Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/1-DNPzf-5AvXOvKYVJMexE_ypoi4.roa
File: 1-DNPzf-5AvXOvKYVJMexE_ypoi4.roa (raw, json)
Hash identifier: 8+510MnKZ5hq5obFET1vh4UgYs69qQhawqEQTn7dG1I=
Subject key identifier: F8:33:4F:CD:FF:B9:02:F5:CE:BC:A6:15:24:C7:B1:13:FC:A9:A2:2E
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 0183F6C50E2DC1DEECCF77A96B78DA023A5F
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/1-DNPzf-5AvXOvKYVJMexE_ypoi4.roa
Signing time: Thu 20 Oct 2022 19:00:52 +0000
ROA not before: Thu 20 Oct 2022 19:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142111
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:c5:0e:2d:c1:de:ec:cf:77:a9:6b:78:da:02:3a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Oct 20 19:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8334fcdffb902f5cebca61524c7b113fca9a22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:c1:20:a1:5f:94:8e:5c:d0:be:3d:22:bc:
83:dd:0b:bf:16:f4:f4:2c:3e:46:60:cf:8a:26:59:
49:1f:8f:cd:69:65:bb:34:41:8a:d4:e1:d9:63:68:
fb:30:32:79:d8:c8:06:7c:7a:20:38:3c:ed:63:81:
da:7b:4a:d2:8b:c7:12:a0:1e:a7:09:e5:51:57:b6:
ac:bf:f9:b3:82:81:0a:fc:84:13:59:0c:56:bb:40:
05:72:f2:da:20:cd:c5:a5:88:1a:4d:44:92:f2:70:
b6:97:49:03:3e:ca:be:cc:2e:03:4c:8c:84:d8:9e:
cd:d3:72:f1:5c:e4:2e:44:ad:c8:18:c2:bc:a7:c9:
bd:36:70:cf:07:99:54:6b:d7:e8:62:86:00:26:f5:
5f:3e:d2:df:d0:5d:ca:15:02:14:f5:4b:44:d6:af:
97:dd:cd:62:8a:b4:e0:74:3b:3d:29:b9:4d:c9:58:
90:69:69:e4:95:4f:0c:b7:e4:fa:b9:b3:ae:62:4a:
64:84:d2:08:19:1e:e2:42:44:c1:68:62:5a:b1:f0:
dc:9e:1a:15:d5:15:32:75:65:a8:d7:d8:97:e6:5e:
ff:3c:e5:cf:b4:f9:61:36:49:68:f7:e7:d7:09:a3:
76:0c:b5:e0:63:c2:90:b2:2c:a2:e3:a7:8a:48:98:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:4F:CD:FF:B9:02:F5:CE:BC:A6:15:24:C7:B1:13:FC:A9:A2:2E
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/1-DNPzf-5AvXOvKYVJMexE_ypoi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0d:3b:59:3e:1e:69:3f:61:6b:5c:43:81:8a:63:81:4d:23:
28:21:3e:79:b3:6f:55:ac:66:38:aa:f2:4e:a6:ac:73:ac:0b:
42:a6:cb:93:e2:bb:cb:d3:aa:6d:76:57:40:52:88:14:f5:88:
44:19:96:02:ab:e8:ea:a2:5f:59:33:f1:ff:a3:ca:1b:a1:fb:
e8:24:7e:eb:9d:2e:db:ad:d6:a8:ca:36:dc:87:4c:12:cf:de:
3d:33:0a:b8:bf:20:cf:5e:86:39:b9:8a:90:2a:26:31:3b:d0:
52:48:36:61:6e:19:05:dd:b8:e4:ad:72:91:e7:b7:65:15:3f:
12:e3:a8:1e:7a:90:b7:46:26:ff:97:93:90:96:71:aa:1b:d1:
07:77:bc:0f:9f:8d:11:31:c1:27:3b:d0:9e:73:1e:b8:02:e5:
64:bd:d4:56:4f:41:3d:25:49:56:5f:69:22:af:21:9b:c6:15:
a5:29:b2:cc:c4:ba:8a:a4:c0:f4:31:b9:0e:74:99:8f:f4:c5:
e9:59:ea:5f:91:3f:a6:3c:d9:35:5f:43:2a:f7:9c:48:40:68:
0c:ff:7e:68:e2:1a:07:92:2c:18:77:84:09:29:85:56:5c:86:
6f:54:d7:40:d9:c9:ba:c8:45:93:bd:3a:6d:95:5d:55:c0:dd:
66:c3:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org