Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/nYFc_ftltrhxGQ7rkiyK7XVshtc.roa
File: nYFc_ftltrhxGQ7rkiyK7XVshtc.roa (raw, json)
Hash identifier: M4hKpjB0LsUbBxlqtsl3S1VINtQR0XDjKTajT+5S6hw=
Subject key identifier: 9D:81:5C:FD:FB:65:B6:B8:71:19:0E:EB:92:2C:8A:ED:75:6C:86:D7
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 018570304AACFFEC54BCD5D973B82CA92558
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/nYFc_ftltrhxGQ7rkiyK7XVshtc.roa
Signing time: Mon 02 Jan 2023 01:54:51 +0000
ROA not before: Mon 02 Jan 2023 01:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206995
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4a:ac:ff:ec:54:bc:d5:d9:73:b8:2c:a9:25:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Jan 2 01:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d815cfdfb65b6b871190eeb922c8aed756c86d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bf:75:7a:ee:fb:15:87:4e:b8:00:ff:71:e9:
de:19:6d:47:1d:9a:2b:01:e5:2a:dc:4e:b1:36:28:
f4:7a:2a:e2:ee:4a:34:43:63:f1:f4:d7:18:c4:4f:
37:3e:4c:ae:5b:87:e4:30:34:15:92:d7:5a:22:9c:
56:31:ff:56:03:75:ef:c6:ea:aa:84:d1:7a:9d:dd:
b1:0b:18:57:02:ec:ea:bc:2d:75:03:2c:c0:85:9f:
48:fa:66:82:5a:b5:14:4c:11:a5:da:69:19:72:d4:
29:e7:2c:41:aa:15:b9:c8:aa:0b:8e:33:5c:b4:12:
78:fa:05:63:49:d0:ec:d9:74:8f:ed:74:00:03:8a:
9d:9f:62:b7:97:05:d6:b7:4c:2e:a3:de:1c:4a:a9:
93:1c:ed:b1:e0:88:cf:1e:a3:b8:7e:ef:1c:6d:17:
6f:be:8b:32:0a:c9:8d:83:14:7a:9d:2e:42:af:87:
e5:a5:7c:29:57:39:0b:84:e4:ff:93:fd:1d:d4:c1:
50:af:ca:3c:fa:bd:71:42:47:46:ee:8c:35:14:a4:
0c:72:4f:0b:1b:0c:f1:43:6d:e7:27:d6:24:52:89:
37:3c:3f:5b:e6:b3:96:26:94:e3:4b:82:37:59:7f:
28:0c:28:22:2b:1b:7d:63:79:b2:b2:fd:e3:39:9a:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:5C:FD:FB:65:B6:B8:71:19:0E:EB:92:2C:8A:ED:75:6C:86:D7
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/nYFc_ftltrhxGQ7rkiyK7XVshtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d9:a4:79:ef:86:0f:6d:42:b8:24:67:8a:f5:3c:14:84:a7:
93:e8:33:87:ab:27:e5:73:82:c2:bb:cd:be:42:f3:00:02:09:
42:9b:d9:cc:52:06:8a:f0:99:6e:04:81:16:45:8f:00:5d:db:
8a:ee:36:9f:17:1e:c2:6a:ac:22:3f:22:bd:5f:91:30:a7:03:
8b:73:5c:8e:4d:24:94:a8:80:16:ed:41:0d:da:d9:4b:0f:df:
3f:91:28:31:22:d2:cc:be:3c:6a:f1:27:6b:98:f1:1b:97:22:
4e:4c:50:83:a2:57:70:8d:a3:17:4e:3d:20:b4:27:d2:96:8f:
9f:2c:ec:34:0e:66:ed:09:1e:dc:15:90:11:13:8d:b5:e1:8a:
60:8b:67:4d:d6:b5:92:cc:53:c5:e2:cc:a6:ee:8b:c9:9d:75:
3c:c3:85:0a:a2:c6:55:84:3a:6e:d1:33:8a:16:6d:6a:31:8e:
c0:d3:68:e8:19:73:be:22:8c:71:62:33:60:55:65:a8:a1:67:
d0:96:38:94:d6:ce:e3:a8:53:64:2f:5b:4f:b4:d1:66:01:81:
ac:46:7e:f5:9f:82:36:f4:bc:70:65:46:f4:3e:3a:93:e8:f9:
e9:64:24:a6:5b:16:7d:64:01:f4:32:74:fb:7e:63:ac:f9:41:
8a:ca:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org