Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/tr0uRtzmvHIpWEjLeUkXPgTaLz0.roa
File: tr0uRtzmvHIpWEjLeUkXPgTaLz0.roa (raw, json)
Hash identifier: HmA0phOSDNSN6gOchh7c5JxTaE8MQ1dWF3OxcCSI/JQ=
Subject key identifier: B6:BD:2E:46:DC:E6:BC:72:29:58:48:CB:79:49:17:3E:04:DA:2F:3D
Certificate issuer: /CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Certificate serial: 1B1542
Authority key identifier: B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/tr0uRtzmvHIpWEjLeUkXPgTaLz0.roa
Signing time: Sat 01 Jan 2022 00:54:47 +0000
ROA not before: Sat 01 Jan 2022 00:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 94.154.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1774914 (0x1b1542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Validity
Not Before: Jan 1 00:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6bd2e46dce6bc72295848cb7949173e04da2f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:82:e8:69:dd:9f:81:e7:f5:ed:53:2e:16:
83:56:01:a6:af:21:8f:77:2f:ae:52:1f:cc:eb:f7:
2b:c7:79:b7:a7:63:8f:78:c8:56:3b:7e:cc:3d:9a:
97:2a:7a:bc:27:21:d7:1d:94:12:ea:c6:09:82:b3:
27:3d:ca:90:11:10:00:2e:75:a4:bd:80:8e:7c:6c:
30:d6:56:75:2e:de:a3:31:b9:f2:86:94:b4:4d:c5:
67:c8:3a:cc:53:69:a7:59:6f:69:27:a2:16:7a:28:
af:6a:94:04:f7:83:10:03:25:d6:81:cb:4a:2e:17:
71:d1:e3:24:6a:fd:6c:7d:47:9e:30:b9:7d:53:59:
0b:c4:35:47:f0:b5:4f:87:57:51:67:99:74:44:da:
cc:b6:94:88:27:46:05:b3:dc:0e:07:d5:b7:92:36:
3e:70:9b:be:0c:4a:26:ac:5b:24:eb:04:b3:a4:a7:
9f:54:c2:76:df:65:4a:4f:51:b5:d8:00:c1:45:a2:
74:76:54:8a:63:2e:20:a0:48:98:c9:a6:84:f3:95:
66:0f:37:26:05:60:8f:50:ae:95:63:da:4f:06:e0:
6e:01:e4:9c:a4:79:24:77:be:35:ed:8a:0c:48:b4:
9f:9d:26:df:4d:52:17:13:dd:02:34:81:11:e1:61:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:2E:46:DC:E6:BC:72:29:58:48:CB:79:49:17:3E:04:DA:2F:3D
X509v3 Authority Key Identifier:
keyid:B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/tr0uRtzmvHIpWEjLeUkXPgTaLz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:29:d7:ce:9e:42:3a:7f:00:05:03:44:8e:d8:c4:9d:7f:d1:
f3:ba:5d:5b:6b:34:df:b7:58:35:39:5d:b0:a1:85:da:f3:f1:
06:74:d7:dc:cd:33:07:7f:82:49:2b:6c:f3:b9:a0:06:b2:71:
53:9f:5b:52:f4:dc:89:cb:e7:0b:49:b0:bb:4a:bb:13:31:42:
7c:bf:e9:06:03:f3:f4:f3:d9:99:56:7c:fa:75:92:1f:cc:1c:
13:4b:78:94:1d:5b:08:d3:8e:88:c6:41:f2:c3:e0:80:85:71:
8f:30:bd:47:37:f8:a8:03:70:98:79:ea:fb:67:19:d4:b6:97:
15:8f:02:5b:ee:a5:f5:ca:e7:38:1f:c9:9a:c2:21:8d:2c:3d:
6f:d6:e3:ec:aa:d1:6f:94:50:9f:fe:cc:39:b1:a9:ff:5c:2b:
16:80:e7:e3:b5:36:5c:5a:88:ed:78:ed:3c:5d:53:51:a9:34:
74:72:f1:f7:f5:aa:d2:71:6b:20:fa:0a:99:e1:6a:be:ef:b8:
5d:77:28:78:60:01:e5:38:ce:61:50:42:42:40:ca:b4:8f:bb:
81:54:9a:be:cf:35:ad:d6:aa:40:c1:a6:1f:ae:82:73:fa:2a:
89:b7:36:54:ad:f7:c4:c3:4e:a1:9c:d9:e9:a3:66:53:a0:7d:
5c:c9:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:50 2024 by rpki-client on console-ams.rpki-client.org