Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/PZdsWMlY8BxN-PpJio-D4vs6mbo.roa
File: PZdsWMlY8BxN-PpJio-D4vs6mbo.roa (raw, json)
Hash identifier: pN1z1ncKkFuiPdP3yuVz2TR2NaikN4e7pO1i9Qrx76Q=
Subject key identifier: 3D:97:6C:58:C9:58:F0:1C:4D:F8:FA:49:8A:8F:83:E2:FB:3A:99:BA
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 0183F6C50F64B8AC97DC8197661094910AD3
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/PZdsWMlY8BxN-PpJio-D4vs6mbo.roa
Signing time: Thu 20 Oct 2022 19:00:52 +0000
ROA not before: Thu 20 Oct 2022 19:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 194.50.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:c5:0f:64:b8:ac:97:dc:81:97:66:10:94:91:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Oct 20 19:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d976c58c958f01c4df8fa498a8f83e2fb3a99ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:31:89:2b:4d:e7:64:e9:b7:9f:b7:79:3d:
db:58:88:4f:d5:e7:61:dc:90:55:2f:e5:f6:5b:1b:
27:4f:04:a8:ae:a5:32:a5:9c:10:3d:df:9e:8c:7e:
d1:e5:26:eb:e8:7f:ee:7b:7c:44:2c:5e:8e:38:07:
50:0d:67:75:b4:6f:67:6c:88:f5:8d:c7:c2:bb:24:
0d:a7:d0:0f:fc:ce:4b:1e:45:85:c1:94:ed:ce:17:
16:98:17:17:c8:50:aa:bc:c2:b1:80:71:5d:1f:80:
51:a5:04:cf:e7:6d:ce:e8:c6:76:3a:09:f5:0e:88:
e2:a2:ad:be:5d:bf:3c:11:f6:c3:c5:88:50:6a:a0:
81:f7:df:ff:32:91:6c:3e:2e:07:2d:56:81:f7:9c:
42:7b:c7:be:1a:a0:ab:69:0d:d4:a6:ef:57:20:d0:
83:06:7e:5b:9d:0a:b8:17:ea:1c:07:9a:8a:87:11:
11:33:32:e0:9b:b3:5a:aa:4a:4b:99:1d:89:1d:87:
0f:e7:10:c6:fd:34:0d:5a:e0:de:77:ef:c7:7a:f8:
dc:00:e6:4d:d6:ef:a7:f8:01:b2:71:da:02:0f:bb:
fa:6f:f0:4e:75:50:d4:95:02:1e:a8:32:14:99:dc:
a7:ad:af:3c:b5:80:8e:e4:a6:c8:44:1e:63:45:d4:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:97:6C:58:C9:58:F0:1C:4D:F8:FA:49:8A:8F:83:E2:FB:3A:99:BA
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/PZdsWMlY8BxN-PpJio-D4vs6mbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.4.0/24
Signature Algorithm: sha256WithRSAEncryption
27:89:3d:a7:e2:ee:a4:04:24:b3:d0:3e:18:5f:06:9a:bd:9e:
0d:c3:21:a3:fd:cf:59:cb:8e:e5:1a:19:e1:7a:f8:52:bb:9b:
19:8d:94:5c:32:17:cc:73:c6:d8:a8:15:84:4b:03:f1:1c:a4:
f8:ef:85:45:05:45:38:19:d8:67:4f:b7:2d:81:8f:a7:93:7f:
de:3c:75:4a:a5:c6:89:48:f8:9e:b7:2b:1b:46:f0:b0:74:7e:
07:d7:06:04:36:a7:e0:83:3d:64:ee:0d:b0:bc:c0:50:78:bf:
d0:2f:e2:d3:a7:4f:ae:99:f1:59:1b:d6:84:0a:34:02:18:ff:
28:ba:36:61:c3:c9:dc:b4:28:7f:1d:0c:53:de:05:5d:1c:3a:
9a:c3:3a:97:ee:a0:0f:35:64:69:1f:24:89:8c:86:35:b6:1f:
07:d0:4a:82:2b:bb:05:33:44:3f:1a:65:b7:ff:2b:df:e0:19:
50:7c:33:c0:f1:57:0b:00:fe:c4:83:39:6f:03:56:c4:f1:75:
80:d3:d1:fe:b8:d9:1d:7e:62:6d:86:fc:d7:d9:dd:5f:2b:83:
8a:4f:93:07:8d:2b:83:95:c2:3f:cb:70:36:e9:d3:32:99:02:
87:3f:cd:cf:72:67:fc:e0:17:bd:e7:b4:6e:9e:45:63:44:f3:
e1:89:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org