Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/qXLOLf-ykObsbCVp6DSKf5aRzZY.roa
File: qXLOLf-ykObsbCVp6DSKf5aRzZY.roa (raw, json)
Hash identifier: 0lZmjIsFeJGZnCVp6dRilF7ie7A6iSFZKQyr0r0bkAI=
Subject key identifier: A9:72:CE:2D:FF:B2:90:E6:EC:6C:25:69:E8:34:8A:7F:96:91:CD:96
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C11426BB3636FC6A8411E1FCFA5BE
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/qXLOLf-ykObsbCVp6DSKf5aRzZY.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 194.150.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:11:42:6b:b3:63:6f:c6:a8:41:1e:1f:cf:a5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a972ce2dffb290e6ec6c2569e8348a7f9691cd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:e4:ef:6d:9b:8e:39:76:ce:6f:1e:98:c5:
2c:41:f8:94:fd:f8:f4:f0:61:62:aa:32:b8:38:2e:
e6:59:f0:56:1c:3b:69:a2:d4:11:66:88:d0:8c:16:
15:6e:4b:80:a7:17:dc:88:d0:94:2f:1f:c0:a6:44:
73:e4:91:8f:43:e0:da:32:28:37:ef:37:81:af:ad:
d4:5c:fc:09:89:a3:aa:d8:26:00:bf:7d:91:de:2f:
cd:a7:5e:3c:ea:96:9d:30:c8:60:21:9c:35:5a:cd:
4c:f5:d8:1d:6f:9c:12:c9:7c:e6:1d:3e:bd:0d:cd:
29:a1:2b:05:c0:ec:8a:a7:cd:4c:c1:c5:7b:40:91:
0a:13:af:64:58:6b:8c:96:a3:f6:e6:07:60:d0:cb:
9a:fa:7c:a4:5e:fb:89:3a:6f:6a:d9:1d:2b:30:3d:
9d:93:52:ff:ff:fe:04:f7:a4:05:fb:c3:aa:6d:a1:
d5:6c:ba:88:41:46:b1:30:57:96:82:c8:55:d9:f1:
1d:4a:c0:a4:64:52:b3:bf:64:7c:5a:b4:f8:d3:05:
f3:e1:cd:cc:b6:ff:45:43:6d:ba:3d:de:95:dc:f2:
84:4f:72:5d:71:c1:b7:50:54:fa:78:27:17:7f:63:
0b:40:d6:fe:66:34:1c:8c:42:99:8c:5c:11:d8:ed:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:CE:2D:FF:B2:90:E6:EC:6C:25:69:E8:34:8A:7F:96:91:CD:96
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/qXLOLf-ykObsbCVp6DSKf5aRzZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:de:5d:3c:d1:63:f4:1c:e1:8a:ea:fd:6f:da:9f:cc:a7:87:
eb:46:0e:9d:72:9d:a1:4c:c4:f0:61:78:9f:52:64:a6:61:9d:
c3:2c:d4:eb:1b:c3:2d:ea:6a:09:b7:72:e8:ec:d4:c8:4e:9c:
90:0e:61:c6:f0:77:88:9d:41:2f:01:d0:f4:64:2e:6d:3c:16:
46:22:bf:95:00:66:5f:24:2c:6c:3a:2c:c9:e3:07:90:86:fa:
12:6e:0f:0b:7b:54:7a:c9:1d:3a:40:84:ca:21:45:bb:3a:f9:
73:58:35:1c:6e:1a:dd:af:e8:c7:6c:fe:bc:fc:42:d7:67:6a:
8c:94:6f:d1:e6:fe:3b:0b:2e:f5:c9:41:d6:4d:2f:20:d0:ca:
85:56:d0:0d:53:78:92:27:d6:a5:cf:0e:e1:59:07:f9:0b:ea:
49:10:d4:9b:03:54:5a:4c:20:41:3d:09:7f:08:fa:98:f2:4c:
29:48:d3:f7:4b:0c:ea:8d:4e:36:33:f2:e3:ef:ce:52:00:c7:
13:b1:ef:45:fa:ca:72:50:0f:40:85:08:ca:05:67:60:03:f6:
6d:0c:34:0e:f5:3c:6a:07:29:24:3e:20:56:84:52:7e:ec:a9:
2e:c5:f8:ce:47:c4:57:2e:d3:50:f3:73:a8:de:35:4f:df:ad:
60:df:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org