Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/B9yG5gQ3gTdLMs1s35rE8FEwCK0.roa
File: B9yG5gQ3gTdLMs1s35rE8FEwCK0.roa (raw, json)
Hash identifier: qPsYzEjNkHwlc5/qyUi//d74Eo9mR8f7JenLPULm2EU=
Subject key identifier: 07:DC:86:E6:04:37:81:37:4B:32:CD:6C:DF:9A:C4:F0:51:30:08:AD
Certificate issuer: /CN=dfb1419083cb31b1512ced3045c00e204f214e36
Certificate serial: 130BA5E7
Authority key identifier: DF:B1:41:90:83:CB:31:B1:51:2C:ED:30:45:C0:0E:20:4F:21:4E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37FBkIPLMbFRLO0wRcAOIE8hTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/B9yG5gQ3gTdLMs1s35rE8FEwCK0.roa
Signing time: Sat 01 Jan 2022 06:04:03 +0000
ROA not before: Sat 01 Jan 2022 06:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60855
IP address blocks: 194.5.173.0/24 maxlen: 24
194.5.174.0/24 maxlen: 24
194.5.172.0/23 maxlen: 24
194.5.172.0/24 maxlen: 24
194.5.170.0/24 maxlen: 24
194.5.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319530471 (0x130ba5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1419083cb31b1512ced3045c00e204f214e36
Validity
Not Before: Jan 1 06:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07dc86e6043781374b32cd6cdf9ac4f0513008ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:a5:25:b9:7e:72:eb:5b:55:61:1a:a7:e6:
25:15:f5:83:7d:f8:e8:97:f8:55:1f:bd:7b:e0:89:
ff:49:89:1c:c2:a0:cb:5b:2a:ea:2b:40:ae:fe:43:
03:d0:45:34:0e:3e:b3:de:55:71:a0:d5:af:c4:bd:
f8:ff:19:44:25:39:d9:b0:86:2c:07:16:60:d0:00:
2e:49:f3:8b:d5:f6:a6:3b:75:b0:19:86:75:2d:b8:
4a:1e:d9:a4:a2:da:4a:84:bd:19:e7:38:55:5f:a8:
e8:24:2b:11:59:21:8f:01:e5:2c:38:09:44:24:c2:
61:33:3e:ef:50:25:f8:80:5f:0a:8e:45:4a:a4:7d:
8f:88:1c:88:b1:6c:fa:0b:c2:6b:c4:d2:86:a2:75:
5d:ae:2a:d2:d0:40:34:e4:2a:c4:5c:a9:b6:a6:ed:
6b:2b:84:10:a1:a9:75:df:44:91:f9:6c:84:6e:e6:
97:38:7b:97:c7:f2:51:fa:cf:82:84:1a:8d:9b:f6:
7e:96:62:0b:93:5e:d2:8c:6e:65:3e:9c:8d:10:1a:
19:ba:36:af:c2:10:b9:6b:d8:81:e7:5c:b9:ef:e7:
60:55:61:70:e5:74:b5:b9:cd:b0:75:41:a4:34:62:
10:1f:08:4a:09:32:28:9f:3f:b1:e2:d9:4f:c9:38:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:86:E6:04:37:81:37:4B:32:CD:6C:DF:9A:C4:F0:51:30:08:AD
X509v3 Authority Key Identifier:
keyid:DF:B1:41:90:83:CB:31:B1:51:2C:ED:30:45:C0:0E:20:4F:21:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37FBkIPLMbFRLO0wRcAOIE8hTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/B9yG5gQ3gTdLMs1s35rE8FEwCK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/37FBkIPLMbFRLO0wRcAOIE8hTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.170.0-194.5.174.255
Signature Algorithm: sha256WithRSAEncryption
60:37:c7:9b:66:2f:85:4c:f3:5b:ff:c0:3a:98:44:ac:52:de:
14:fe:e2:21:af:d6:5a:eb:25:60:52:d3:dd:9e:d2:95:d3:56:
6e:16:2a:86:4e:bf:b8:56:1c:84:d1:12:79:e2:14:fb:d8:0e:
64:76:98:58:dc:bf:ce:34:26:1f:12:5e:14:f0:95:67:d8:c0:
fe:03:2d:e5:cd:22:e3:92:12:d9:0a:ed:e4:d9:4b:27:87:6d:
de:4d:a1:f0:3a:e2:22:0a:0b:e3:83:1a:a3:f2:fe:e4:67:57:
45:fc:32:1f:15:ff:08:20:e0:d9:34:73:71:a4:84:e1:ef:4e:
51:29:14:2f:91:b3:7e:f8:7f:86:d0:c6:81:7b:9f:eb:a0:e0:
5c:46:62:31:40:ef:be:45:b0:ac:c3:63:20:2e:78:32:2d:25:
49:79:43:4e:65:8a:41:df:76:86:f3:a7:c2:f8:e9:eb:bd:2e:
ff:8d:dc:66:c9:00:b0:ad:84:50:38:a7:11:75:72:59:a0:07:
79:aa:98:a6:ec:42:94:6e:f4:1f:9b:99:87:ef:37:e2:eb:01:
8f:b8:43:14:6c:d0:9a:00:82:5f:26:5c:8a:7d:a9:0b:b2:70:
fa:79:d1:72:35:9d:81:d8:fe:72:c4:62:fc:8b:de:75:c5:82:
07:a5:19:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:07 2023 by rpki-client on console-fra.rpki-client.org