Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/802dbe-850f-4cdf-a216-9d87dbfb84fd/1/ShnVdGQxcray8mEgNsDTf2_UexI.roa
File: ShnVdGQxcray8mEgNsDTf2_UexI.roa (raw, json)
Hash identifier: kwV6P1R6VDo384GnMCruLQUC8GhLq+6BjO+peHwu2Lo=
Subject key identifier: 4A:19:D5:74:64:31:72:B6:B2:F2:61:20:36:C0:D3:7F:6F:D4:7B:12
Certificate issuer: /CN=35a5ed36b69523d0eca4d4c5db5264aace622984
Certificate serial: 0182F5F57D7042F21EB93A8D88A2E2C5F9DD
Authority key identifier: 35:A5:ED:36:B6:95:23:D0:EC:A4:D4:C5:DB:52:64:AA:CE:62:29:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaXtNraVI9DspNTF21Jkqs5iKYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/802dbe-850f-4cdf-a216-9d87dbfb84fd/1/ShnVdGQxcray8mEgNsDTf2_UexI.roa
Signing time: Wed 31 Aug 2022 22:11:22 +0000
ROA not before: Wed 31 Aug 2022 22:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8838
IP address blocks: 212.42.0.0/19 maxlen: 24
194.50.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:f5:7d:70:42:f2:1e:b9:3a:8d:88:a2:e2:c5:f9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a5ed36b69523d0eca4d4c5db5264aace622984
Validity
Not Before: Aug 31 22:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a19d574643172b6b2f2612036c0d37f6fd47b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:68:cb:18:0a:e2:82:81:c9:be:af:58:5b:
f8:01:cc:ef:de:4e:fb:74:51:38:d4:d3:39:65:10:
f1:c4:31:91:4d:8c:b3:b5:75:7e:12:e1:d4:0d:02:
26:c4:b4:c9:8c:30:7b:92:4a:25:4e:05:b0:70:a3:
d1:fb:8d:76:90:58:b8:10:fb:6b:24:08:af:1a:00:
69:9b:05:4f:b1:17:fd:40:6f:ff:31:17:9d:fe:fb:
74:c3:30:70:55:1d:dd:a1:16:5c:27:10:b7:b8:5b:
3d:91:3e:e1:5a:8c:41:fd:52:fc:aa:a5:69:f4:99:
7e:b1:f6:ca:6d:1e:60:6b:aa:1e:1c:ae:76:72:13:
08:31:bd:88:cb:83:17:30:5f:10:28:c7:3f:93:3d:
64:47:0c:83:ac:bd:9a:61:e4:4a:1b:7d:f1:fe:00:
6b:36:27:14:17:80:3f:5c:64:0d:37:f8:09:b8:2c:
1c:ce:e9:64:41:bb:dc:3a:19:67:4b:86:f5:43:79:
5d:c9:e1:ef:02:50:d1:70:cf:0e:89:4a:dc:7b:8d:
01:75:3f:ae:ed:ef:2f:5a:57:c6:d0:f8:2d:22:a5:
d0:b8:e6:81:df:07:de:70:fb:91:6c:c7:95:f5:74:
79:f0:eb:ce:7b:61:cf:12:4e:4e:81:4d:5e:b7:f2:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:D5:74:64:31:72:B6:B2:F2:61:20:36:C0:D3:7F:6F:D4:7B:12
X509v3 Authority Key Identifier:
keyid:35:A5:ED:36:B6:95:23:D0:EC:A4:D4:C5:DB:52:64:AA:CE:62:29:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaXtNraVI9DspNTF21Jkqs5iKYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/802dbe-850f-4cdf-a216-9d87dbfb84fd/1/ShnVdGQxcray8mEgNsDTf2_UexI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/802dbe-850f-4cdf-a216-9d87dbfb84fd/1/NaXtNraVI9DspNTF21Jkqs5iKYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.108.0/24
212.42.0.0/19
Signature Algorithm: sha256WithRSAEncryption
af:7b:01:7e:51:b7:4f:4e:7b:90:20:01:13:0b:cd:f7:e6:fa:
ff:d0:38:fc:d8:a9:35:9b:70:f7:85:e4:1c:f4:06:63:90:fb:
ae:91:e2:b3:17:3c:b3:3c:72:a0:25:4c:8f:9e:7a:45:d7:7a:
86:22:c0:3d:80:ee:ee:42:0b:10:aa:df:8e:ac:5d:86:f5:6d:
d6:83:26:91:75:44:e1:12:e7:f2:01:46:b1:6d:b4:55:7f:40:
58:33:45:a7:23:20:b7:4b:d2:f2:40:b5:b0:91:30:1b:83:e7:
19:dc:d7:6d:2e:36:5c:90:fd:95:61:c6:5b:5a:08:4b:f7:12:
d3:15:d9:06:fe:6e:ca:5a:1a:19:7c:05:29:e1:9f:c7:89:b2:
c3:86:c7:1b:b4:be:bd:c7:50:5b:83:1f:8c:1e:79:aa:02:b9:
c3:28:75:3e:79:2d:d2:ad:75:7c:43:a9:ce:a2:1c:f3:16:ce:
75:9b:03:9d:14:23:ff:3d:f7:19:79:6b:ea:2e:c3:fe:fe:6e:
0c:b9:d7:82:36:28:74:a1:7a:63:ba:54:b8:a5:db:ed:6c:a3:
0f:d3:db:50:20:22:4d:38:03:a3:03:14:e8:66:b0:36:3f:f0:
98:7a:78:33:39:b2:98:d0:5d:fc:2f:7a:3a:80:6b:7f:4c:ca:
5f:3c:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:02 2025 by rpki-client