Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22b5b2-68e2-4de3-8cc3-685511f3b7fe/1/1-M7zcN3mnZghVdsfjfZynWfrApg.roa
File: 1-M7zcN3mnZghVdsfjfZynWfrApg.roa (raw, json)
Hash identifier: 4KebcOBVLGkgca0wzC+eorA0/rg5BA6gSkzqCQwCoVc=
Subject key identifier: F8:CE:F3:70:DD:E6:9D:98:21:55:DB:1F:8D:F6:72:9D:67:EB:02:98
Certificate issuer: /CN=636ece11b45bc67ff992abdbdb20cbf41edfe4c7
Certificate serial: 661985
Authority key identifier: 63:6E:CE:11:B4:5B:C6:7F:F9:92:AB:DB:DB:20:CB:F4:1E:DF:E4:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y27OEbRbxn_5kqvb2yDL9B7f5Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22b5b2-68e2-4de3-8cc3-685511f3b7fe/1/1-M7zcN3mnZghVdsfjfZynWfrApg.roa
Signing time: Sat 01 Jan 2022 02:56:14 +0000
ROA not before: Sat 01 Jan 2022 02:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 194.11.255.0/24 maxlen: 24
194.13.67.0/24 maxlen: 24
194.13.1.0/24 maxlen: 24
194.13.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6691205 (0x661985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636ece11b45bc67ff992abdbdb20cbf41edfe4c7
Validity
Not Before: Jan 1 02:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8cef370dde69d982155db1f8df6729d67eb0298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:fd:1d:3d:a2:64:f9:d7:d6:5b:7d:a2:fd:
24:49:f9:98:78:32:11:b6:83:58:24:fc:05:18:ab:
f7:af:ff:d2:8b:49:b2:cf:f5:e8:01:42:87:5e:76:
bb:f3:a7:9a:57:51:c5:03:bf:31:06:38:c9:19:08:
4b:23:8e:3a:e1:d1:3b:9a:31:02:08:b1:e2:f2:cd:
55:c6:bf:a1:ac:3e:99:56:d4:5d:8c:eb:dc:55:65:
a8:4c:81:b8:d1:8e:31:b0:3f:a2:fc:54:73:e7:9a:
8b:69:94:3a:9d:0f:b0:4b:33:ca:c2:63:25:9c:74:
74:13:1a:0e:3a:90:13:69:2e:59:36:cd:f7:c9:af:
f2:70:71:ac:49:d4:c7:63:73:20:72:2b:03:3e:1b:
7f:cb:b9:98:0f:a0:35:74:11:1f:6b:a9:9e:09:4b:
98:7b:9b:ce:57:76:7b:ad:cf:81:05:f2:e3:31:6d:
a2:25:dc:c2:ea:67:02:99:ad:be:b4:e8:39:6e:ef:
b0:f2:db:ba:6a:96:25:8f:47:ea:7e:ec:91:8a:74:
bf:33:da:37:8a:eb:3b:f9:4b:5a:03:84:ab:5b:4c:
0c:03:38:e4:ba:69:9f:e1:d7:4f:a8:37:56:0b:b0:
9c:67:f3:38:ea:97:e8:27:85:88:ec:61:c4:d2:a4:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CE:F3:70:DD:E6:9D:98:21:55:DB:1F:8D:F6:72:9D:67:EB:02:98
X509v3 Authority Key Identifier:
keyid:63:6E:CE:11:B4:5B:C6:7F:F9:92:AB:DB:DB:20:CB:F4:1E:DF:E4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y27OEbRbxn_5kqvb2yDL9B7f5Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22b5b2-68e2-4de3-8cc3-685511f3b7fe/1/1-M7zcN3mnZghVdsfjfZynWfrApg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22b5b2-68e2-4de3-8cc3-685511f3b7fe/1/Y27OEbRbxn_5kqvb2yDL9B7f5Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.255.0/24
194.13.1.0/24
194.13.64.0/24
194.13.67.0/24
Signature Algorithm: sha256WithRSAEncryption
62:da:c3:9b:46:63:25:47:6d:c4:8e:6d:99:53:04:9a:7c:fc:
0c:15:2b:19:e8:4d:cd:f6:c1:2d:a6:60:b9:2b:46:19:93:3e:
af:0d:9e:76:48:f3:80:a0:d9:c7:8a:88:fa:df:d4:9c:04:27:
86:7a:18:dc:78:c0:21:1c:9e:61:e5:71:23:c2:1b:5e:38:5b:
c9:9d:15:ec:42:cf:c3:88:4d:89:d2:2a:3e:77:d9:32:07:26:
17:c9:26:7b:39:3c:1a:21:97:ed:d1:bc:9f:a7:3d:35:1c:72:
ef:8d:26:f8:1b:e5:07:6e:4e:ca:68:ae:07:43:66:f1:df:7e:
cf:89:a2:1b:0b:5d:d9:eb:6b:a9:31:77:91:43:cf:ea:ef:9d:
ba:36:30:3f:e0:a4:34:c7:f9:c0:a1:4a:b3:b9:dd:d4:54:86:
8a:39:1b:66:2e:92:06:4f:b0:31:7a:a0:fd:eb:24:9d:1a:97:
0d:3e:9b:2b:53:0e:30:9e:50:7c:2c:51:e5:69:ee:6e:ec:b8:
40:56:74:6b:f9:a6:80:89:51:65:18:04:b4:22:80:0e:f6:f7:
23:dc:a2:44:f7:2e:16:76:ba:42:15:1f:e4:57:a4:bc:64:59:
54:59:6e:d1:0a:e5:b4:7b:23:5b:ac:71:e7:10:cf:62:af:aa:
b9:2b:68:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:49 2024 by rpki-client on console-fra.rpki-client.org