Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0aee94-3cba-4e54-8336-8e07bf80290e/1/VcNjUyMkX1MLgfL1O1JaOSGH-Pc.roa
File: VcNjUyMkX1MLgfL1O1JaOSGH-Pc.roa (raw, json)
Hash identifier: Z2M6pS9eb75tA9oipVA7ovD46MlQUhSl+rjAvKMnWr8=
Subject key identifier: 55:C3:63:53:23:24:5F:53:0B:81:F2:F5:3B:52:5A:39:21:87:F8:F7
Certificate issuer: /CN=f47bcb3f8eb6012cbd03897ada415ec282bfadec
Certificate serial: 0808BC45
Authority key identifier: F4:7B:CB:3F:8E:B6:01:2C:BD:03:89:7A:DA:41:5E:C2:82:BF:AD:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9HvLP462ASy9A4l62kFewoK_rew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0aee94-3cba-4e54-8336-8e07bf80290e/1/VcNjUyMkX1MLgfL1O1JaOSGH-Pc.roa
Signing time: Sat 01 Jan 2022 02:59:17 +0000
ROA not before: Sat 01 Jan 2022 02:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57391
IP address blocks: 94.139.176.0/20 maxlen: 20
109.162.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134790213 (0x808bc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47bcb3f8eb6012cbd03897ada415ec282bfadec
Validity
Not Before: Jan 1 02:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55c3635323245f530b81f2f53b525a392187f8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:c6:71:40:20:f8:68:95:a8:99:89:f3:4d:
75:60:12:b9:95:4d:4c:03:14:41:29:d1:7f:15:b3:
42:f7:2c:a4:94:de:2f:33:a3:a1:d9:9d:1d:c0:8e:
9f:16:a2:6c:25:48:d5:a3:40:93:c7:ec:5a:36:b7:
89:5b:80:85:b3:98:00:58:e1:fb:a0:7d:fb:8c:88:
fc:6f:f1:01:c0:84:cb:37:ea:d1:87:02:d6:12:5c:
7c:6e:5a:3d:6d:cd:a5:b6:a4:3e:cc:ea:69:23:4b:
69:f0:bd:7d:d9:51:3c:e6:64:2c:ca:6e:5a:d6:c1:
71:01:f4:28:c1:9f:de:ff:09:a1:59:17:48:86:3e:
1b:f1:6d:59:8f:ef:7e:8e:1b:e8:7e:b1:31:6c:ac:
df:70:3e:2f:90:59:93:ab:e7:af:c5:35:b6:5a:ac:
20:fd:2d:f3:c5:df:aa:4b:33:70:c2:80:e6:65:3f:
11:c5:8b:0f:b3:7f:0a:b3:5e:1a:be:15:9f:28:03:
fd:fa:9c:3e:5a:b3:1c:18:c2:f8:23:77:fb:15:7b:
8c:05:d3:3d:66:60:e5:38:f2:66:23:47:7c:22:f7:
71:dc:e8:ba:ae:86:10:40:44:f0:8c:88:94:4a:61:
45:91:bd:31:68:61:97:4e:2e:36:3c:20:4b:95:36:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:63:53:23:24:5F:53:0B:81:F2:F5:3B:52:5A:39:21:87:F8:F7
X509v3 Authority Key Identifier:
keyid:F4:7B:CB:3F:8E:B6:01:2C:BD:03:89:7A:DA:41:5E:C2:82:BF:AD:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9HvLP462ASy9A4l62kFewoK_rew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0aee94-3cba-4e54-8336-8e07bf80290e/1/VcNjUyMkX1MLgfL1O1JaOSGH-Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0aee94-3cba-4e54-8336-8e07bf80290e/1/9HvLP462ASy9A4l62kFewoK_rew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0/20
109.162.240.0/20
Signature Algorithm: sha256WithRSAEncryption
01:8d:03:00:68:cd:91:b7:af:89:78:b6:13:e1:19:dd:25:d5:
d6:9d:32:05:4d:c3:22:ba:4e:d9:7a:9b:30:c2:51:d1:e1:7f:
fe:3e:4a:46:be:e1:14:47:0f:77:e2:ed:75:9f:55:27:9c:6c:
72:42:72:7c:36:be:b2:c1:5c:3d:da:c6:4a:93:f3:11:47:b5:
c4:15:da:b6:42:8e:cc:96:78:2b:e9:59:3f:16:e8:2a:be:9c:
f7:21:9b:23:44:a2:d1:16:43:0f:f0:3a:10:01:21:1f:0c:47:
bc:23:ac:74:cb:38:b4:02:c2:ef:dc:e2:a9:0e:10:04:7e:fb:
11:fd:c0:48:7d:c3:a8:8c:3b:18:98:ba:b9:66:d2:73:e1:43:
a4:44:7a:56:7f:d0:a4:00:34:67:8d:95:fc:69:ff:d1:dd:f1:
2c:8e:35:3a:a8:c7:08:02:79:cb:81:c3:5d:e8:cf:79:79:82:
c1:2a:ef:de:4d:10:97:6e:42:dd:f6:d7:a2:fc:18:fd:13:d6:
1e:80:8a:8b:c4:09:4a:bd:ac:6d:b9:85:81:de:87:57:21:bf:
1b:f8:cb:7f:53:dc:6e:d1:31:93:e6:4a:7e:06:d2:0c:fb:cd:
2c:82:95:26:f9:02:91:fb:db:e6:95:97:0c:ba:3f:4e:f3:5d:
5f:9e:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-ams.rpki-client.org