Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/12bORsOBd6Kb0KKgqgEYi8arPLY.roa
File: 12bORsOBd6Kb0KKgqgEYi8arPLY.roa (raw, json)
Hash identifier: eiQHJvsL5ZPqOCroG5/lUMbzIT6/lknjzstAIMGij38=
Subject key identifier: D7:66:CE:46:C3:81:77:A2:9B:D0:A2:A0:AA:01:18:8B:C6:AB:3C:B6
Certificate issuer: /CN=04aaea3ef619379db71d476b3b90bbe2a6efd036
Certificate serial: 0182EA1D027063780CEC0955A95BC80C4E87
Authority key identifier: 04:AA:EA:3E:F6:19:37:9D:B7:1D:47:6B:3B:90:BB:E2:A6:EF:D0:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKrqPvYZN523HUdrO5C74qbv0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/12bORsOBd6Kb0KKgqgEYi8arPLY.roa
Signing time: Mon 29 Aug 2022 14:59:05 +0000
ROA not before: Mon 29 Aug 2022 14:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41509
IP address blocks: 194.145.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:1d:02:70:63:78:0c:ec:09:55:a9:5b:c8:0c:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04aaea3ef619379db71d476b3b90bbe2a6efd036
Validity
Not Before: Aug 29 14:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d766ce46c38177a29bd0a2a0aa01188bc6ab3cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1f:e5:4d:b1:94:d3:2f:16:07:bd:5e:6c:b4:
5a:09:0a:7c:76:14:8c:77:91:93:52:0f:8c:47:ff:
80:58:24:7d:46:3c:a7:68:60:b7:72:6c:69:c7:b5:
e4:5c:8e:8f:e7:23:6e:35:37:65:58:ee:6d:16:f4:
b1:5e:a7:6f:82:0a:1f:2b:90:96:14:ee:7f:39:50:
97:86:ed:db:08:b6:6a:00:60:b1:75:f0:14:a1:ac:
b9:77:0f:48:55:d9:10:a8:89:2f:ac:f4:a7:94:22:
1d:db:8a:7e:9c:bf:c1:f1:73:88:1b:4a:44:da:1e:
23:b2:79:d3:0a:fa:8e:62:ef:df:1c:3e:d9:87:27:
78:b9:fe:fa:e9:f6:66:74:17:a5:f2:d3:7c:c1:ab:
cc:32:8b:ce:49:41:cb:43:d9:6e:2a:c9:a6:ec:37:
af:f1:ae:41:f1:56:b4:84:7e:1b:65:81:1e:3a:ff:
ee:16:a5:63:f2:0d:eb:59:85:b2:87:99:33:f9:fc:
3c:b4:fe:f1:0b:37:5c:64:10:56:ee:78:bf:b5:23:
e4:f2:4f:13:13:82:63:9e:f7:d7:e4:88:16:6c:8e:
cf:26:9d:0e:26:75:91:b3:69:fc:d6:aa:1f:2a:dd:
18:3e:1a:48:99:96:57:05:84:44:41:4a:3e:8b:36:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:CE:46:C3:81:77:A2:9B:D0:A2:A0:AA:01:18:8B:C6:AB:3C:B6
X509v3 Authority Key Identifier:
keyid:04:AA:EA:3E:F6:19:37:9D:B7:1D:47:6B:3B:90:BB:E2:A6:EF:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKrqPvYZN523HUdrO5C74qbv0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/12bORsOBd6Kb0KKgqgEYi8arPLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/BKrqPvYZN523HUdrO5C74qbv0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d3:26:45:51:34:e9:4b:47:c0:0c:b8:e2:9f:84:67:66:91:
69:7d:45:92:8b:fc:84:d7:de:4b:48:7f:b6:57:53:1a:e0:9b:
ed:88:74:97:1b:29:4e:f7:a0:da:58:ad:aa:3f:49:d1:f0:42:
06:a6:64:7e:d3:b8:04:a5:0e:77:cf:19:d3:ef:0e:fd:ed:d0:
30:28:a9:7c:53:7f:79:1b:12:f5:f1:a9:c0:9c:7c:ad:88:b4:
18:ed:cd:fb:f9:e3:f1:21:8c:e8:ca:5f:70:35:1b:03:2e:f2:
e8:da:f6:bd:c7:81:70:fa:49:cd:69:78:69:79:c5:de:91:8b:
c5:2f:56:1f:8f:c8:d0:4a:58:41:f5:5f:8b:a4:de:8f:13:b6:
1f:b3:61:6c:33:2a:1c:82:78:03:c5:06:0f:ad:32:86:89:6d:
12:7c:94:d3:a4:4c:cf:d9:cf:50:b1:40:20:9b:a0:43:b0:6c:
7e:13:dd:03:e1:2f:e0:20:be:c9:36:da:b8:69:e8:75:42:fa:
95:f1:fb:71:43:4a:38:be:21:04:b1:bd:e0:4c:7d:68:e1:7c:
bd:03:ff:8c:65:61:85:db:d0:6f:28:72:d1:67:72:cc:18:e0:
c2:e9:e6:93:d6:35:72:91:5f:3a:4e:e0:ba:6b:63:94:6d:8d:
a0:1f:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:31 2024 by rpki-client on console-fra.rpki-client.org