Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/YazeUzhja8--oHAzJHErrGJ25Ak.roa
File: YazeUzhja8--oHAzJHErrGJ25Ak.roa (raw, json)
Hash identifier: N82MOKVDB2ZCdFtabUaTiPMNLjqAiqhXLOfCLw4WlKQ=
Subject key identifier: 61:AC:DE:53:38:63:6B:CF:BE:A0:70:33:24:71:2B:AC:62:76:E4:09
Certificate issuer: /CN=eedd14c6aab0e8a4c9c2411d90fce10568c25ec1
Certificate serial: 01856ED4BBC18646478722515391BAAEE009
Authority key identifier: EE:DD:14:C6:AA:B0:E8:A4:C9:C2:41:1D:90:FC:E1:05:68:C2:5E:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/YazeUzhja8--oHAzJHErrGJ25Ak.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 194.5.16.0/24 maxlen: 24
194.5.50.0/24 maxlen: 24
194.5.54.0/24 maxlen: 24
194.5.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bb:c1:86:46:47:87:22:51:53:91:ba:ae:e0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eedd14c6aab0e8a4c9c2411d90fce10568c25ec1
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61acde5338636bcfbea0703324712bac6276e409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:c6:8a:15:4e:99:e9:0b:f0:73:b8:86:d6:
d4:18:3f:33:ed:13:c9:4e:0e:0d:e2:9c:12:6b:3e:
dc:19:77:fe:90:d3:4c:30:d5:21:16:f6:e6:3d:81:
0b:e6:5c:b7:d4:75:80:07:f5:a5:f5:ac:16:2b:c3:
98:98:7e:11:9f:4b:93:30:5a:7c:e6:49:7b:61:15:
20:4c:cb:94:73:eb:63:4b:8f:cb:c0:8e:8a:19:21:
0f:8c:81:a2:44:2c:31:c9:1b:13:fe:70:32:70:f2:
58:c7:2e:c2:fa:3e:b5:ee:d0:c0:35:34:88:3b:c0:
1b:53:03:56:d5:3d:2b:1a:9c:07:41:7f:f3:23:c9:
41:27:f0:6a:86:65:b7:6f:41:70:2f:4e:8a:c7:c9:
3a:65:08:d3:28:21:fe:02:13:1b:bc:1c:c8:70:ce:
74:33:f4:46:e5:65:3a:e0:fd:8f:fe:cd:f4:58:a9:
e6:5e:49:f3:24:35:55:b8:af:5d:a6:e1:e7:ed:8d:
ca:1e:51:51:97:41:91:26:35:9d:cb:b1:ff:5f:66:
44:ec:88:31:e2:7c:dd:98:3f:82:f8:10:bd:6b:8c:
2e:92:e4:2e:52:22:8d:7a:eb:35:31:11:88:87:8c:
2b:57:60:62:c6:ed:0a:be:a7:49:a5:6b:75:71:7d:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:DE:53:38:63:6B:CF:BE:A0:70:33:24:71:2B:AC:62:76:E4:09
X509v3 Authority Key Identifier:
keyid:EE:DD:14:C6:AA:B0:E8:A4:C9:C2:41:1D:90:FC:E1:05:68:C2:5E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/YazeUzhja8--oHAzJHErrGJ25Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.16.0/24
194.5.50.0/24
194.5.54.0/24
194.5.62.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c2:bd:23:8e:da:d4:e0:7b:d1:99:5b:41:59:a0:61:de:13:
18:6e:cc:0f:8a:66:6f:c8:0d:d9:08:00:e8:fd:bd:19:5f:5e:
ba:f9:03:76:72:a0:a6:31:67:3b:28:b5:23:a6:37:a0:db:a3:
ab:10:81:bc:be:0a:4c:d7:a8:03:84:46:8a:c3:cb:a1:94:98:
26:c5:70:52:d4:b1:72:e8:90:35:af:b1:0b:4e:b3:f9:c5:56:
57:55:0a:f3:e9:82:0d:27:6d:c4:72:ff:20:23:8b:73:b6:48:
21:28:9e:75:ef:fc:28:de:fd:92:4c:96:41:31:44:64:72:a8:
71:a8:47:b5:0b:e2:f6:76:4e:d4:07:2c:9a:9d:89:01:b9:c9:
cc:f9:20:af:0f:9f:a5:7e:a2:f7:7b:af:7c:55:24:16:5b:35:
af:23:55:51:26:25:8d:6c:24:24:cf:ab:b2:80:97:bf:1a:b0:
71:ae:12:06:b5:f4:a5:d9:52:50:d1:2e:c4:6d:84:30:7d:a0:
9b:fa:ce:15:99:97:11:19:d1:cd:cc:31:d6:e2:15:a8:1f:91:
fa:26:18:d9:4a:e8:56:82:b5:ca:85:6a:45:f5:d5:e5:87:f2:
25:1b:d9:fa:c6:9f:73:a4:2e:ec:8d:9c:b0:9e:cd:d6:df:69:
78:bc:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 15:45:37 2023 by rpki-client on console-fra.rpki-client.org