Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/pVfFk-OqIrFxqBbF89XuBSrfxDE.roa
File: pVfFk-OqIrFxqBbF89XuBSrfxDE.roa (raw, json)
Hash identifier: JHp1zr/z3jatErorOCErh8S3dtLS2y7wUnCJg6xBsl0=
Subject key identifier: A5:57:C5:93:E3:AA:22:B1:71:A8:16:C5:F3:D5:EE:05:2A:DF:C4:31
Certificate issuer: /CN=0701ffb8989389ae28cb332c88dc9d399d98aea3
Certificate serial: 018CC6B8B99F2A238AE0D392E1E2B5D80C90
Authority key identifier: 07:01:FF:B8:98:93:89:AE:28:CB:33:2C:88:DC:9D:39:9D:98:AE:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwH_uJiTia4oyzMsiNydOZ2YrqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/pVfFk-OqIrFxqBbF89XuBSrfxDE.roa
Signing time: Mon 01 Jan 2024 20:30:44 +0000
ROA not before: Mon 01 Jan 2024 20:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197653
IP address blocks: 94.185.64.0/23 maxlen: 23
94.185.68.0/23 maxlen: 23
94.185.66.0/23 maxlen: 23
94.185.70.0/23 maxlen: 23
185.118.16.0/23 maxlen: 23
185.118.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b9:9f:2a:23:8a:e0:d3:92:e1:e2:b5:d8:0c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701ffb8989389ae28cb332c88dc9d399d98aea3
Validity
Not Before: Jan 1 20:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a557c593e3aa22b171a816c5f3d5ee052adfc431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:9c:67:88:29:83:89:bc:cf:00:56:19:d8:
fe:9e:b8:27:76:bf:0a:55:32:3e:2a:32:04:c5:07:
a1:ee:0d:3a:05:19:85:95:0f:b7:87:16:97:32:bb:
e2:87:1c:ad:b0:b2:e7:e4:36:ef:bc:c2:76:c1:9b:
02:91:b0:95:ee:5b:54:0d:8b:1e:fa:24:80:24:5d:
9c:49:31:da:20:f6:21:a1:06:21:2d:95:08:4d:18:
cf:a8:66:a6:76:e4:9d:c2:4a:68:89:41:c5:a3:ba:
17:3c:f1:5b:5a:b6:3e:18:c3:ba:c0:7c:c2:b1:15:
9b:0a:61:34:0b:ba:09:a0:ec:fb:52:52:d1:fc:7f:
ab:69:45:cb:4f:77:c7:e6:8e:ad:93:18:73:c1:83:
9d:05:58:89:6a:bf:44:e5:08:d7:c0:03:c0:5c:23:
30:66:1b:31:95:72:96:2a:98:70:40:b7:dc:bd:f3:
53:9e:83:21:b9:db:9d:7c:d9:31:a8:64:f0:ec:78:
0e:98:7a:8d:60:f0:8a:62:37:9d:f0:87:5d:25:dc:
bf:a3:a0:da:e4:53:f2:8c:d4:26:b8:be:5b:d4:31:
d1:ed:28:b9:ad:13:01:33:67:49:ac:f8:4e:a9:33:
f1:b1:7c:41:4c:78:8f:71:20:c5:46:20:90:a2:e6:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:57:C5:93:E3:AA:22:B1:71:A8:16:C5:F3:D5:EE:05:2A:DF:C4:31
X509v3 Authority Key Identifier:
keyid:07:01:FF:B8:98:93:89:AE:28:CB:33:2C:88:DC:9D:39:9D:98:AE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwH_uJiTia4oyzMsiNydOZ2YrqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/pVfFk-OqIrFxqBbF89XuBSrfxDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/BwH_uJiTia4oyzMsiNydOZ2YrqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.64.0/21
185.118.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:60:4e:ab:87:b1:44:99:01:bf:72:4f:bc:39:14:2a:3b:cb:
11:c7:1f:cc:2d:4d:e1:da:6c:68:3d:13:4d:35:6c:a1:d2:66:
0e:31:f5:fc:ce:c5:33:64:68:3b:fc:39:5e:18:91:de:e4:ff:
78:07:0e:7d:63:78:89:ea:7a:39:58:52:64:0e:15:97:b9:2c:
c3:5c:08:0f:71:23:82:d6:a0:c1:4b:c8:4e:f6:be:e3:4c:b9:
f0:26:da:5e:39:bd:32:81:77:d7:87:ef:4b:af:aa:ed:73:eb:
94:91:01:96:6c:8f:43:36:00:ba:71:be:fc:7f:20:19:c0:e7:
2e:06:00:bd:de:04:49:67:c9:b6:68:85:24:2a:d3:ba:e5:e0:
16:b1:48:0b:fc:b4:fb:5d:a1:6b:c0:97:99:48:d4:04:48:fc:
56:da:b7:8d:53:e8:45:18:22:01:65:f0:4c:5e:ec:fa:da:b4:
1b:e7:83:3f:4b:b7:50:46:84:c3:f1:68:45:88:96:94:64:87:
b3:cb:fe:3f:c9:e5:64:1b:1f:72:5e:86:8c:3c:62:70:e8:a1:
18:40:c3:5d:d4:92:02:1e:86:57:b6:3c:28:6e:e1:8c:d6:d3:
22:3e:f4:33:c2:87:d6:4e:32:12:a3:4a:d8:dc:60:1f:b9:63:
1b:a4:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 13:24:18 2024 by rpki-client on console-fra.rpki-client.org