Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8d0fe3-b736-4117-9af7-6663b5c73ae4/1/xEEwTIj7fnYtAfwm1vtcVqNbI40.roa
File: xEEwTIj7fnYtAfwm1vtcVqNbI40.roa (raw, json)
Hash identifier: 30+vR7naq8PbFyBR/lE6oT/Uoie8mArZoljy4G/6VeI=
Subject key identifier: C4:41:30:4C:88:FB:7E:76:2D:01:FC:26:D6:FB:5C:56:A3:5B:23:8D
Certificate issuer: /CN=48506de0329906cbb4797cce30dbaa7e19d54594
Certificate serial: 0528FE1F
Authority key identifier: 48:50:6D:E0:32:99:06:CB:B4:79:7C:CE:30:DB:AA:7E:19:D5:45:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFBt4DKZBsu0eXzOMNuqfhnVRZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8d0fe3-b736-4117-9af7-6663b5c73ae4/1/xEEwTIj7fnYtAfwm1vtcVqNbI40.roa
Signing time: Sat 01 Jan 2022 07:54:17 +0000
ROA not before: Sat 01 Jan 2022 07:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213403
IP address blocks: 194.106.196.0/24 maxlen: 24
194.106.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86572575 (0x528fe1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48506de0329906cbb4797cce30dbaa7e19d54594
Validity
Not Before: Jan 1 07:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c441304c88fb7e762d01fc26d6fb5c56a35b238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:c0:0c:f7:6f:12:6d:31:51:d9:12:f4:c9:
4a:d5:52:8b:44:16:dc:26:4b:c1:5c:83:f8:aa:f9:
69:83:8c:4d:d2:fe:f3:f1:14:de:85:ee:88:b1:c4:
ac:f8:92:39:d2:b6:bf:c8:6c:80:ac:57:f4:bb:72:
62:31:55:aa:11:a6:0b:f8:3d:be:64:e7:af:1d:6b:
92:b6:e4:5c:d3:d4:54:3d:f3:fd:dd:5e:15:d5:bd:
ad:9b:24:68:fc:4d:6b:6f:e8:01:2d:e7:07:0d:5d:
5e:b6:30:a9:1c:59:fe:65:71:af:2b:b5:43:4e:38:
b5:dd:7a:31:4d:43:88:c8:63:0d:be:b6:29:8f:9c:
64:71:fe:c0:33:14:5c:fd:9c:bb:9e:d5:19:81:35:
80:ca:22:e2:13:b2:c5:f7:3e:2d:95:3d:fc:09:7b:
57:ef:79:63:4e:79:ba:50:34:2f:fa:00:9f:3a:0d:
ca:be:d8:a3:c5:48:88:6e:11:fd:b1:80:dc:07:f5:
d8:9f:43:43:52:9c:0d:7b:26:47:a7:3d:b9:05:3a:
38:21:bb:aa:2a:ae:8b:fd:16:0a:b1:a4:ad:8b:28:
36:60:8d:8a:6d:f9:de:34:19:f5:e6:79:52:45:2c:
de:d4:18:d0:ae:3a:9b:3a:4a:9d:e2:df:a0:fa:2a:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:30:4C:88:FB:7E:76:2D:01:FC:26:D6:FB:5C:56:A3:5B:23:8D
X509v3 Authority Key Identifier:
keyid:48:50:6D:E0:32:99:06:CB:B4:79:7C:CE:30:DB:AA:7E:19:D5:45:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFBt4DKZBsu0eXzOMNuqfhnVRZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8d0fe3-b736-4117-9af7-6663b5c73ae4/1/xEEwTIj7fnYtAfwm1vtcVqNbI40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8d0fe3-b736-4117-9af7-6663b5c73ae4/1/SFBt4DKZBsu0eXzOMNuqfhnVRZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.196.0/23
Signature Algorithm: sha256WithRSAEncryption
87:3f:bc:17:b2:65:33:bb:9c:00:c8:9e:8f:c6:21:a1:c3:fd:
9b:3c:9f:b2:aa:2e:bb:53:4c:c5:34:a6:37:87:fb:f4:5f:6c:
c9:1d:a2:77:a0:89:d3:fc:15:f9:0b:f5:a2:90:8a:97:d2:12:
40:3f:1d:2b:4e:b1:be:d5:3e:cd:6a:c5:d0:9a:5f:50:44:a2:
f8:e1:9f:83:d9:cb:a9:1f:a7:1b:d4:b8:1a:2c:92:10:4e:49:
f8:70:7e:17:d0:e5:39:1e:6e:72:c6:b9:12:ed:5a:fb:76:97:
16:f8:4a:eb:bc:72:89:1d:9b:8c:2e:7e:20:70:6d:11:78:8d:
5e:4c:8c:5b:f9:f3:90:a6:ac:5e:ab:ab:45:2a:7e:49:7d:7a:
4e:59:85:9e:a5:3f:1a:eb:ad:39:2f:b9:00:30:22:03:cf:f8:
cf:8b:5c:27:43:d9:4d:01:5d:20:3e:e0:1a:65:3d:c0:0f:ec:
67:22:1d:4d:4b:ef:20:e4:11:da:4f:bd:29:a1:c3:a1:85:36:
53:86:0d:0c:c5:ff:6a:9a:c5:d4:dd:e6:5c:bd:97:78:82:fe:
1a:47:10:0b:12:7c:38:ca:a1:fc:be:b5:8c:74:7c:4e:87:66:
09:09:e0:d3:4c:8b:3b:ee:bc:27:47:1b:19:aa:0b:59:ea:a5:
43:59:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:40 2024 by rpki-client on console-ams.rpki-client.org