Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2597bc-f557-4a86-bc11-b74e8bea3da2/1/nAWDEhBBc4Rvan2nYyj_a-06GE8.roa
File: nAWDEhBBc4Rvan2nYyj_a-06GE8.roa (raw, json)
Hash identifier: BhwEPLB+VQtLKF4xV4G0MTm5IBcaBzh2sWB+AV342R8=
Subject key identifier: 9C:05:83:12:10:41:73:84:6F:6A:7D:A7:63:28:FF:6B:ED:3A:18:4F
Certificate issuer: /CN=c81637fb436432b0bf54499f557b6197848547b6
Certificate serial: 01857246CB1675E43C7D171B6FBBF860B9F2
Authority key identifier: C8:16:37:FB:43:64:32:B0:BF:54:49:9F:55:7B:61:97:84:85:47:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBY3-0NkMrC_VEmfVXthl4SFR7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2597bc-f557-4a86-bc11-b74e8bea3da2/1/nAWDEhBBc4Rvan2nYyj_a-06GE8.roa
Signing time: Mon 02 Jan 2023 11:38:40 +0000
ROA not before: Mon 02 Jan 2023 11:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51219
IP address blocks: 194.104.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:cb:16:75:e4:3c:7d:17:1b:6f:bb:f8:60:b9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c81637fb436432b0bf54499f557b6197848547b6
Validity
Not Before: Jan 2 11:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c058312104173846f6a7da76328ff6bed3a184f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:3b:5d:a3:ff:3e:18:57:4b:82:3b:86:2b:
5e:50:63:c6:9b:dc:a4:a2:4f:f8:ec:70:f1:4c:22:
b8:61:12:53:ba:b0:02:ad:a0:80:56:61:4c:47:75:
ad:b1:c7:2e:2f:30:8a:9d:36:42:17:8d:34:8a:5e:
f8:c9:7a:69:de:d6:5b:85:c5:48:5c:23:34:ab:9b:
32:6e:5a:7c:1f:bb:50:a8:7c:42:6f:e8:b2:22:48:
e6:bc:e7:5e:5a:d9:48:70:04:24:c1:fe:15:ef:ec:
ed:5d:4b:67:ac:4a:e5:e0:b3:b5:ad:27:03:22:9f:
d5:ee:5d:05:af:bf:20:34:90:76:ab:11:c0:8a:f2:
f6:f2:f5:3d:f6:dc:8b:34:e7:35:1a:4a:33:b6:62:
0b:d6:92:e1:c1:24:99:f8:a8:bd:68:aa:5a:4e:f8:
55:85:46:9b:92:55:7d:c2:47:4c:07:4e:aa:7f:14:
24:64:14:41:e0:ba:c3:49:35:66:2c:01:f1:95:6a:
50:56:18:1e:3c:f4:aa:c6:20:b1:88:e4:5f:43:ef:
03:db:a6:3a:31:c4:be:10:10:cd:13:a3:14:c6:aa:
c1:1b:65:2e:54:ce:7b:62:1a:62:dd:62:2b:fd:4d:
04:ba:b2:f2:3b:59:bd:ba:90:91:55:10:a3:38:2e:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:05:83:12:10:41:73:84:6F:6A:7D:A7:63:28:FF:6B:ED:3A:18:4F
X509v3 Authority Key Identifier:
keyid:C8:16:37:FB:43:64:32:B0:BF:54:49:9F:55:7B:61:97:84:85:47:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBY3-0NkMrC_VEmfVXthl4SFR7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2597bc-f557-4a86-bc11-b74e8bea3da2/1/nAWDEhBBc4Rvan2nYyj_a-06GE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2597bc-f557-4a86-bc11-b74e8bea3da2/1/yBY3-0NkMrC_VEmfVXthl4SFR7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.230.0/24
Signature Algorithm: sha256WithRSAEncryption
08:72:1e:3b:a0:2d:ae:ba:75:cb:57:3d:51:ae:d9:da:b1:48:
fd:5b:81:8a:30:a2:2f:73:c0:ec:73:d4:46:4e:e6:e0:7b:32:
13:29:17:0a:ab:88:ca:1f:0e:34:d6:be:35:aa:79:b4:1e:b8:
e9:ce:d1:96:22:52:b2:9e:44:78:14:09:f0:5d:7e:1f:8d:46:
b7:76:25:4b:5a:12:15:e3:d7:4a:53:23:0f:16:e9:5a:7a:b8:
93:9a:4a:ce:9e:0b:79:3f:2d:29:07:21:46:69:63:99:27:ba:
29:3e:91:a5:92:26:7c:33:7b:ff:aa:9c:4f:a0:b0:0d:83:e3:
ad:81:25:2d:73:20:74:9b:3b:89:a0:6d:5b:24:49:cf:e4:46:
ce:b7:9d:cc:87:bf:04:0e:df:eb:1d:42:59:0f:84:a1:11:c3:
62:b6:d2:ca:1d:19:8d:b9:16:4f:84:ab:d5:fa:25:4b:a7:e7:
84:01:63:5f:1b:88:a4:6f:03:2a:0e:d9:bf:db:65:47:40:de:
e3:25:d7:1c:84:24:39:c2:9b:b2:1a:04:d4:b0:ec:57:68:e8:
00:68:07:4e:14:2d:48:d0:07:d5:a6:77:1a:ae:fc:72:34:13:
cc:4e:89:ba:f7:f7:2d:72:0a:f1:ef:fb:bc:5b:51:1a:a8:52:
ab:a5:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:42 2024 by rpki-client on console-ams.rpki-client.org