Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/ekfvQcvtOBfXL10LHVO2NZrdUJU.roa
File: ekfvQcvtOBfXL10LHVO2NZrdUJU.roa (raw, json)
Hash identifier: 3XBODa4smSg8/DMvYV/owVsj1cuiZi1bq9lPCY3OSV4=
Subject key identifier: 7A:47:EF:41:CB:ED:38:17:D7:2F:5D:0B:1D:53:B6:35:9A:DD:50:95
Certificate issuer: /CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Certificate serial: 01856DEF6013380FA6F3B1D6EDB2F8C9BB7B
Authority key identifier: 6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/ekfvQcvtOBfXL10LHVO2NZrdUJU.roa
Signing time: Sun 01 Jan 2023 15:24:42 +0000
ROA not before: Sun 01 Jan 2023 15:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24631
IP address blocks: 194.150.70.0/24 maxlen: 24
194.9.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:60:13:38:0f:a6:f3:b1:d6:ed:b2:f8:c9:bb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Validity
Not Before: Jan 1 15:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a47ef41cbed3817d72f5d0b1d53b6359add5095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:14:8a:ab:20:d7:16:c9:b2:2a:41:af:8d:21:
3f:f9:cc:99:ac:42:65:42:1f:5d:b6:4f:c6:0a:97:
fe:68:26:b7:6f:ee:10:12:a0:81:c6:2a:32:43:42:
3b:64:09:a5:e2:58:e5:9e:73:55:23:69:a2:b8:e0:
f6:c2:2e:dc:c7:cf:01:67:73:e5:db:51:bc:a9:14:
a2:af:62:d5:05:19:f8:ad:ab:fc:83:bb:4d:fc:24:
67:4a:5c:c1:fb:20:bc:f5:f2:f6:3e:74:1a:c5:ad:
4f:4f:23:58:b9:e4:42:f8:d0:9a:7b:cc:38:dd:06:
90:00:96:1e:8b:66:ca:8d:70:7b:91:42:bb:6c:4f:
0d:80:49:2f:58:c9:ab:c5:0f:99:16:9b:f1:c0:a5:
75:00:b1:9f:24:77:58:c3:92:a9:77:df:be:9e:34:
22:2d:66:d6:90:b5:77:6e:44:ff:17:5c:b4:49:56:
b6:ff:87:f6:64:fe:a7:91:3a:7b:82:96:0c:3c:e1:
9b:8b:36:e7:33:dc:3b:54:35:ec:1a:13:7d:66:07:
eb:a5:82:1f:1f:5b:bd:9b:82:ca:26:d8:47:22:05:
aa:e2:3e:2c:d9:75:ee:fb:ef:3c:cc:29:41:cb:b4:
c3:06:4d:5b:67:6e:8e:ac:aa:1b:82:f4:6e:fd:f6:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:EF:41:CB:ED:38:17:D7:2F:5D:0B:1D:53:B6:35:9A:DD:50:95
X509v3 Authority Key Identifier:
keyid:6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/ekfvQcvtOBfXL10LHVO2NZrdUJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/blgupBdSD5MAxuDhXsyrQb--EbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.80.0/24
194.150.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c1:6e:26:84:41:ca:08:cf:4a:27:0e:a3:32:72:ca:29:c0:
ad:6d:5c:87:c4:f7:ea:41:40:f7:00:d8:82:06:e0:97:60:3a:
c3:fc:e3:60:0b:c9:dd:ad:b3:69:c0:d6:74:fd:d2:5d:f5:57:
40:72:f9:e8:6e:81:ef:19:71:ac:d7:df:82:c4:40:eb:0f:03:
4b:d4:73:44:7f:12:ed:1a:b6:21:ed:9f:5d:50:3a:9e:d1:8d:
df:ec:9c:eb:c7:9e:ee:9a:07:e6:b1:23:3d:8d:80:f5:13:3b:
24:92:3e:b9:bc:d0:9b:45:dc:69:03:c7:32:72:6c:4d:79:70:
52:f4:50:f2:01:90:70:f1:c9:c0:24:9a:87:12:bf:3d:71:53:
7b:4b:d7:b2:27:71:ae:71:98:bf:a2:84:c4:4b:fb:44:f4:1d:
25:86:66:f6:6d:c8:16:68:b0:c4:15:8b:84:df:2d:25:36:bf:
8f:70:e3:af:1b:7b:d6:29:c7:86:b2:a9:a3:30:66:45:f6:07:
62:32:82:ea:34:01:9d:f2:9e:f5:09:2e:34:e7:4a:9b:60:ad:
5b:72:98:70:33:48:e0:44:2f:9e:f8:57:e4:e2:1d:f7:b4:93:
a7:fd:08:d4:dc:bf:a3:0f:42:1c:c3:cd:fb:6f:d4:6d:69:6f:
4d:a4:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org