Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/44bb80-d483-4a4a-ac63-98dece02099c/1/bKeZ9TTmi2QboqMkJfT03t5F6WY.roa
File: bKeZ9TTmi2QboqMkJfT03t5F6WY.roa (raw, json)
Hash identifier: 6j1b9okFSLPD2wAQorAt8Iep7NapjsmWuAa4llAZEvc=
Subject key identifier: 6C:A7:99:F5:34:E6:8B:64:1B:A2:A3:24:25:F4:F4:DE:DE:45:E9:66
Certificate issuer: /CN=09517b6de23db5f75b296e60fbe41869274a615f
Certificate serial: 018572E8004D5AEE4C42552E663D15D861BD
Authority key identifier: 09:51:7B:6D:E2:3D:B5:F7:5B:29:6E:60:FB:E4:18:69:27:4A:61:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVF7beI9tfdbKW5g--QYaSdKYV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/44bb80-d483-4a4a-ac63-98dece02099c/1/bKeZ9TTmi2QboqMkJfT03t5F6WY.roa
Signing time: Mon 02 Jan 2023 14:34:45 +0000
ROA not before: Mon 02 Jan 2023 14:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205836
IP address blocks: 194.34.63.0/24 maxlen: 24
194.34.62.0/24 maxlen: 24
194.34.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:00:4d:5a:ee:4c:42:55:2e:66:3d:15:d8:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09517b6de23db5f75b296e60fbe41869274a615f
Validity
Not Before: Jan 2 14:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ca799f534e68b641ba2a32425f4f4dede45e966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:c3:70:2e:4d:64:7b:ea:60:cb:a7:76:51:
c4:69:1f:6e:fa:e2:7c:e3:36:90:24:29:cf:83:44:
2a:fd:ca:20:19:b4:58:e5:90:f9:b6:44:48:db:59:
fd:1c:8c:26:39:a1:a9:9f:f7:80:4f:7a:0c:a9:b1:
22:c4:cc:dd:65:2b:a5:d1:e6:1f:6f:40:9f:92:a7:
f5:7b:34:26:20:ff:af:19:b9:08:5e:7b:57:64:36:
f8:c9:06:85:71:5a:2d:4b:65:12:d0:bb:37:8b:d5:
89:56:ff:1c:d9:e8:e9:e5:bc:9c:43:f2:93:d0:38:
a4:e3:58:77:58:6c:4d:67:f3:a8:99:5a:27:b2:7c:
f9:ae:ba:4d:68:15:d0:cb:75:c6:01:a3:d7:ef:ae:
50:d9:d3:26:04:46:ca:30:b0:0e:9c:de:29:a7:da:
9c:21:06:d5:67:c8:ca:62:80:06:3c:84:21:dd:12:
e9:0f:a0:5b:fb:3d:a7:c3:84:7d:69:88:ff:b6:46:
71:8c:21:88:c3:87:6b:65:3f:3f:19:43:67:b0:7b:
a5:2f:c6:eb:b5:a3:76:34:dc:97:da:06:60:9b:f6:
fb:95:c6:7a:3d:70:15:49:74:ec:b4:30:ac:2f:42:
b6:25:3a:f4:6d:0f:6f:1e:39:cb:fb:db:a1:7a:5a:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:99:F5:34:E6:8B:64:1B:A2:A3:24:25:F4:F4:DE:DE:45:E9:66
X509v3 Authority Key Identifier:
keyid:09:51:7B:6D:E2:3D:B5:F7:5B:29:6E:60:FB:E4:18:69:27:4A:61:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVF7beI9tfdbKW5g--QYaSdKYV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/44bb80-d483-4a4a-ac63-98dece02099c/1/bKeZ9TTmi2QboqMkJfT03t5F6WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/44bb80-d483-4a4a-ac63-98dece02099c/1/CVF7beI9tfdbKW5g--QYaSdKYV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.62.0/23
Signature Algorithm: sha256WithRSAEncryption
77:3e:f5:54:3d:47:a6:3e:8f:b7:59:63:bc:df:13:80:63:16:
eb:d2:6f:83:d6:b9:c6:f2:84:c6:48:51:74:0e:a3:5b:c1:7f:
68:0c:ea:e8:dc:2d:88:70:d0:43:d9:7a:23:68:67:92:89:1a:
53:0d:fc:c4:bb:e7:f1:49:86:63:65:c5:8c:0e:e7:b1:70:41:
c2:2e:93:8a:e3:8f:e6:48:58:5e:df:d2:29:10:bf:7d:2d:4c:
af:47:f9:39:fe:30:96:41:9e:3f:c1:be:a6:d3:c9:d6:ec:94:
e7:90:df:2e:f3:ef:17:88:6b:02:9e:fb:0c:d6:17:48:07:91:
06:c7:19:7d:8b:7e:e6:2e:ce:13:3e:f4:b8:26:ff:26:c7:12:
c2:83:4f:84:d7:05:d1:90:f0:e2:69:d5:b8:09:ea:ef:63:de:
04:16:e0:c1:21:02:71:58:94:6d:73:7f:59:80:96:a6:39:03:
8f:e6:ff:31:3b:b8:e4:f3:e5:b5:59:58:fd:cf:81:33:b8:48:
4e:53:51:6c:f0:61:fc:eb:72:8a:10:42:d5:47:2f:a7:3c:ba:
7a:a1:7c:a3:da:fe:9f:67:e6:eb:72:a4:97:2d:9e:79:a7:80:
e9:89:50:59:7f:be:44:73:43:cb:2b:6f:66:11:bd:89:68:0b:
ae:a0:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 15:37:11 2023 by rpki-client on console-ams.rpki-client.org