Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269683-b473-4506-8882-ddd451ff42b4/1/nfIf5skgdfHiufe4Hz5ZxQxAT4E.roa
File: nfIf5skgdfHiufe4Hz5ZxQxAT4E.roa (raw, json)
Hash identifier: 1N/IWyAml8r/SfKonbKfu8phnaZMypxz0PDENRFdv7Q=
Subject key identifier: 9D:F2:1F:E6:C9:20:75:F1:E2:B9:F7:B8:1F:3E:59:C5:0C:40:4F:81
Certificate issuer: /CN=31b2640af6cfa9626b6f926a5af1fba6acee065c
Certificate serial: 0550F6C9
Authority key identifier: 31:B2:64:0A:F6:CF:A9:62:6B:6F:92:6A:5A:F1:FB:A6:AC:EE:06:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbJkCvbPqWJrb5JqWvH7pqzuBlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269683-b473-4506-8882-ddd451ff42b4/1/nfIf5skgdfHiufe4Hz5ZxQxAT4E.roa
Signing time: Sat 01 Jan 2022 11:00:59 +0000
ROA not before: Sat 01 Jan 2022 11:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31169
IP address blocks: 194.104.97.0/24 maxlen: 24
194.104.98.0/24 maxlen: 24
194.104.112.0/24 maxlen: 24
194.104.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89192137 (0x550f6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b2640af6cfa9626b6f926a5af1fba6acee065c
Validity
Not Before: Jan 1 11:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9df21fe6c92075f1e2b9f7b81f3e59c50c404f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:a7:45:bd:8c:0c:01:f5:54:82:0c:8b:f7:
49:38:84:57:c2:8d:7f:6f:75:f2:d6:fd:89:73:58:
7f:c9:2d:e9:42:0e:64:61:0c:cd:54:0c:db:5d:e0:
1a:f6:d2:f1:be:57:7a:c9:13:6f:b1:22:97:ac:7c:
1c:c1:95:07:4b:59:b5:a7:87:fa:e8:f3:be:09:8d:
ac:1c:36:7c:80:ab:e5:6c:ad:72:16:8a:27:58:eb:
37:4a:90:b3:e8:4e:b3:e1:67:a4:82:64:aa:66:5c:
22:06:23:f5:1a:06:d7:9f:d3:f9:d6:47:6e:3a:4e:
96:2b:37:ca:d0:7c:ff:24:13:41:f5:42:e2:74:70:
91:9f:52:d3:60:50:55:81:f9:f3:bf:f5:e1:2a:f2:
04:58:87:52:7d:97:6a:d3:e6:08:e5:11:d0:3f:f2:
55:bb:be:e2:09:cf:ad:f8:10:58:e4:97:df:b8:48:
f5:36:9b:98:05:ad:2c:ac:95:2e:68:22:72:e8:74:
1e:de:93:3b:3b:11:63:9c:fe:17:8b:87:d4:da:97:
d6:af:f7:b5:2b:d2:cf:11:2b:c6:a1:63:38:46:12:
af:03:89:18:f4:4a:c4:ab:ff:10:2d:48:4b:b3:84:
a2:27:2b:98:01:6c:43:9a:2e:9a:86:f4:c8:93:53:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:1F:E6:C9:20:75:F1:E2:B9:F7:B8:1F:3E:59:C5:0C:40:4F:81
X509v3 Authority Key Identifier:
keyid:31:B2:64:0A:F6:CF:A9:62:6B:6F:92:6A:5A:F1:FB:A6:AC:EE:06:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbJkCvbPqWJrb5JqWvH7pqzuBlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269683-b473-4506-8882-ddd451ff42b4/1/nfIf5skgdfHiufe4Hz5ZxQxAT4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269683-b473-4506-8882-ddd451ff42b4/1/MbJkCvbPqWJrb5JqWvH7pqzuBlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.97.0-194.104.98.255
194.104.112.0/24
194.104.126.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:26:84:c7:01:0d:3e:f8:cd:0f:37:b7:bd:ea:6d:ec:e3:a8:
3a:8f:8a:d4:70:17:13:6d:8d:23:4e:ac:20:32:4f:8c:df:04:
bc:7f:dd:69:8e:c5:5a:cc:c3:5e:3c:f9:68:83:7e:cf:5f:68:
34:b4:c6:67:11:34:d4:d5:4b:93:2f:34:cf:ba:76:28:79:eb:
18:d5:9d:c9:9c:6c:c2:2b:d1:11:89:4f:cc:a5:11:40:10:9f:
ea:9d:01:d1:85:22:37:a2:df:d5:6e:99:47:82:a4:ff:97:5b:
45:81:8b:df:fe:1e:ff:84:09:6d:11:36:af:14:7f:5f:9c:32:
52:67:70:e8:1c:a7:f2:1a:a5:74:d3:70:bc:2e:7e:74:78:01:
94:bc:f0:83:ff:d6:32:94:8f:17:8a:44:66:c7:fb:5a:c5:92:
55:2f:f2:54:15:d4:c7:16:27:d0:7f:01:b9:cf:8b:dc:16:fd:
38:d7:b0:14:79:91:80:4f:2d:2d:86:a0:5f:8b:77:08:d8:d5:
d1:ee:20:97:c6:8d:2a:1b:84:0b:92:08:40:c8:4c:8b:ed:14:
91:63:32:6f:5e:48:9f:0d:29:23:9f:3f:28:70:07:43:e6:31:
23:b5:7b:0f:dd:ef:65:19:4e:b8:df:fa:74:cf:04:c4:be:f8:
88:25:98:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:53 2023 by rpki-client on console-ams.rpki-client.org