Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/SirbXAPJ9CugSkz7NdNyyvjQHzo.roa
File: SirbXAPJ9CugSkz7NdNyyvjQHzo.roa (raw, json)
Hash identifier: GVoKFWYtG8YksDVoz438r5x+xjtB4vs9m2jP1W9KYzk=
Subject key identifier: 4A:2A:DB:5C:03:C9:F4:2B:A0:4A:4C:FB:35:D3:72:CA:F8:D0:1F:3A
Certificate issuer: /CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Certificate serial: 01835F5E2DC86B31975A817D5BB328AE5226
Authority key identifier: B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/SirbXAPJ9CugSkz7NdNyyvjQHzo.roa
Signing time: Wed 21 Sep 2022 09:25:51 +0000
ROA not before: Wed 21 Sep 2022 09:25:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 94.154.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:5e:2d:c8:6b:31:97:5a:81:7d:5b:b3:28:ae:52:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Validity
Not Before: Sep 21 09:25:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a2adb5c03c9f42ba04a4cfb35d372caf8d01f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:31:4f:37:dc:70:b0:32:bd:c0:d6:35:a6:
17:32:50:fa:75:06:fb:bb:b9:87:2b:5f:f1:c6:e0:
d7:12:e1:f8:c3:ae:8b:03:02:2b:83:36:48:2a:59:
78:f2:2d:e8:7e:3a:52:84:68:41:a5:16:9d:10:85:
29:47:2f:ce:a5:dd:7f:01:04:3f:ef:3d:b2:e5:96:
c1:56:bc:69:5c:7d:93:a2:24:0f:f3:71:55:31:8a:
06:c1:42:78:b9:e0:61:58:69:dd:ef:9c:e0:80:aa:
48:69:8b:69:4b:43:c9:dd:41:92:37:d3:37:67:ce:
91:62:fe:b4:a5:72:bd:9a:5e:10:ed:9a:d1:06:27:
af:4b:b1:b1:2b:38:ea:f5:3c:b9:08:e8:19:52:32:
75:0d:ad:5a:4e:3b:b0:80:4e:fe:31:e5:3f:16:8c:
68:b5:12:5c:58:9d:84:40:19:98:4f:d8:b4:3e:01:
e8:d0:72:f8:e9:4f:26:5f:41:f1:cd:fc:cf:29:2a:
c2:f2:04:f1:0a:61:1c:31:d1:f8:d2:30:27:9d:fb:
f2:c0:76:d7:cd:95:6c:74:01:86:2a:06:71:69:9c:
0d:0d:19:26:e1:5c:92:05:eb:e3:e0:a9:ca:0b:e5:
39:ce:78:99:71:04:3e:ee:ef:29:82:c8:3d:d5:db:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:DB:5C:03:C9:F4:2B:A0:4A:4C:FB:35:D3:72:CA:F8:D0:1F:3A
X509v3 Authority Key Identifier:
keyid:B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/SirbXAPJ9CugSkz7NdNyyvjQHzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.113.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6a:a7:c7:1d:e7:f3:68:25:d8:74:b5:87:79:e5:fd:ae:9c:
e4:1b:9e:32:86:12:0a:25:40:c1:61:5d:ae:6f:f6:43:79:1c:
d8:35:c5:e5:1e:34:0b:29:f7:f0:30:e3:4a:e0:f0:1d:e4:a3:
db:ee:98:cd:fd:fb:14:2d:66:59:fe:2d:03:36:47:60:94:85:
a3:b7:5e:92:82:12:d0:fb:29:3c:13:62:cd:00:2e:17:9a:c6:
2e:e9:24:86:a1:25:46:e1:a6:3f:a4:ae:c6:93:ae:f6:94:5d:
50:35:75:f1:67:cd:d5:8f:3f:03:dd:17:1b:b3:98:d8:e4:2d:
00:46:8d:15:b6:b6:4d:dc:08:85:c1:9a:a8:19:14:ea:28:93:
ae:dd:ee:92:ab:7a:4f:f8:02:19:93:ce:92:66:b8:53:8a:24:
ae:eb:e1:2e:7c:be:5f:83:05:01:13:29:64:da:81:78:ec:78:
73:80:47:ce:3e:cf:c7:4b:5f:4d:74:a0:de:d8:dc:f2:ab:36:
92:8c:32:cb:d9:8e:58:bc:92:30:70:f8:cf:2f:fd:b6:d5:bf:
ae:9a:68:3d:23:02:47:04:87:94:4a:95:88:c1:5a:7c:83:80:
d8:8e:3a:a6:74:e9:db:1f:38:19:85:82:69:96:e2:86:61:2e:
f4:b7:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:12 2024 by rpki-client on console-fra.rpki-client.org