Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/9-BdC4caH52D-Ojuo1g41Z2ONTc.roa
File: 9-BdC4caH52D-Ojuo1g41Z2ONTc.roa (raw, json)
Hash identifier: aM5GWSAaC/qhXNFmN2HurBerEM8gkIE1Sxb1KfArGa0=
Subject key identifier: F7:E0:5D:0B:87:1A:1F:9D:83:F8:E8:EE:A3:58:38:D5:9D:8E:35:37
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018CC3489E8A652C8BFB2451359F059C80A3
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/9-BdC4caH52D-Ojuo1g41Z2ONTc.roa
Signing time: Mon 01 Jan 2024 04:29:25 +0000
ROA not before: Mon 01 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44901
IP address blocks: 194.40.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9e:8a:65:2c:8b:fb:24:51:35:9f:05:9c:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e05d0b871a1f9d83f8e8eea35838d59d8e3537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:d9:8d:9f:21:c1:42:87:22:45:9e:7b:f1:
e7:fa:35:8a:bc:2f:3b:a6:13:ed:5a:00:7e:7f:03:
97:c2:4f:e1:bc:6e:05:0f:08:7c:1f:34:21:63:ee:
b5:aa:ff:c8:66:86:a8:b2:80:d7:0b:cf:8e:95:3a:
61:34:f0:ca:95:b0:57:58:6b:ff:63:c5:b9:5a:df:
93:5c:9c:f3:13:38:ea:a6:db:5a:be:bc:a2:6c:66:
f7:38:45:01:06:bb:36:60:cf:a3:8a:c4:2c:9e:9b:
b8:a9:03:bd:82:37:9d:32:ed:d9:95:38:da:70:aa:
ca:ca:a2:1a:54:0b:19:e6:44:26:f3:6c:38:e7:f7:
34:e7:09:4b:ea:08:52:97:d4:55:9f:d4:6d:34:b2:
42:7f:45:d3:05:00:d7:b1:d9:b7:9c:62:4a:6a:9d:
de:57:a7:98:81:02:45:50:1d:1a:92:cb:c2:ba:4a:
83:48:d3:26:62:47:44:9a:a0:5e:b1:48:6e:46:12:
49:86:92:9f:da:cf:1a:dc:8e:0b:17:aa:1f:bf:02:
f5:d0:57:f5:5e:82:40:48:da:67:55:09:10:b6:68:
76:17:3d:aa:f6:aa:09:2e:0c:2c:40:df:a4:f8:53:
65:e7:22:d4:ba:1f:ea:ae:0b:4a:b3:b5:a8:f2:a1:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:5D:0B:87:1A:1F:9D:83:F8:E8:EE:A3:58:38:D5:9D:8E:35:37
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/9-BdC4caH52D-Ojuo1g41Z2ONTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.40.248.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1b:47:d7:c5:dd:2c:0c:52:3f:de:1c:5c:b4:9c:dd:1e:bc:
64:db:0c:3e:7a:1b:39:31:35:07:74:97:f8:86:34:4e:2e:6b:
e3:79:aa:1e:5a:5e:d1:88:db:73:cc:3b:4f:8a:01:bd:c6:4f:
6a:43:e7:d5:63:f3:ee:9c:52:0b:29:61:81:a9:83:c9:1c:bf:
56:03:04:6a:e4:70:3b:b5:ab:96:06:9d:4f:6c:d2:25:21:31:
d8:b7:dd:40:08:df:d3:c7:73:bf:f9:70:b0:c8:1e:4d:a9:8a:
7c:06:45:48:aa:14:79:05:01:54:76:d2:5c:aa:f5:cc:0a:26:
7a:32:e7:1f:1c:14:87:5a:fb:2a:08:6f:4d:3a:3e:40:a0:df:
e8:c3:b5:2b:bf:82:1e:0f:26:a8:7f:1f:4f:68:80:11:f0:fe:
2c:d4:2b:1e:c9:e2:45:b8:51:2f:ea:44:e6:53:6e:b2:e7:35:
b1:7b:37:0e:81:4a:29:4a:e8:95:e3:c7:cf:3b:45:cf:58:3c:
63:82:09:14:0e:94:f9:7c:5e:15:74:c1:5e:2a:47:d9:d7:af:
85:45:42:ef:f2:f9:35:2b:0a:b2:11:94:cd:e2:8e:d6:e0:a4:
61:c5:40:c0:8f:a6:e5:f2:17:6c:c6:60:28:c9:09:be:69:59:
78:ef:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org