Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/5BMYcMaDTNz5thxP1c3U4-JTHOA.roa
File: 5BMYcMaDTNz5thxP1c3U4-JTHOA.roa (raw, json)
Hash identifier: KaXadVBy2oKBmxDYKHe545fPIh7Bu8d3YdUtioXx1qs=
Subject key identifier: E4:13:18:70:C6:83:4C:DC:F9:B6:1C:4F:D5:CD:D4:E3:E2:53:1C:E0
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 0185704BB01D0D4E0C648D86A9A19AC1944D
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/5BMYcMaDTNz5thxP1c3U4-JTHOA.roa
Signing time: Mon 02 Jan 2023 02:24:46 +0000
ROA not before: Mon 02 Jan 2023 02:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212921
IP address blocks: 194.126.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b0:1d:0d:4e:0c:64:8d:86:a9:a1:9a:c1:94:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Jan 2 02:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4131870c6834cdcf9b61c4fd5cdd4e3e2531ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:0e:b7:72:5d:89:de:db:40:77:fc:5d:c6:
88:27:ab:51:d1:13:82:e3:7a:fc:ea:13:aa:94:4a:
37:b2:ae:91:8d:ed:86:4c:7a:68:ca:5a:8e:69:05:
07:d4:24:46:8c:24:87:63:e8:d2:17:52:b7:b4:fe:
66:d8:9b:15:d7:4b:1f:cf:8b:1f:a2:3a:92:f4:e5:
c2:1d:25:1f:a4:33:e7:75:7a:e7:14:78:11:11:b5:
0f:89:8f:df:bb:63:a0:24:70:03:2c:cd:0f:db:fa:
32:be:97:7e:ba:99:ac:e9:6c:06:d6:a9:60:18:da:
11:1f:53:5c:82:1f:f7:97:bf:a4:38:80:8c:88:17:
40:33:70:d3:54:5f:a8:30:a0:65:97:55:4e:20:b4:
8b:0d:19:71:a7:ee:87:e6:a4:c1:7f:79:16:f7:27:
41:58:df:4a:74:1b:33:05:9a:0a:31:e4:d0:ec:b9:
4f:c0:b3:68:83:66:0c:49:42:6b:81:d9:5e:88:93:
87:fb:ec:cf:44:d9:59:28:fc:ee:b5:e6:5b:bd:fc:
16:66:bb:73:a2:a5:68:5d:07:8e:60:da:c6:e4:e7:
25:16:82:22:5d:1f:ee:86:31:da:30:aa:ac:43:80:
3f:b4:02:8e:40:bd:a8:4a:95:e9:6d:2e:e2:27:c3:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:18:70:C6:83:4C:DC:F9:B6:1C:4F:D5:CD:D4:E3:E2:53:1C:E0
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/5BMYcMaDTNz5thxP1c3U4-JTHOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9d:66:25:10:4d:ad:99:b2:c3:93:ed:da:29:38:f0:e0:06:
5c:36:41:ac:0b:bf:3c:03:69:bb:63:be:e3:ce:7d:08:19:b8:
b2:83:dc:c4:ab:c3:3a:a9:56:c4:2a:bc:18:42:a3:a8:a0:96:
29:5c:e2:32:2a:8e:b3:a5:68:89:28:6e:e4:01:07:fd:0d:23:
9f:25:c8:8e:59:07:2f:44:f0:df:08:0d:35:84:6c:25:ee:69:
46:e1:32:3e:24:32:82:93:9d:4a:59:15:06:f1:c1:86:dd:de:
f0:31:ce:78:09:5d:4c:53:c4:7f:07:c8:4f:dd:49:b4:f0:a8:
e9:75:d5:9c:e5:8b:4b:45:9e:15:93:d6:28:02:c6:1b:91:a2:
3d:6c:ec:1e:17:75:f7:81:57:f5:30:66:57:b1:bc:34:dd:fe:
58:47:32:2d:35:f0:97:13:55:6d:84:29:f7:9f:8f:2f:d8:5c:
63:9f:fa:bc:97:9a:dc:4c:77:2c:43:b9:99:2e:60:37:5d:c0:
dc:fa:a9:ba:d7:87:5b:5b:9d:37:fa:72:ff:16:61:dd:b9:c8:
6f:c7:f3:d6:1a:2b:6b:f7:35:f6:5a:45:4f:fe:13:1e:6f:84:
ad:d3:6f:c1:c9:a5:5f:9a:b6:eb:5c:3d:bf:04:bb:06:30:1f:
dd:dd:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 11:21:36 2023 by rpki-client on console-ams.rpki-client.org