Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/9RJQwFlw9o3YuKAgcfJPCDAHO2o.roa
File: 9RJQwFlw9o3YuKAgcfJPCDAHO2o.roa (raw, json)
Hash identifier: aDB0H+wc2tNWuLiDU3me2Y0fq3HfxSjBOyoINl4Dplk=
Subject key identifier: F5:12:50:C0:59:70:F6:8D:D8:B8:A0:20:71:F2:4F:08:30:07:3B:6A
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 018570304BF2887A26540A2C0849F81E045A
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/9RJQwFlw9o3YuKAgcfJPCDAHO2o.roa
Signing time: Mon 02 Jan 2023 01:54:51 +0000
ROA not before: Mon 02 Jan 2023 01:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 194.50.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4b:f2:88:7a:26:54:0a:2c:08:49:f8:1e:04:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Jan 2 01:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f51250c05970f68dd8b8a02071f24f0830073b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:7a:e0:9f:e6:ba:81:15:f4:ea:d8:83:fb:
41:b0:40:de:ae:b2:98:f8:54:4b:63:d2:5a:62:61:
b8:4b:f6:08:88:5b:01:a9:70:9a:06:c5:2f:4f:4e:
fb:f1:35:b1:0f:9f:2c:b4:e7:eb:e1:38:bd:b3:2a:
15:31:0e:43:be:76:42:59:74:37:88:d8:26:02:52:
44:a0:e7:00:58:2b:b7:f4:49:81:45:12:e5:6d:f1:
38:02:92:43:42:ae:91:4d:6c:98:8e:87:e7:20:a0:
54:52:9d:3c:73:56:58:05:e4:90:81:2a:84:dd:b3:
af:5b:64:c0:ae:d4:1e:a0:9c:b9:6b:08:c2:dd:08:
64:77:a1:b3:7a:ef:35:52:82:d5:f2:38:eb:5b:d8:
a8:50:5f:2b:a3:8d:dd:7d:05:93:a4:d9:dc:d7:7d:
e0:d0:c2:31:ca:0e:82:55:04:e6:0c:25:37:9d:d0:
5e:4b:e2:21:76:a6:c8:4c:78:18:c9:f3:dc:3e:11:
99:7d:24:4a:15:f9:78:ef:8c:9c:84:e6:f1:d5:b0:
f4:79:d3:df:2e:c2:bc:c3:ca:a0:08:b6:42:01:1f:
94:5f:6b:be:3a:8f:50:7d:23:de:9e:8d:ed:1c:3e:
89:5e:1d:8c:f2:96:3e:a5:c1:d9:78:36:9f:2d:b8:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:12:50:C0:59:70:F6:8D:D8:B8:A0:20:71:F2:4F:08:30:07:3B:6A
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/9RJQwFlw9o3YuKAgcfJPCDAHO2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.4.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b8:42:5a:10:a4:0d:a4:ba:91:b7:11:7f:17:77:ac:97:d5:
12:71:90:d9:b6:b4:16:ef:b0:1d:26:53:d5:4c:66:ae:5e:81:
ec:b2:75:9d:9e:33:ad:ba:8a:68:7e:86:06:86:32:12:47:77:
d2:8b:c9:48:be:55:3b:88:79:dc:fe:e1:47:85:e6:aa:db:a4:
dc:7d:4c:d9:22:a0:4b:a2:54:8f:03:55:11:c2:df:f0:a0:55:
02:08:62:5a:ce:9a:2e:c5:55:db:1d:6c:bf:6e:9d:6f:c9:6e:
64:32:45:1a:80:6e:d9:c1:f6:ef:f1:b2:c0:76:e7:19:13:5a:
10:68:0b:0c:a6:16:c8:c8:92:65:23:19:ad:7f:25:f5:e2:2c:
57:1b:32:a6:3d:0a:06:ba:a0:ec:ab:5e:78:d2:57:90:30:09:
43:6c:89:62:05:84:01:0c:40:81:76:78:14:0d:6f:e0:c5:c4:
96:2a:0b:57:cd:f5:11:8d:60:c3:7d:b6:e5:a7:45:17:59:1b:
77:22:ce:5c:1d:b9:80:7e:bc:8b:86:10:4a:51:a1:41:e1:c6:
d8:29:74:8b:23:96:12:5b:2f:0d:56:d0:49:25:84:af:49:d8:
3f:51:d2:7e:2c:c9:85:f8:73:e3:90:4c:4c:49:69:7d:8e:5e:
30:2a:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org