Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/021936-1d47-488c-888d-c74339ff2820/1/7veiw47xY5HVDnQstI8lY-2X-GM.roa
File: 7veiw47xY5HVDnQstI8lY-2X-GM.roa (raw, json)
Hash identifier: WgD/H5iqB7fwMhTzRDuuFVfyn05sm9zdHKGG2qBXdd4=
Subject key identifier: EE:F7:A2:C3:8E:F1:63:91:D5:0E:74:2C:B4:8F:25:63:ED:97:F8:63
Certificate issuer: /CN=9fed4b2d5748c17a9206f22faffb6be97e85723c
Certificate serial: D1631D
Authority key identifier: 9F:ED:4B:2D:57:48:C1:7A:92:06:F2:2F:AF:FB:6B:E9:7E:85:72:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-1LLVdIwXqSBvIvr_tr6X6Fcjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/021936-1d47-488c-888d-c74339ff2820/1/7veiw47xY5HVDnQstI8lY-2X-GM.roa
Signing time: Sat 01 Jan 2022 05:04:37 +0000
ROA not before: Sat 01 Jan 2022 05:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.104.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722397 (0xd1631d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fed4b2d5748c17a9206f22faffb6be97e85723c
Validity
Not Before: Jan 1 05:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eef7a2c38ef16391d50e742cb48f2563ed97f863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:0e:5d:b6:bb:93:e9:57:89:8f:5c:34:8c:
ff:27:9e:c2:ef:3c:5b:2b:d8:ea:7e:d5:1d:ef:80:
07:29:cd:2b:31:2e:b2:d9:c1:32:be:23:cd:a9:eb:
82:af:cf:9c:05:ef:2c:34:8d:88:f2:c5:bb:9f:c9:
9b:c2:6a:6a:42:69:08:27:9f:e0:e7:8a:ee:a0:fd:
e4:8b:e3:52:d5:4e:85:37:80:fc:f4:55:cc:c3:7d:
35:1e:4e:93:83:01:9c:df:62:3c:d3:16:8a:a0:ca:
5f:f1:54:d9:96:af:fc:c1:1e:fc:20:f7:55:b1:80:
a7:fd:5b:b2:15:28:77:7f:bc:a1:60:4e:ec:af:5a:
2d:0c:1e:7f:35:4c:ec:38:78:c5:8e:8f:5a:60:51:
dd:f3:e2:18:71:79:2d:27:59:c3:c6:df:22:54:93:
de:05:c6:a8:c7:5f:3c:17:3f:16:af:21:db:d1:59:
59:50:ac:ca:f7:62:6f:25:5e:20:8e:dc:70:78:47:
ec:f1:d4:a4:ed:c0:09:08:a6:5a:39:e2:3c:db:03:
55:ca:62:0b:56:b0:38:51:8c:5c:b2:11:f1:ad:b5:
f4:7a:5a:f4:9f:6d:d5:48:9b:61:53:a5:13:78:d9:
4f:d6:ab:21:91:d8:56:43:75:f4:6d:25:0d:0e:51:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:A2:C3:8E:F1:63:91:D5:0E:74:2C:B4:8F:25:63:ED:97:F8:63
X509v3 Authority Key Identifier:
keyid:9F:ED:4B:2D:57:48:C1:7A:92:06:F2:2F:AF:FB:6B:E9:7E:85:72:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-1LLVdIwXqSBvIvr_tr6X6Fcjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/021936-1d47-488c-888d-c74339ff2820/1/7veiw47xY5HVDnQstI8lY-2X-GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/021936-1d47-488c-888d-c74339ff2820/1/n-1LLVdIwXqSBvIvr_tr6X6Fcjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.225.0/24
Signature Algorithm: sha256WithRSAEncryption
89:45:c9:16:73:3d:2d:df:e8:ed:21:8d:18:6f:c8:24:ac:05:
8a:cb:f6:6a:f6:08:d4:98:34:8e:cb:af:b2:30:95:84:55:dd:
c0:fe:6f:c0:bd:e8:f9:27:17:31:c7:d4:d9:2a:0b:59:7f:58:
17:9d:3b:e1:19:62:f5:15:61:df:34:44:b4:64:bf:e4:a7:ec:
29:19:e4:d2:96:1b:0e:f6:7b:b2:3a:0e:c7:a7:62:3d:aa:39:
7f:01:d8:55:1a:58:05:49:dc:66:fb:6b:c9:83:87:5c:73:62:
32:ca:7d:1b:ad:aa:c1:f5:52:da:f0:07:04:d6:19:bd:c1:7e:
3d:6e:81:2e:59:cc:55:12:17:34:53:02:e1:d4:5c:8f:4e:4d:
66:68:f5:a1:08:33:20:4d:01:b4:1e:dc:68:25:35:b4:f4:e2:
a8:8a:b4:3d:86:12:eb:1a:6b:2d:c9:ba:81:00:f9:37:d0:2e:
b3:35:7a:5c:35:d4:12:97:b6:8f:da:ac:9d:0f:8a:e1:d2:a4:
8b:fd:b7:34:7e:68:50:8d:13:45:3e:60:40:a6:b7:d3:47:40:
9d:a3:01:03:f5:60:f9:b3:51:0e:e2:91:a0:20:e7:d9:7d:f5:
99:26:47:a1:08:c9:fc:b0:16:4d:14:2d:b1:24:54:73:b1:be:
7a:c3:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:07 2024 by rpki-client on console-fra.rpki-client.org