Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/vPQFyL4V8PCpl405GQgDTayMrQ0.roa
File: vPQFyL4V8PCpl405GQgDTayMrQ0.roa (raw, json)
Hash identifier: be6KBQiEY5n+ZHP2grrFe1Qtpq8OvLVfeioK9vLZzSk=
Subject key identifier: BC:F4:05:C8:BE:15:F0:F0:A9:97:8D:39:19:08:03:4D:AC:8C:AD:0D
Certificate issuer: /CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Certificate serial: 018340CD41338664D740FCDF85C5C8FC1302
Authority key identifier: D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/vPQFyL4V8PCpl405GQgDTayMrQ0.roa
Signing time: Thu 15 Sep 2022 10:58:56 +0000
ROA not before: Thu 15 Sep 2022 10:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 194.31.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:cd:41:33:86:64:d7:40:fc:df:85:c5:c8:fc:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Validity
Not Before: Sep 15 10:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcf405c8be15f0f0a9978d391908034dac8cad0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:89:38:f6:7b:d2:28:09:59:ae:af:e6:cc:
70:4d:6e:26:61:b8:68:09:7e:a2:08:39:5a:ca:65:
d9:ac:6f:1b:80:18:43:58:66:f1:3c:27:b7:cf:87:
e2:ce:b3:7c:f5:8a:2e:0c:d4:65:d7:7c:75:e1:40:
11:4c:e4:98:40:8c:3c:6f:b0:8c:5e:b3:7d:32:3c:
94:0d:3c:85:5b:49:b1:15:5f:00:15:09:54:04:67:
fd:c2:b4:90:d4:38:5f:54:1f:3a:3f:e9:c1:a2:f2:
6f:93:be:89:a9:cb:00:9e:ec:fd:5f:d4:22:17:c3:
44:b6:c7:b2:9b:ed:6e:75:b2:5d:e8:c1:cd:37:5f:
82:6c:03:44:f9:a4:b8:09:79:f5:10:b0:5d:b4:b8:
0d:e9:e1:61:fd:32:94:ce:84:d3:81:2f:fe:8c:b9:
bc:90:ac:62:48:94:8a:6c:57:45:31:9b:db:0d:b5:
61:b3:c9:fa:39:5b:6b:2e:b9:4b:4b:7b:11:f4:1e:
33:65:a4:ef:46:e2:e1:18:f6:48:2d:08:45:59:c8:
ce:7a:b3:5b:a0:97:1a:96:e8:bf:bd:77:1f:93:92:
ec:30:4b:6c:0f:0a:e8:d9:c0:21:84:d4:c6:37:26:
74:08:07:c8:c1:42:8d:ef:b2:fc:b3:4f:25:89:a5:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F4:05:C8:BE:15:F0:F0:A9:97:8D:39:19:08:03:4D:AC:8C:AD:0D
X509v3 Authority Key Identifier:
keyid:D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/vPQFyL4V8PCpl405GQgDTayMrQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:48:17:3a:36:02:98:8b:6d:14:77:05:25:ab:2e:cc:2a:a2:
e5:44:4c:67:6b:16:f9:0d:32:f4:c4:ae:bd:d1:60:50:7b:82:
e8:37:80:8b:82:ff:36:48:ba:ee:5d:f3:91:8d:da:f0:71:a2:
11:34:81:34:cb:1f:99:71:6b:53:56:01:ae:17:64:f6:ec:a5:
4a:31:a6:20:52:33:ec:b5:7f:c3:34:49:7e:8f:6f:50:32:7e:
9d:fc:b9:7f:0e:e6:36:22:5f:a4:01:03:2a:9a:d5:38:35:c2:
6a:a4:04:3a:01:09:de:8f:bd:07:a3:80:1c:d1:d2:b0:67:70:
1d:d4:29:a7:7b:a1:f4:04:41:fd:2e:9e:70:0d:49:82:39:31:
01:ff:6b:72:9d:ba:63:40:aa:aa:e2:92:83:87:9f:6e:de:c7:
75:3f:0b:52:e9:88:49:3a:3d:1d:39:fe:47:45:55:55:a6:d6:
3f:53:d5:ad:82:0d:bb:9d:c1:77:cc:37:05:07:78:49:d3:7d:
5a:66:0e:9e:4f:f8:a0:22:82:ac:19:92:ba:34:ce:b8:20:e2:
e3:e8:40:cd:d4:a8:4c:32:6f:60:d8:b6:24:7a:07:6a:f6:7d:
dc:34:ba:8e:30:e3:09:d1:9c:27:84:d9:70:5a:8c:49:35:ff:
53:e6:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org