Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/cKBqtNYnUHN7bn-VDcHSlFeBnXc.roa
File: cKBqtNYnUHN7bn-VDcHSlFeBnXc.roa (raw, json)
Hash identifier: ELvDlCUj1zSdO5glFWKLOaDHYC0wEPUkvaDL9eKDRF0=
Subject key identifier: 70:A0:6A:B4:D6:27:50:73:7B:6E:7F:95:0D:C1:D2:94:57:81:9D:77
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 03F69777
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/cKBqtNYnUHN7bn-VDcHSlFeBnXc.roa
Signing time: Tue 11 Jan 2022 11:59:07 +0000
ROA not before: Tue 11 Jan 2022 11:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.150.204.0/23 maxlen: 24
194.150.210.0/24 maxlen: 24
194.150.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66492279 (0x3f69777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 11 11:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70a06ab4d62750737b6e7f950dc1d29457819d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:da:35:8f:d4:11:9d:c9:33:b3:03:a4:3f:
dc:c4:0e:f9:5f:69:7d:83:e9:39:91:fd:f5:7b:0d:
d2:42:7f:a9:b6:e5:a1:63:e9:7d:c9:20:97:85:e3:
a6:e1:bb:b8:7f:4e:14:6f:14:72:5f:b9:83:39:0c:
76:fb:fe:a7:c4:2d:49:49:da:e9:14:13:17:03:e0:
cc:89:cd:dc:4d:5a:d9:c4:36:82:1c:cd:d8:33:4b:
1f:83:18:86:6d:f4:f2:8e:e6:d2:70:05:e9:14:6b:
49:cf:88:46:93:bd:b2:43:9b:5f:ec:67:5e:32:1f:
0c:4e:b8:c3:0c:f0:5f:5e:93:37:e8:e9:14:bf:3e:
68:42:ed:89:09:6b:a8:f3:c5:fe:df:4b:19:d0:f1:
99:0f:53:72:2f:73:d5:84:c9:72:34:46:65:f2:e0:
1f:22:1c:5a:fc:68:1d:ff:a9:36:ea:30:fe:87:70:
31:7b:8c:ef:16:d8:c8:a1:9c:54:ac:27:8f:b1:4c:
2f:ca:a2:45:cc:10:5c:fe:3c:dd:98:b0:35:dd:0f:
44:1a:75:9c:d7:3b:62:06:2f:ff:ea:a1:56:2c:ab:
30:07:ce:1c:19:eb:ce:f0:a2:60:1b:ce:95:e6:ac:
33:c3:65:a3:1a:5e:54:54:2a:d3:5a:bb:85:97:ad:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:6A:B4:D6:27:50:73:7B:6E:7F:95:0D:C1:D2:94:57:81:9D:77
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/cKBqtNYnUHN7bn-VDcHSlFeBnXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/23
194.150.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:ea:b8:5f:d6:a4:43:90:00:59:a2:49:e1:f1:42:1b:1c:e8:
81:ec:82:52:ba:e0:47:a4:1b:22:b4:2b:2a:a2:7a:8e:9e:bf:
3c:a8:37:bd:7d:58:e5:99:21:fa:97:f0:71:69:3c:de:03:c5:
3d:bb:1d:b8:74:8b:ca:8a:17:a7:80:09:7b:2a:16:88:18:32:
39:fb:a6:d2:76:44:3f:a2:f2:77:49:99:fd:7b:93:1d:73:9f:
48:96:1c:26:97:01:bd:17:5e:0f:02:fe:42:db:ce:4f:cf:64:
44:44:5e:09:0f:e7:65:49:29:a1:f4:af:70:74:51:67:fb:91:
28:98:86:30:49:17:63:fe:24:1d:08:be:e7:8e:70:96:1d:5d:
57:72:03:8f:a1:e9:46:f3:b2:6a:c1:b6:21:6a:da:4d:64:48:
89:5e:fa:1f:aa:06:83:df:2d:e5:9f:43:58:c6:0b:0b:48:92:
15:65:71:ce:2c:25:14:7a:f1:a1:86:7a:c6:ef:54:8f:a6:c6:
ca:57:49:9d:a9:52:51:e3:8c:05:42:48:95:14:18:6f:bb:2c:
01:fc:41:ba:ad:d7:b0:47:ad:96:8e:c1:25:13:ea:53:f1:f4:
24:73:41:46:52:07:4e:d6:1e:60:3a:d1:4f:1a:9c:a3:97:78:
a0:f0:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org