Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/vhICLjPK5gdhKjdFHZH_oJ7YfRY.roa
File: vhICLjPK5gdhKjdFHZH_oJ7YfRY.roa (raw, json)
Hash identifier: zZAwM15P1yg2rHM6ExCXPKOa/zA5oeK1mD+7UZWSx48=
Subject key identifier: BE:12:02:2E:33:CA:E6:07:61:2A:37:45:1D:91:FF:A0:9E:D8:7D:16
Certificate issuer: /CN=ddd8d5d3b29099b269261ee2714da1e9548c4632
Certificate serial: 01856F9DEFF70388299E235E9D54BD7C186C
Authority key identifier: DD:D8:D5:D3:B2:90:99:B2:69:26:1E:E2:71:4D:A1:E9:54:8C:46:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3djV07KQmbJpJh7icU2h6VSMRjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/vhICLjPK5gdhKjdFHZH_oJ7YfRY.roa
Signing time: Sun 01 Jan 2023 23:14:59 +0000
ROA not before: Sun 01 Jan 2023 23:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57549
IP address blocks: 194.104.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:ef:f7:03:88:29:9e:23:5e:9d:54:bd:7c:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd8d5d3b29099b269261ee2714da1e9548c4632
Validity
Not Before: Jan 1 23:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be12022e33cae607612a37451d91ffa09ed87d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:bc:50:24:29:01:7b:fb:a6:d7:4d:3d:75:
67:6f:14:6a:a3:be:02:c0:39:64:1e:c2:59:27:45:
5f:4d:e4:e7:56:ff:be:5d:0a:9c:5b:06:bf:5c:36:
55:e4:1a:4b:8c:a3:d2:38:b9:17:3b:1d:39:b4:99:
f8:ae:06:c0:e1:ee:91:3e:cd:02:dc:5d:2b:90:21:
b1:cd:c0:ea:d2:4b:99:b3:ee:e3:ae:01:94:32:9c:
50:ce:58:e0:fa:67:ef:14:e2:2d:5f:6d:97:62:31:
95:4d:3a:70:33:5b:4d:db:58:a1:f4:5c:57:56:46:
49:50:a7:c5:f1:ee:01:89:bc:2b:08:dd:c6:6f:f8:
a6:58:ce:42:af:0e:25:0b:78:ae:bd:07:29:82:e0:
38:1e:7c:f6:06:2b:76:3a:32:2a:4c:ef:f4:01:1d:
77:e4:24:ec:a7:04:61:e8:01:dd:9f:48:15:d1:8e:
48:e1:2f:1e:e7:42:92:14:a6:3e:36:0a:34:a8:83:
8f:b8:18:6a:92:db:be:42:a1:e3:5a:34:8e:71:2d:
9c:aa:6d:b3:b0:10:a7:5e:f2:66:4b:73:43:eb:60:
57:6f:21:b8:89:6c:25:26:f6:cb:7b:ac:5e:1a:16:
99:07:de:67:bc:fb:ff:66:fb:05:7b:54:e1:9d:79:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:02:2E:33:CA:E6:07:61:2A:37:45:1D:91:FF:A0:9E:D8:7D:16
X509v3 Authority Key Identifier:
keyid:DD:D8:D5:D3:B2:90:99:B2:69:26:1E:E2:71:4D:A1:E9:54:8C:46:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3djV07KQmbJpJh7icU2h6VSMRjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/vhICLjPK5gdhKjdFHZH_oJ7YfRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.233.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ca:ce:ce:a5:e5:c9:fc:d9:b2:17:0d:64:0b:a9:c0:9f:a2:
ce:61:e1:e5:3c:9d:90:a7:a3:ef:26:99:3e:53:3a:0e:b1:eb:
8a:a7:09:c4:91:07:3d:a6:91:b0:35:52:2e:ef:3f:7b:b2:9f:
7b:5e:e9:b6:91:ab:67:e9:9f:e0:c3:ed:5e:f3:5a:90:62:70:
65:f7:58:cd:c0:c6:70:c4:07:38:d5:d7:e7:ef:d5:9c:28:6d:
70:5f:e6:2f:23:b8:e5:eb:37:5c:c6:a8:2f:5f:d3:c6:88:ce:
70:38:8f:57:83:b8:bf:8f:94:ce:4f:2b:22:f2:c4:35:c6:c9:
55:03:f6:ac:5b:2f:1d:53:f2:01:04:4d:5a:67:f5:67:68:57:
4d:74:1d:84:2a:37:e2:af:c1:86:71:1e:73:cb:d7:b5:57:4a:
60:dd:9e:6a:18:b7:83:af:73:2b:c5:6d:9d:04:9a:ff:e8:f6:
2b:a9:60:bd:5a:00:b5:5f:8f:53:ac:4a:3c:ca:22:be:31:d1:
b3:df:73:66:f5:ee:f8:fb:84:5e:24:3a:4c:f4:15:6e:d0:5f:
dd:d5:99:b7:48:88:6a:53:9d:58:d2:ca:cf:45:ab:25:a5:6f:
bc:40:f0:f8:1e:26:6c:36:62:5e:13:44:b2:87:c7:fb:d9:8f:
be:e6:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 11:57:40 2023 by rpki-client on console-ams.rpki-client.org