Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/lK4UrDmLoyqFkMZqWnz_4hiqsSw.roa
File: lK4UrDmLoyqFkMZqWnz_4hiqsSw.roa (raw, json)
Hash identifier: bjelfqlLoJpveUXCkZYpgnSGn5Jps5oPfX1tvorqJLs=
Subject key identifier: 94:AE:14:AC:39:8B:A3:2A:85:90:C6:6A:5A:7C:FF:E2:18:AA:B1:2C
Certificate issuer: /CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Certificate serial: 3FD0DF
Authority key identifier: CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/lK4UrDmLoyqFkMZqWnz_4hiqsSw.roa
Signing time: Sat 01 Jan 2022 01:00:51 +0000
ROA not before: Sat 01 Jan 2022 01:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211552
IP address blocks: 74.220.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4182239 (0x3fd0df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Validity
Not Before: Jan 1 01:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94ae14ac398ba32a8590c66a5a7cffe218aab12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:50:89:70:c5:94:85:cf:91:a3:87:84:6e:
a7:12:85:c2:46:76:08:eb:1a:2c:8a:35:a4:e8:c8:
77:67:18:4c:30:eb:91:af:21:73:94:3b:bc:75:0c:
cf:6a:3f:ca:4b:76:24:0a:61:2c:8f:2b:c2:bb:4b:
4b:31:e4:7b:5c:74:c7:0c:36:6a:f7:b6:f1:36:73:
c2:fd:3b:d9:06:d2:e4:68:c0:60:d8:26:dc:cf:bb:
99:ae:31:48:32:cc:47:ec:bb:37:87:a1:f0:96:10:
2c:d7:b1:dc:30:f9:5f:f8:25:f1:5e:32:70:c8:97:
bf:be:29:57:8a:ea:c4:99:4c:ab:4f:e8:c3:97:99:
65:da:54:03:f0:ba:d0:2b:34:86:5a:86:bb:79:ba:
4c:b3:55:02:f6:01:b0:45:02:a5:6a:f2:26:ab:32:
a7:97:31:db:50:9e:20:93:1e:86:18:ba:0b:79:9c:
8a:06:4e:32:06:68:43:aa:2f:81:00:83:e1:18:8f:
b4:7a:2b:65:88:1a:43:be:9f:9b:f0:a0:ab:7b:13:
e6:ac:45:93:b3:0f:7f:32:5f:b1:43:ff:f3:5b:76:
e8:0f:32:4d:f2:42:6e:e3:7f:6c:62:9b:1b:d7:8b:
b1:81:8c:83:c4:87:86:e8:cc:8b:1b:65:bb:0b:2a:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:14:AC:39:8B:A3:2A:85:90:C6:6A:5A:7C:FF:E2:18:AA:B1:2C
X509v3 Authority Key Identifier:
keyid:CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/lK4UrDmLoyqFkMZqWnz_4hiqsSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.220.16.0/21
Signature Algorithm: sha256WithRSAEncryption
61:5f:49:50:dc:43:a5:f5:f5:50:cf:2d:56:17:d2:b7:6d:51:
57:42:ac:c6:0d:ec:e0:49:8b:75:1d:e0:4a:eb:2e:26:13:13:
10:4b:d6:fb:ec:bb:c0:db:91:8a:fd:47:15:17:fa:17:6b:91:
fe:ec:e1:23:77:fe:fb:53:c0:f7:e5:8c:c9:51:95:48:31:42:
55:66:25:64:cd:76:0a:77:09:6c:b6:6a:59:2d:4f:60:1b:fb:
d3:c8:56:eb:72:db:9e:1c:c6:40:44:72:70:f1:a0:c1:71:05:
62:59:90:f4:88:9f:b1:66:75:b5:72:6a:f5:3b:65:3a:f0:96:
16:fa:d2:ae:29:5a:03:d2:fb:99:5b:c3:fc:50:75:81:0e:33:
99:76:4f:5b:57:e5:25:e3:cc:82:2e:b4:01:c5:34:64:49:77:
82:cc:df:b1:29:4f:59:2e:3d:79:b7:28:e3:f4:12:b0:63:5e:
da:87:8a:35:3d:90:cb:94:42:3d:44:38:f2:5f:30:e8:00:6d:
cf:8c:dc:d8:2a:f4:b7:5c:9d:ae:c7:28:e1:5f:20:d9:e6:99:
4b:42:8c:69:a3:8e:5b:78:08:06:db:f1:07:ee:af:e0:2a:ae:
9f:88:d3:d4:42:32:a6:cf:6f:df:c3:62:8c:a5:ba:aa:c9:0f:
c5:82:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:49 2024 by rpki-client on console-fra.rpki-client.org