Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-Fkw4KVCUjSeQZKrc96suFwX23A.roa
File: 1-Fkw4KVCUjSeQZKrc96suFwX23A.roa (raw, json)
Hash identifier: 8myrXNszeBtj2fBufe89q0W0frC+lY11VoRGXpL7ki4=
Subject key identifier: F8:59:30:E0:A5:42:52:34:9E:41:92:AB:73:DE:AC:B8:5C:17:DB:70
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0184F2E897F3D182A32F3F7426DFA0B506A6
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-Fkw4KVCUjSeQZKrc96suFwX23A.roa
Signing time: Thu 08 Dec 2022 18:04:00 +0000
ROA not before: Thu 08 Dec 2022 18:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 194.53.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:e8:97:f3:d1:82:a3:2f:3f:74:26:df:a0:b5:06:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Dec 8 18:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f85930e0a54252349e4192ab73deacb85c17db70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:e0:6b:58:f8:cf:12:5d:44:34:f0:5c:18:
8a:14:47:fb:36:11:b2:a3:2b:db:79:4a:71:f4:37:
3e:42:6b:9b:00:f0:90:8e:46:5a:f2:3e:3f:84:d7:
70:45:ea:45:38:db:31:9a:d9:a3:1f:a4:05:d3:dd:
84:d4:01:7d:c6:bc:4d:57:e7:ef:14:44:6d:e9:86:
53:23:bd:5e:7b:bf:af:2f:42:94:45:fe:37:e4:70:
54:8b:44:1f:fb:6c:a7:df:2f:09:51:a3:ac:cc:9f:
85:f5:5a:02:d6:44:7f:68:6c:26:88:5f:7a:7b:8d:
ac:49:52:47:d7:09:8d:ee:36:91:38:48:c9:05:dd:
a6:9d:b7:09:b2:09:6b:e9:8c:c2:25:4d:aa:3f:77:
6f:e5:7c:fa:db:ce:75:62:84:41:b4:55:28:c4:15:
7a:95:ff:c0:64:d4:62:0c:e4:df:74:2a:3b:0a:54:
1a:9c:fd:80:54:19:61:ef:ff:ee:2e:22:bc:46:1e:
46:45:29:da:64:c0:00:32:d0:77:d9:d3:ab:ee:78:
2a:f9:47:3c:25:bd:56:68:16:5a:7a:ac:f9:df:fb:
69:47:72:9f:df:ab:a3:b0:87:e0:a5:b4:67:b2:90:
9c:46:61:3f:5f:e5:96:12:f1:8f:6a:ec:81:74:54:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:59:30:E0:A5:42:52:34:9E:41:92:AB:73:DE:AC:B8:5C:17:DB:70
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-Fkw4KVCUjSeQZKrc96suFwX23A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
00:4a:b3:9f:1b:6a:9b:f5:74:17:5d:55:27:51:e9:20:1e:e2:
f0:9b:ee:a0:c8:78:19:f3:dc:3b:c6:31:18:13:ee:55:36:28:
61:14:f5:dd:c2:4f:25:58:77:55:ee:02:1e:a2:73:66:ea:31:
04:38:b1:6b:79:8c:d5:d2:40:64:6e:0b:5b:67:29:e2:68:79:
3e:bc:67:1e:b5:6f:44:3f:26:41:24:60:59:07:e5:f7:49:f7:
50:2d:12:42:c4:be:98:87:89:be:31:2c:27:b6:ea:f5:9c:4a:
04:67:44:ca:84:12:4e:79:cf:3a:1f:94:46:3a:ba:b4:dd:05:
f2:bd:67:0e:8b:e6:21:93:ec:78:64:60:fa:05:f5:4e:b5:d8:
49:77:d4:57:00:34:5e:d7:e0:e4:cb:0c:90:53:b7:5f:6f:0a:
87:9b:77:b2:13:02:40:cc:56:e8:06:35:b2:b5:34:4e:d8:27:
4b:19:63:c0:00:f5:5d:b7:e6:72:36:28:fe:db:89:2c:be:87:
8f:2e:cd:b9:77:86:d9:95:b4:0e:21:cf:cf:14:5c:09:cc:3f:
10:e2:3a:13:c9:79:f5:78:27:db:af:14:6d:8c:a7:e9:e8:64:
49:df:d6:82:8a:a6:37:5c:7c:ad:2a:8f:29:d7:d5:59:55:53:
6e:0e:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:44 2024 by rpki-client on console-ams.rpki-client.org