Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/kYT9pe9to42Ct3KW9LCYMu0Z_wI.roa
File: kYT9pe9to42Ct3KW9LCYMu0Z_wI.roa (raw, json)
Hash identifier: BIIPicEv9bxpU8aSwN0+p4I2P5Jes/jpjUqs33+HnPA=
Subject key identifier: 91:84:FD:A5:EF:6D:A3:8D:82:B7:72:96:F4:B0:98:32:ED:19:FF:02
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 01857030494FCE37C5F4EBCF7DA4234F4908
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/kYT9pe9to42Ct3KW9LCYMu0Z_wI.roa
Signing time: Mon 02 Jan 2023 01:54:50 +0000
ROA not before: Mon 02 Jan 2023 01:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140885
IP address blocks: 194.50.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:49:4f:ce:37:c5:f4:eb:cf:7d:a4:23:4f:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Jan 2 01:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9184fda5ef6da38d82b77296f4b09832ed19ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:3d:31:5b:74:2d:81:ad:ec:2c:c7:ca:35:
62:8e:ed:02:07:26:49:5c:13:5b:73:21:3f:b2:24:
d0:ea:53:51:ee:0a:c7:b1:87:57:06:3e:a9:c2:9c:
31:a2:d0:fa:7d:d8:46:79:e3:57:1f:78:b1:bb:12:
50:fc:de:bf:c4:d9:bc:56:53:09:1b:c7:77:7a:0c:
09:d8:d8:2c:6e:90:ee:bb:3c:e3:fe:43:67:cf:eb:
51:4c:be:83:72:bb:0b:5e:60:1e:07:e7:c9:b2:43:
ac:ff:6a:55:7b:58:86:87:7e:05:d5:0f:64:53:68:
f1:72:a3:02:16:a0:e5:df:40:44:2e:b8:ae:fc:21:
76:05:83:13:b4:f4:e3:74:14:cc:3b:e9:ca:67:0b:
f1:83:36:0f:25:fd:7f:79:bd:2c:c2:87:c7:ce:34:
e0:e6:18:3e:1f:3c:6e:79:42:78:78:c3:e8:38:59:
4c:65:31:f5:98:54:75:cb:29:0f:19:5d:b2:66:63:
50:95:30:5b:e9:8c:61:12:96:4a:02:a7:2e:98:2b:
c1:5e:33:9b:53:9b:07:f5:cc:52:9f:0a:25:10:6d:
18:fc:05:18:18:be:5c:a4:63:31:a7:75:ed:4e:5f:
cf:f2:8e:a6:b2:b6:e0:13:7e:04:1c:7c:72:08:d2:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:84:FD:A5:EF:6D:A3:8D:82:B7:72:96:F4:B0:98:32:ED:19:FF:02
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/kYT9pe9to42Ct3KW9LCYMu0Z_wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.5.0/24
Signature Algorithm: sha256WithRSAEncryption
80:12:a0:33:71:e1:76:c6:bd:f7:17:e4:e0:68:df:42:c1:28:
99:29:7b:79:17:a4:0a:0c:40:82:5b:fe:d5:ed:5f:bc:fb:3f:
e0:a6:cf:a7:9e:8c:ac:63:87:b1:c7:30:22:16:7a:b1:b3:b6:
81:21:56:13:df:a5:9c:5b:c6:ea:79:f8:63:49:58:d1:06:dc:
c1:c7:36:21:0a:bf:8e:2d:4e:d9:4e:82:1f:95:5a:ae:9f:5d:
5d:90:15:c0:8c:01:26:59:df:a3:b9:eb:13:68:12:ce:9a:7c:
f4:c2:25:28:68:57:69:12:fe:69:61:c4:28:8c:b2:c3:2f:5c:
84:29:b1:d3:08:c2:50:65:a3:1a:45:d7:48:0a:5f:68:c3:76:
10:09:6e:e5:ed:1c:22:78:9f:a8:b5:dd:be:a8:08:7a:fd:ee:
9d:d5:54:de:d5:08:97:ec:c6:c6:6e:ec:51:1d:c0:77:2c:3c:
4a:b7:44:e2:af:8b:17:33:26:ed:c3:95:15:2a:a1:cb:e2:f1:
8a:c6:af:44:5d:29:0d:5a:b1:53:61:c9:58:20:3f:15:b3:4b:
03:c6:3f:69:4c:9e:44:bb:af:83:48:ca:1a:6a:5e:b7:47:54:
89:ba:71:13:ac:37:c8:60:4f:c5:d4:a6:2e:12:0d:96:5a:57:
09:42:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org