Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1-yxHf6p6xdvx4Tini2ueVcJPi3E.roa
File: 1-yxHf6p6xdvx4Tini2ueVcJPi3E.roa (raw, json)
Hash identifier: poBUyZtdLVYWjJU6fTkrsZeds5El71yzTdGJljXrFfc=
Subject key identifier: FB:2C:47:7F:AA:7A:C5:DB:F1:E1:38:A7:8B:6B:9E:55:C2:4F:8B:71
Certificate issuer: /CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Certificate serial: 018437448D5D04DD576586AFB8C39071B048
Authority key identifier: D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1-yxHf6p6xdvx4Tini2ueVcJPi3E.roa
Signing time: Wed 02 Nov 2022 07:35:50 +0000
ROA not before: Wed 02 Nov 2022 07:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 194.31.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:44:8d:5d:04:dd:57:65:86:af:b8:c3:90:71:b0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Validity
Not Before: Nov 2 07:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb2c477faa7ac5dbf1e138a78b6b9e55c24f8b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:26:c7:1a:08:b4:61:7b:d5:e9:58:88:91:
96:8d:52:fb:bd:5c:43:54:6e:d4:32:42:51:01:60:
ab:92:3e:6d:09:1b:c0:65:73:a7:3c:f6:ba:46:1c:
82:5f:e9:c3:4c:55:91:cc:90:b5:6c:63:25:eb:2a:
57:6e:81:d5:c3:cd:99:f5:36:30:c2:10:93:23:63:
69:56:1e:bd:55:ca:6c:09:dc:36:00:88:99:60:34:
aa:53:84:18:df:b3:b5:54:a9:ba:0f:fa:97:fa:3f:
8d:57:c9:7c:ac:1f:b9:6f:6d:cc:60:4c:ec:f7:3e:
54:3a:1a:46:e1:db:1b:f7:a8:9e:81:47:18:86:32:
5c:8d:07:cb:8a:b2:f3:b5:c3:50:72:43:57:ab:27:
6c:1e:f5:31:13:8d:8c:8c:2d:e1:5a:ec:2f:37:12:
4e:51:1c:fb:03:6b:5c:98:a5:9a:d6:06:8e:fd:c4:
68:d8:e2:b0:20:18:b7:2e:14:e1:7c:e8:6c:3e:dc:
29:cb:b1:97:f7:37:53:48:92:5d:3f:24:e6:cb:ef:
31:1b:3d:2b:40:56:c0:8d:82:c2:4b:ff:b5:50:b5:
38:72:fd:46:10:03:a0:97:9a:7d:68:a9:39:96:5d:
90:3f:c1:b8:01:b1:f9:0a:27:0d:7f:22:d4:e9:58:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2C:47:7F:AA:7A:C5:DB:F1:E1:38:A7:8B:6B:9E:55:C2:4F:8B:71
X509v3 Authority Key Identifier:
keyid:D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1-yxHf6p6xdvx4Tini2ueVcJPi3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.205.0/24
Signature Algorithm: sha256WithRSAEncryption
86:28:e9:dd:80:90:4a:4d:6a:6a:68:9c:39:9c:7e:a6:4f:8f:
17:fa:eb:9e:50:ea:6a:81:b8:bf:9d:a7:00:46:25:09:81:98:
37:ce:26:21:69:fc:db:b3:4a:2b:ca:71:01:56:9a:32:a0:7b:
8b:ee:cc:7d:dd:6c:3d:a8:13:32:a5:4f:cf:39:13:4f:a9:e7:
84:04:c8:14:23:49:d3:15:98:68:f7:40:c5:07:ac:c5:ae:ff:
ab:00:fc:7f:02:af:20:de:82:03:73:06:21:30:f1:fe:88:70:
54:12:46:59:40:b0:85:b0:42:21:86:bf:5d:92:31:80:7d:d1:
bd:4a:60:58:44:a1:f0:8a:8e:e7:c3:33:fc:88:8a:2a:e6:23:
5c:cc:99:18:c4:0c:60:d4:e9:d9:02:87:76:83:b4:39:f5:59:
5f:e1:9d:da:7b:a9:4b:36:a6:02:54:69:4b:13:05:12:38:f4:
29:ed:5f:3c:74:e0:cb:86:bb:89:b0:3b:f8:6f:3b:53:03:dd:
1b:77:06:ef:43:15:8b:e8:fe:51:83:21:a0:97:41:df:80:fe:
06:d2:d4:fd:19:6e:e6:06:0a:43:85:14:a8:aa:54:e6:aa:63:
95:47:71:94:59:6e:3b:67:9a:f1:30:ec:bd:ee:59:39:ae:78:
19:7b:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org