Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Y0P8_9yT-dQSmhPY5jeeBT0R0q0.roa
File: Y0P8_9yT-dQSmhPY5jeeBT0R0q0.roa (raw, json)
Hash identifier: WRhHet5K5RZqKpGU3V2N2b+ar4hIHk6xDZRHGX0h1IE=
Subject key identifier: 63:43:FC:FF:DC:93:F9:D4:12:9A:13:D8:E6:37:9E:05:3D:11:D2:AD
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0184BF842CCE56A27B79DA56CB1827B8E2F3
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Y0P8_9yT-dQSmhPY5jeeBT0R0q0.roa
Signing time: Mon 28 Nov 2022 18:33:41 +0000
ROA not before: Mon 28 Nov 2022 18:33:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 194.150.205.0/24 maxlen: 24
194.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:84:2c:ce:56:a2:7b:79:da:56:cb:18:27:b8:e2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Nov 28 18:33:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6343fcffdc93f9d4129a13d8e6379e053d11d2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:63:62:5c:86:a4:da:e9:37:a8:ed:9c:4b:
04:9b:51:dd:1f:d7:86:f6:07:76:8a:44:61:a1:a5:
f8:ab:30:bc:a6:b1:3f:ff:da:06:e4:23:56:64:47:
1a:74:fb:82:01:4f:d7:64:b0:79:e0:55:86:bb:10:
7b:21:77:e7:05:53:6c:a7:4b:59:e2:3a:32:36:91:
bd:34:49:62:f3:9f:57:51:7a:a0:2c:20:cf:5f:b9:
47:a7:e4:fd:5b:61:36:3f:63:fd:58:d1:b3:a7:dd:
d2:0d:53:a9:01:96:9a:83:12:e6:bd:ac:c2:b7:4c:
1f:e0:3d:2e:ac:fc:5f:e7:58:a9:e6:80:e6:a8:9b:
71:da:60:ae:b1:f8:90:12:38:9b:ca:da:ba:e2:ce:
fe:c6:4f:52:40:11:59:42:d8:48:eb:19:1e:b5:10:
18:56:9b:24:a0:34:ae:8e:ba:a2:41:14:61:a6:1f:
46:b9:c7:69:a3:88:d2:6f:d7:45:56:7c:76:22:23:
84:73:60:ff:ec:58:4b:90:e3:7d:68:a9:7e:00:16:
17:81:65:77:5c:e3:e1:2d:bf:a3:88:5e:b4:3e:4e:
d7:87:c6:c8:3f:73:b5:ac:0d:4c:ae:2d:40:69:d3:
2f:9c:4d:7c:8f:ef:08:01:e9:b9:a6:e8:0f:66:09:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:43:FC:FF:DC:93:F9:D4:12:9A:13:D8:E6:37:9E:05:3D:11:D2:AD
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Y0P8_9yT-dQSmhPY5jeeBT0R0q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.205.0/24
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
25:df:01:83:04:b0:32:c6:13:26:09:03:fa:4f:aa:bf:8c:0b:
7e:75:f7:d9:2a:4b:45:4b:21:25:2d:9a:95:34:2e:40:58:80:
27:cb:3b:3e:9f:ab:4d:6b:aa:e1:7e:fd:4b:16:d8:4a:b0:ce:
65:72:4b:b2:63:41:e1:e7:98:01:50:89:4a:f5:45:dd:cd:74:
f4:9c:84:71:8a:6e:fd:7f:cc:24:e8:e5:1a:30:e7:48:66:41:
f3:af:56:9c:0d:14:40:05:bf:69:9f:63:be:49:2d:22:2a:d0:
c8:38:15:cd:6e:45:7d:0e:11:61:bd:87:dc:5b:d6:1f:3f:ce:
64:26:8c:ec:aa:c0:d7:ac:cd:43:45:eb:66:54:c7:45:a4:b2:
45:05:18:7d:fa:66:29:9a:e8:2f:c0:7e:ec:35:15:f4:8b:91:
f5:98:8c:2f:7e:d5:ce:11:7b:cc:6e:25:86:8c:10:e4:a1:1d:
0f:29:15:bd:21:34:3a:4b:de:62:ce:d5:53:b9:c1:03:92:86:
0d:3c:50:76:49:db:30:4c:a2:03:c1:94:35:b0:7b:b4:54:5b:
73:ca:43:15:2d:23:f7:7f:95:3d:cf:c3:8b:c8:07:03:c6:fb:
91:33:10:0b:42:91:fc:59:2a:19:47:e8:f5:84:26:8d:13:fb:
4a:01:30:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org