Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/c2n--gaXhxt4oCQDSvm4Y2H79lo.roa
File: c2n--gaXhxt4oCQDSvm4Y2H79lo.roa (raw, json)
Hash identifier: fClagmJNNSFpV2zrdLHJVdyK1dE7YwvQBl5+3/I+Z+k=
Subject key identifier: 73:69:FE:FA:06:97:87:1B:78:A0:24:03:4A:F9:B8:63:61:FB:F6:5A
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0183B1744F9F2384C97E8C9D5593081B7E4A
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/c2n--gaXhxt4oCQDSvm4Y2H79lo.roa
Signing time: Fri 07 Oct 2022 07:58:53 +0000
ROA not before: Fri 07 Oct 2022 07:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 194.150.205.0/24 maxlen: 24
194.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:74:4f:9f:23:84:c9:7e:8c:9d:55:93:08:1b:7e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Oct 7 07:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7369fefa0697871b78a024034af9b86361fbf65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:6d:e7:c1:9c:63:75:bd:a9:59:ce:63:6a:
88:9a:94:b7:fa:bb:eb:4f:6b:ec:2d:7e:8d:20:66:
43:70:9f:17:33:8f:a5:0f:06:cc:9b:c3:94:da:d6:
04:1b:53:3d:c8:98:ef:a9:33:b7:16:fc:ca:f5:d4:
56:65:46:b7:5f:ef:45:d7:8b:ba:25:ca:97:6f:8d:
84:56:72:9f:bf:e7:d9:28:a2:0c:8b:7d:e5:af:a0:
c6:71:f8:e6:de:84:37:21:dc:58:49:7e:d4:52:c9:
3e:89:10:57:6c:ce:79:a5:b2:c3:3a:4f:20:b7:39:
0c:ac:cb:6d:31:9e:95:b8:d5:ca:b6:f2:6d:8e:f4:
9f:35:f2:02:80:67:c4:bf:99:65:48:75:20:28:c5:
ec:17:d8:4a:30:41:f0:c7:49:80:7d:d0:c2:95:c3:
99:a1:d9:84:12:ef:16:7b:a4:21:ac:73:e1:17:c9:
5a:65:09:5a:3f:76:f1:97:f7:98:02:3a:58:da:9e:
17:d6:92:75:2d:69:9c:0b:78:5e:18:11:dd:31:4c:
a8:5d:46:7a:cd:df:d2:c6:b1:59:6f:c8:b8:9d:e9:
39:ef:bd:7b:69:a4:3d:89:d2:8a:09:ae:1f:b6:2c:
7a:62:df:22:bb:2c:ca:38:cd:b1:36:19:ab:ac:23:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:FE:FA:06:97:87:1B:78:A0:24:03:4A:F9:B8:63:61:FB:F6:5A
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/c2n--gaXhxt4oCQDSvm4Y2H79lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.205.0/24
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:95:9c:c5:c4:ab:dc:3a:77:30:6e:24:a2:7d:8d:09:a2:1e:
bf:dd:e6:30:79:a2:4a:10:70:62:6a:f5:a0:ce:5f:e6:d6:33:
c1:9b:cd:b1:3c:26:bd:df:a2:9d:cd:4c:dc:79:d9:f4:b2:b7:
70:bf:82:82:f3:51:53:99:3c:1d:05:f9:cf:9c:ff:68:be:10:
33:64:98:c9:f5:e2:da:06:b5:13:e8:03:11:aa:45:d1:62:84:
e0:01:61:39:b9:a4:ba:82:7a:f7:6c:46:41:8b:3b:ee:ae:b6:
d2:64:ba:43:42:8a:23:f6:d1:26:cb:40:b2:9c:c5:b2:b4:76:
c9:8f:66:fd:96:db:7c:25:36:f6:08:4d:87:60:6e:9a:c4:2c:
7d:7d:ba:dd:03:d6:a6:bd:9a:eb:92:98:44:3f:47:78:96:0a:
c8:eb:d2:1b:86:00:da:04:d3:65:14:68:50:1d:bd:bc:f1:49:
e1:d7:78:41:0f:05:06:33:ac:30:ee:a7:0a:a6:7c:40:02:7a:
b4:c3:7a:78:25:a7:00:f2:7a:08:97:12:d0:79:45:ca:25:49:
c3:af:61:7c:49:22:13:c5:23:54:24:fd:42:2b:de:af:5a:70:
23:6b:72:22:4e:a8:f6:ea:18:ce:0d:ce:82:83:9b:4b:10:d7:
77:71:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org