Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/cnHLjZbVgY1swDGsfS3-X1EyHUI.roa
File: cnHLjZbVgY1swDGsfS3-X1EyHUI.roa (raw, json)
Hash identifier: utx/Qzak2fvYQLB728/uFWvK3+HLXAYpXwaA8e9R8lk=
Subject key identifier: 72:71:CB:8D:96:D5:81:8D:6C:C0:31:AC:7D:2D:FE:5F:51:32:1D:42
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 03452B5B
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/cnHLjZbVgY1swDGsfS3-X1EyHUI.roa
Signing time: Sat 01 Jan 2022 01:55:00 +0000
ROA not before: Sat 01 Jan 2022 01:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140057
IP address blocks: 194.120.164.0/24 maxlen: 24
194.120.171.0/24 maxlen: 24
194.120.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54864731 (0x3452b5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jan 1 01:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7271cb8d96d5818d6cc031ac7d2dfe5f51321d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:d5:7e:ac:c2:5e:3b:16:b8:33:21:60:77:
cc:b5:c5:c5:c6:d1:10:c9:65:0c:37:97:52:5f:7b:
68:db:79:ef:61:54:0b:af:e3:d4:66:3e:90:fa:ab:
cd:78:83:20:fb:8c:de:db:7f:e7:41:02:4a:05:ba:
d5:d8:75:e6:0b:e4:77:19:d3:a9:fa:08:34:98:c1:
ce:c9:24:47:7c:0f:0b:be:1d:34:44:7d:e4:69:eb:
f0:f3:e6:fa:c8:bf:7f:03:d7:4b:82:87:3e:79:83:
06:b4:78:a7:46:d5:f2:9b:35:ba:13:57:35:a1:6e:
1c:e6:ae:f8:8a:f1:5c:b6:01:c9:30:1b:3a:6f:93:
22:37:fd:cb:ed:c3:0e:ef:cb:25:7b:3b:dc:2b:38:
0a:6e:21:d1:b1:42:e3:f7:22:da:3d:d7:9b:08:62:
11:23:29:2d:b6:4c:46:80:e5:f3:02:c4:e1:cb:bd:
f4:fa:56:25:b0:42:5a:10:51:09:08:30:d0:63:3e:
eb:0c:6a:9f:a6:9c:72:c6:e6:9b:4a:aa:5f:7c:1a:
59:52:81:99:51:48:6c:04:29:95:e3:85:ab:67:d3:
16:14:5f:2b:ca:51:68:20:18:53:a1:d2:5f:b5:cc:
17:84:7f:ad:50:c7:78:22:e5:6d:bd:ee:07:13:85:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:CB:8D:96:D5:81:8D:6C:C0:31:AC:7D:2D:FE:5F:51:32:1D:42
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/cnHLjZbVgY1swDGsfS3-X1EyHUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.144.0/24
194.120.164.0/24
194.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0d:62:b1:93:4f:73:22:35:eb:5d:21:d3:8c:7c:0c:b9:23:
fd:f2:22:31:6e:ca:de:28:a0:57:13:23:57:f6:3b:f9:6e:96:
ab:39:59:6a:80:04:c6:8c:b8:05:c3:68:d8:86:e7:72:e9:92:
6f:4a:97:d6:18:54:f8:bb:20:89:48:fa:73:4a:00:ac:89:6e:
3e:58:2f:5f:1c:9c:08:e6:bf:67:f2:f5:cb:21:83:19:40:f8:
c0:a7:ee:3d:aa:81:97:45:5a:0a:16:c7:9f:24:57:ff:fd:10:
a6:74:1d:dd:3b:54:67:d5:62:47:13:7d:d6:e1:2f:18:22:8c:
78:37:11:e5:8c:43:d4:bc:b6:c2:b9:b0:22:05:b1:15:96:0b:
30:33:ca:50:c9:00:7d:25:d8:92:26:32:5a:74:49:7f:2e:97:
18:c1:2a:a0:85:6e:d8:70:e0:5b:9b:22:e4:1e:55:32:4e:2b:
f8:3c:3b:56:3e:0f:c1:78:a9:80:eb:86:46:49:ed:ed:a6:bd:
09:0a:29:9c:31:14:b6:ac:15:c9:92:8a:e5:9d:61:80:86:c7:
ae:f0:15:f6:2b:e0:3e:e8:2f:40:7c:73:e0:59:6e:56:49:27:
a1:53:11:46:d8:7e:b6:4e:3a:ac:74:a2:a7:5c:33:5b:c3:f2:
3e:d2:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org