Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/4V7hwKfKBDIny7Rs7Knn7-NMmp8.roa
File: 4V7hwKfKBDIny7Rs7Knn7-NMmp8.roa (raw, json)
Hash identifier: v83Iwy+9FxtL0iy3LnrMDZK3LUOALmEsiwhR/+S1nzU=
Subject key identifier: E1:5E:E1:C0:A7:CA:04:32:27:CB:B4:6C:EC:A9:E7:EF:E3:4C:9A:9F
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 01856CEF457D8FE6E61E63A0F5CFF2401A3B
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/4V7hwKfKBDIny7Rs7Knn7-NMmp8.roa
Signing time: Sun 01 Jan 2023 10:44:58 +0000
ROA not before: Sun 01 Jan 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12722
IP address blocks: 194.34.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:45:7d:8f:e6:e6:1e:63:a0:f5:cf:f2:40:1a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Jan 1 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e15ee1c0a7ca043227cbb46ceca9e7efe34c9a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:4d:a6:ad:33:35:39:9a:a3:62:29:18:aa:
4b:d0:bc:ae:bf:6b:e6:94:54:29:8a:06:b2:c6:e2:
63:17:44:ff:e2:f7:78:f6:f6:f7:c3:39:69:b5:e2:
fc:5b:9b:95:ef:a1:13:44:75:86:32:7c:54:15:9e:
3c:f4:6d:00:7c:5e:f2:82:02:d6:5b:69:9a:52:c0:
34:a8:b6:b4:c7:12:5c:ae:55:28:75:a2:99:16:06:
95:cd:62:bd:de:4a:59:5a:df:5e:2c:b2:d0:0d:dc:
6e:18:5c:e1:e6:ae:82:01:82:9f:91:c9:a0:13:bc:
e9:e4:4e:db:5f:30:8b:05:de:1d:67:1c:06:5b:d3:
88:b3:3e:1f:4a:ec:01:77:fe:3c:8e:e8:b0:05:3f:
2c:27:f4:9f:24:8c:8b:6d:0c:35:3b:3e:07:6f:91:
3d:f6:0b:e8:98:6f:b0:68:61:bc:da:81:84:a5:8e:
28:c1:d5:52:c8:11:fc:aa:4a:b4:9a:7e:5a:e4:bd:
3f:a2:13:7e:ae:c8:e5:43:4c:0d:fb:0d:80:19:e5:
17:99:73:4c:90:61:ff:31:1d:31:5d:28:7b:48:45:
3f:bc:fe:13:9d:d7:d8:e2:f3:14:94:83:f4:98:3d:
fe:30:9c:d7:ee:13:4d:fe:58:f2:da:8f:31:fb:20:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5E:E1:C0:A7:CA:04:32:27:CB:B4:6C:EC:A9:E7:EF:E3:4C:9A:9F
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/4V7hwKfKBDIny7Rs7Knn7-NMmp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ba:9c:43:79:8a:2e:bd:2a:00:e9:0e:c6:8b:76:49:bc:c3:
f2:f7:39:46:41:c7:52:b0:cc:2d:9f:be:c2:6b:72:cd:ba:d9:
8a:a7:af:dc:41:f2:ad:0d:e3:19:38:40:54:92:c1:7c:11:34:
6f:96:ca:ea:58:81:eb:0a:bf:c7:4f:0d:3d:48:e3:d2:82:d1:
89:58:36:09:8d:2a:ab:84:5a:0d:22:c6:56:6f:0f:20:84:52:
9b:ad:a8:e5:7d:7a:08:37:66:96:ee:fe:4e:4f:f3:1c:62:52:
78:a9:36:fa:16:b2:14:76:fe:38:e5:9a:ef:a9:36:a1:fe:54:
42:d4:45:3c:d3:9a:6d:72:18:44:c4:96:31:eb:a2:22:52:64:
f3:b7:72:52:13:23:78:37:6e:07:f6:7c:58:4e:34:ef:3a:87:
ab:68:07:9a:20:40:4d:ca:91:0e:a6:0f:d3:32:09:d2:9f:b9:
1b:37:2b:d1:53:05:88:ec:d2:9e:8e:71:bd:59:94:48:f2:d3:
a5:10:79:14:96:91:35:dc:bb:7a:e2:d3:5d:a0:da:69:d0:d1:
18:36:b5:3e:57:ec:da:22:17:73:15:ce:25:59:13:6e:a8:eb:
40:73:a3:e0:fd:c8:ed:51:cb:bb:45:a4:f3:9c:04:65:08:67:
3c:a0:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:24 2023 by rpki-client on console-ams.rpki-client.org