Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/UfkkVzXYCiVj8dRz_CaoKgMwjp8.roa
File: UfkkVzXYCiVj8dRz_CaoKgMwjp8.roa (raw, json)
Hash identifier: +feChwb962TWS3faU2Nx564jJvkbo+lkIXew3vgGEwY=
Subject key identifier: 51:F9:24:57:35:D8:0A:25:63:F1:D4:73:FC:26:A8:2A:03:30:8E:9F
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83450535B4F02293D224C58D41EDA
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/UfkkVzXYCiVj8dRz_CaoKgMwjp8.roa
Signing time: Mon 02 Jan 2023 14:34:58 +0000
ROA not before: Mon 02 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47570
IP address blocks: 94.100.0.0/24 maxlen: 24
94.100.0.0/20 maxlen: 24
94.100.7.0/24 maxlen: 24
94.100.8.0/24 maxlen: 24
94.100.11.0/24 maxlen: 24
94.100.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:34:50:53:5b:4f:02:29:3d:22:4c:58:d4:1e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51f9245735d80a2563f1d473fc26a82a03308e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:ad:0d:b6:a4:8d:dc:ec:1b:34:09:ee:35:
6b:61:7a:6f:0a:27:2a:65:19:0d:21:0a:0e:31:fc:
9a:c8:48:07:6a:ae:be:9b:08:b1:10:52:ad:8c:96:
20:05:ed:9b:1a:c0:52:d5:e7:8f:ab:40:22:4e:87:
78:c5:98:49:26:f2:db:24:0d:6d:15:ef:b1:cd:ae:
ee:aa:27:a1:de:ec:f9:67:6b:9d:90:88:5b:fa:a0:
b2:62:2a:65:a6:85:92:c0:63:e5:5f:dd:7f:6d:c8:
05:d4:a7:db:0a:7a:3d:c7:d6:f0:3e:9d:97:68:04:
2e:a7:96:39:d9:28:f4:df:de:e9:1a:76:7e:34:cb:
d6:06:2b:c6:3d:1e:a0:d3:c4:28:bd:a5:cc:b6:cb:
83:a0:fc:92:a8:aa:bc:b1:81:15:ce:1b:61:75:04:
76:1e:c1:07:23:4e:2c:58:cd:e3:70:7a:7d:07:e8:
df:4b:71:00:bd:ca:06:e7:93:0d:60:51:ae:36:a4:
88:9c:f8:b8:aa:f4:ab:ed:79:94:1b:61:d7:35:bb:
d0:40:87:95:7e:24:8c:d5:41:01:bc:fe:28:2c:05:
87:f6:93:16:56:30:bd:47:51:f7:2f:09:a7:89:26:
d8:09:41:37:48:77:38:01:68:9e:2e:8f:45:a3:a3:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:24:57:35:D8:0A:25:63:F1:D4:73:FC:26:A8:2A:03:30:8E:9F
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/UfkkVzXYCiVj8dRz_CaoKgMwjp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.0.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:45:57:1b:c5:3a:51:1e:b9:8c:46:c6:bf:8e:43:d4:2d:29:
9d:a2:82:b2:ba:c1:70:4f:41:94:34:e5:ca:3f:53:28:69:7c:
74:f9:2d:53:d0:75:96:5e:60:88:67:0b:41:23:54:93:2e:41:
40:0d:bf:69:df:13:cc:b9:06:82:4e:da:de:e9:2f:45:63:b1:
a9:7f:6d:50:b4:95:c6:ac:10:53:a2:75:9b:d8:cf:a9:39:dc:
29:06:62:ad:ce:be:53:59:42:c6:35:9b:73:1d:2a:48:f2:7c:
af:68:c7:9f:b8:6e:ef:cc:46:a4:22:91:29:35:f8:94:11:50:
a4:9e:2d:af:7b:4f:ce:5e:ee:e6:0a:2c:df:6b:f7:93:61:4b:
83:3c:1a:59:03:11:66:c9:7b:a6:63:8b:8a:26:bc:2f:f9:b2:
7b:f1:18:bb:50:b7:82:9b:55:c1:5b:ef:e1:26:a8:4c:aa:9b:
7a:9f:5f:b9:8b:53:d1:af:28:95:e9:8d:38:e0:e4:04:fa:ff:
a4:25:b5:01:b5:79:b4:37:26:60:ea:a0:bb:22:7a:9e:14:c5:
a0:1e:65:18:0f:2c:65:df:6b:ce:db:66:a8:e7:16:d6:0f:cb:
21:9f:58:a9:f3:4c:b8:aa:79:73:a5:1f:f1:24:3e:c1:6e:e3:
6f:88:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org