0a:cd:8f:43:ad:44:c7:d1:20:
be:fc:95:1e:af:4d:80:e1:9d:21:01:5b:22:45:9e:
87:d4:99:f7:d4:aa:50:a7:b9:37:ce:37:6a:9c:aa:
34:21:53:5a:b0:ea:13:d3:56:1e:cc:4e:1c:bb:3b:
9d:1c:d4:35:b5:53:0e:d2:2c:f4:6c:a0:06:fa:48:
87:8b:a7:9b:32:39:c7:c9:27:f3:8c:55:a8:ef:d3:
75:05:33:95:eb:51:32:cf:2e:24:4d:55:39:79:7b:
cc:0f:14:bd:1c:c1:55:f9:5b:9e:b0:18:d9:ea:45:
3e:19:fa:12:5d:99:d4:9d:e1:29:76:e4:32:5e:e5:
83:4a:a0:5a:a7:b3:c3:c0:1b:92:4d:c4:54:1c:4c:
0b:2e:2a:d1:0b:9d:b2:66:5f:f4:cb:03:0f:ad:e3:
e0:9d:16:f5:74:c4:eb:cf:42:6f:9d:ea:01:6f:3c:
12:87:7f:bb:87:5d:77:e2:8b:af:9c:b2:bc:76:7e:
2a:e4:e3:67:8a:21:05:53:c6:b2:de:a2:1b:f8:82:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:6C:C1:0B:29:D3:36:55:4C:F5:A6:B5:F1:F6:C4:7C:EF:9A:D8
X509v3 Authority Key Identifier:
keyid:05:55:54:44:60:98:36:16:C4:4A:67:03:17:A3:D0:6C:30:8F:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVVURGCYNhbESmcDF6PQbDCPgbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/bda612-d481-416c-ad90-ecb2486f81eb/1/1BZswQsp0zZVTPWmtfH2xHzvmtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/bda612-d481-416c-ad90-ecb2486f81eb/1/BVVURGCYNhbESmcDF6PQbDCPgbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.136.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3c:99:e0:54:ea:17:42:7e:7d:9f:88:9b:f6:93:86:70:a5:
1b:9c:33:96:92:cb:07:d5:26:dd:7b:2e:59:12:e9:88:e3:1c:
17:0a:2f:07:cd:fb:87:26:18:d4:cb:53:a4:8a:8f:c5:8f:1e:
d0:9f:05:6d:01:ad:1c:cd:d4:0d:f5:72:68:05:a9:4c:89:69:
ee:a2:af:f8:e5:9c:ba:07:ef:21:d2:36:75:ef:56:06:15:06:
98:03:6c:8c:a4:15:96:3f:e7:9c:ff:97:34:ae:d4:d6:46:3e:
82:69:76:0e:af:5f:42:e5:53:43:d7:45:a5:e0:52:87:92:0e:
d5:56:0c:87:81:2b:93:02:ab:f3:85:20:fe:20:10:fd:44:76:
c2:8d:91:e0:c7:dc:7b:8a:40:c3:f6:cd:b0:c0:b6:13:c3:bc:
e9:3c:c3:6a:4a:73:7b:57:01:12:55:1a:42:8c:6d:a6:fb:2e:
11:60:b0:89:30:2e:03:12:a2:80:db:35:df:7f:7a:c2:e7:2b:
80:1e:6d:21:37:f2:94:f3:cc:f0:af:34:87:24:7f:fc:b0:94:
87:01:3a:09:c3:3d:69:f8:1f:c2:39:9a:e8:99:1b:04:01:f6:
63:d4:30:b4:e9:fd:fa:88:c7:ff:5c:a1:f7:ef:b2:77:5b:8f:
1a:9b:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:37 2024 by rpki-client on console-fra.rpki-client.org