Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bfc1ec-07e6-40e3-a3a7-9176979b5a81/1/c25ezgd4WjsFACBiy5eCkIz3i2E.roa
File: c25ezgd4WjsFACBiy5eCkIz3i2E.roa (raw, json)
Hash identifier: VcrtKM6G8fkgtcOzDCIpVTYCj2XyqTpPPxl28LbrYwQ=
Subject key identifier: 73:6E:5E:CE:07:78:5A:3B:05:00:20:62:CB:97:82:90:8C:F7:8B:61
Certificate issuer: /CN=0c637a8b6017e2aff0261e1e8cddd9df6d2c4173
Certificate serial: 070FA313
Authority key identifier: 0C:63:7A:8B:60:17:E2:AF:F0:26:1E:1E:8C:DD:D9:DF:6D:2C:41:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGN6i2AX4q_wJh4ejN3Z320sQXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bfc1ec-07e6-40e3-a3a7-9176979b5a81/1/c25ezgd4WjsFACBiy5eCkIz3i2E.roa
Signing time: Sat 01 Jan 2022 08:53:29 +0000
ROA not before: Sat 01 Jan 2022 08:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198610
IP address blocks: 193.168.47.0/24 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.168.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118465299 (0x70fa313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c637a8b6017e2aff0261e1e8cddd9df6d2c4173
Validity
Not Before: Jan 1 08:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=736e5ece07785a3b05002062cb9782908cf78b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:13:4a:23:1d:b4:61:9a:86:88:64:06:e0:
54:ab:b7:e5:09:81:64:3a:27:56:74:f2:f7:cf:47:
72:7e:63:8f:e1:5e:68:43:9e:a5:b2:ee:f3:a1:d4:
d1:3b:de:95:5c:9f:31:f7:cc:a4:0c:43:1b:a4:34:
cf:ba:6f:da:f5:5a:32:83:43:e0:2b:30:ff:cc:6a:
18:b1:ec:95:52:32:c0:96:ce:82:e9:7a:fc:a1:b7:
6e:4a:4a:bb:83:ff:72:37:e5:2d:fc:b9:b4:58:8d:
2c:e7:5c:53:fd:47:c5:b6:c3:ff:37:08:79:97:f5:
47:6d:7f:72:5c:f2:77:3a:f1:9b:b1:63:66:f8:7e:
f9:fb:83:55:58:e2:3a:9d:15:67:4e:48:13:60:ff:
a0:c7:92:a1:0f:31:be:26:05:0f:03:5d:e2:a6:94:
4d:1e:73:42:f0:80:fb:84:7f:37:1a:30:88:b0:49:
71:f7:c6:7b:22:04:99:34:14:fd:c1:70:13:09:22:
63:78:c8:04:64:7f:61:e4:32:87:f4:17:21:22:a0:
bc:04:52:7d:f7:42:ad:99:04:5d:e2:0c:08:fc:e1:
2f:9a:63:4c:3a:91:38:ce:c7:37:26:8d:91:a0:30:
de:25:9d:fc:b3:0a:bc:10:ca:d3:93:25:20:15:3e:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6E:5E:CE:07:78:5A:3B:05:00:20:62:CB:97:82:90:8C:F7:8B:61
X509v3 Authority Key Identifier:
keyid:0C:63:7A:8B:60:17:E2:AF:F0:26:1E:1E:8C:DD:D9:DF:6D:2C:41:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGN6i2AX4q_wJh4ejN3Z320sQXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bfc1ec-07e6-40e3-a3a7-9176979b5a81/1/c25ezgd4WjsFACBiy5eCkIz3i2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bfc1ec-07e6-40e3-a3a7-9176979b5a81/1/DGN6i2AX4q_wJh4ejN3Z320sQXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.46.0-193.168.49.255
Signature Algorithm: sha256WithRSAEncryption
49:8f:cb:0c:42:ca:86:03:f7:52:0b:69:b4:ec:29:91:eb:41:
99:e1:be:21:24:7b:8e:9f:a0:51:2a:8c:a0:81:9d:72:12:97:
4e:96:3d:a8:fa:ef:d6:5a:2a:d8:a4:75:f6:1b:b0:8c:1a:c5:
71:58:15:61:13:47:26:46:15:4b:83:a5:cd:1e:09:21:ee:4b:
27:f5:b1:69:3a:27:fd:b5:54:32:57:8c:62:cb:bd:22:1e:5e:
54:f4:e9:cf:56:93:d7:20:d1:00:e9:c3:86:3f:7e:83:73:9f:
c8:a7:1a:4c:09:57:46:94:74:37:4b:5f:94:13:1a:f7:78:3a:
c8:7c:be:16:08:2f:06:aa:00:2a:d3:c4:d1:03:46:c2:23:3f:
05:26:37:1f:5f:7a:2c:08:94:24:31:a5:c1:e9:bd:52:a8:14:
08:09:b3:e2:97:c1:80:df:5b:ec:c7:ce:8f:ca:8f:6f:49:fb:
62:1c:e2:2e:bd:79:7f:81:a7:ef:22:6f:46:2d:4b:b6:03:e6:
c6:d7:a1:df:9a:d0:24:c3:da:3d:8c:2a:de:26:e5:03:d2:f0:
49:08:cd:5c:bc:1b:65:e7:71:a8:25:a5:2b:86:01:b4:29:eb:
8c:17:2c:a1:ad:1f:69:84:d8:5b:ad:b9:d0:ba:3f:ab:fa:bf:
ce:6b:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:00 2023 by rpki-client on console-fra.rpki-client.org