Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5aa382-ee14-43db-86f7-9ffc92a158be/1/BAKRDI1DpkAsH44eH5dJYhoewWU.roa
File: BAKRDI1DpkAsH44eH5dJYhoewWU.roa (raw, json)
Hash identifier: KVU0rwc/ZbQeP87uIJuoCUvm8xUwwponGuhmlKnHZTM=
Subject key identifier: 04:02:91:0C:8D:43:A6:40:2C:1F:8E:1E:1F:97:49:62:1A:1E:C1:65
Certificate issuer: /CN=b8d4d3048a00327afb8580c05b4ded4d049d16d9
Certificate serial: 0488D47D
Authority key identifier: B8:D4:D3:04:8A:00:32:7A:FB:85:80:C0:5B:4D:ED:4D:04:9D:16:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNTTBIoAMnr7hYDAW03tTQSdFtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5aa382-ee14-43db-86f7-9ffc92a158be/1/BAKRDI1DpkAsH44eH5dJYhoewWU.roa
Signing time: Sat 01 Jan 2022 01:01:42 +0000
ROA not before: Sat 01 Jan 2022 01:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 194.45.196.0/23 maxlen: 24
194.45.197.0/24 maxlen: 24
194.45.196.0/24 maxlen: 24
194.45.37.0/24 maxlen: 24
194.45.36.0/23 maxlen: 24
194.45.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76076157 (0x488d47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d4d3048a00327afb8580c05b4ded4d049d16d9
Validity
Not Before: Jan 1 01:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0402910c8d43a6402c1f8e1e1f9749621a1ec165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:e5:15:58:ad:76:65:ca:be:e1:fc:99:02:
b5:55:b4:a7:4e:5c:03:25:4d:fa:6d:a4:2c:95:4b:
de:b8:19:79:a5:15:b8:c2:8f:55:c2:64:4e:d1:88:
f6:8c:43:95:3a:95:a4:a2:5e:d8:40:f1:0b:e5:b0:
04:8a:fe:eb:5d:01:8c:54:d4:d6:6e:7b:c9:8c:10:
ba:4b:f1:d8:93:96:08:b2:68:1a:fe:32:bf:44:1a:
55:51:4f:f2:ff:68:85:95:30:2e:ce:2e:75:d7:88:
dc:6c:55:7b:82:ac:e9:68:7a:f5:49:a6:49:ad:f1:
a2:77:96:36:e7:a1:bc:c0:3f:ba:d8:cb:80:ed:ac:
1b:8f:cb:b8:9d:28:fa:3c:fd:75:4c:04:0c:9e:a9:
93:e1:41:d3:42:e7:6c:f0:5d:da:1a:6a:9e:c0:08:
76:be:80:15:b2:83:38:f1:ce:2c:05:85:01:dc:6e:
db:72:db:49:43:be:f3:7b:3d:a6:6f:44:a4:5c:f1:
f5:93:70:16:8f:8d:a1:63:4a:22:ef:4e:4b:82:ca:
71:69:bc:94:b0:a5:ce:e7:19:bc:ee:c0:fe:7e:d7:
7c:b0:76:13:43:e6:67:33:e7:d8:2e:06:e2:a5:47:
74:d6:67:40:e6:e4:32:61:aa:e3:57:bc:2b:ff:ae:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:91:0C:8D:43:A6:40:2C:1F:8E:1E:1F:97:49:62:1A:1E:C1:65
X509v3 Authority Key Identifier:
keyid:B8:D4:D3:04:8A:00:32:7A:FB:85:80:C0:5B:4D:ED:4D:04:9D:16:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNTTBIoAMnr7hYDAW03tTQSdFtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5aa382-ee14-43db-86f7-9ffc92a158be/1/BAKRDI1DpkAsH44eH5dJYhoewWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5aa382-ee14-43db-86f7-9ffc92a158be/1/uNTTBIoAMnr7hYDAW03tTQSdFtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.36.0/23
194.45.196.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ea:82:9b:b2:a0:9f:62:0c:51:7d:01:a0:b4:e3:61:28:1c:
89:83:7a:88:2d:07:c7:6e:f9:b9:47:70:f9:f6:43:f1:f5:77:
7c:19:9f:25:3e:a4:74:e8:23:86:93:8c:95:8b:29:d4:72:c2:
01:ef:0e:1d:ec:cd:b9:50:82:39:f4:fa:07:d4:42:b6:d9:cb:
a3:f5:9a:7f:96:3f:bc:b0:c9:c7:86:2e:79:89:81:d9:74:de:
e4:6c:a5:55:10:57:0f:1e:6f:58:e4:05:af:f2:5e:7e:71:69:
ac:b5:2a:d3:44:dc:45:1d:45:62:0b:f6:cb:b4:c8:1d:c0:08:
88:9a:00:1d:54:c5:d6:e9:ea:4f:45:55:6f:92:a6:45:30:76:
32:d9:38:1d:6b:c8:70:0c:e6:4a:32:aa:57:55:97:60:21:32:
99:7e:3b:ae:22:0d:83:d5:e0:04:07:d8:f8:80:a2:5e:c4:9a:
2a:ba:68:89:80:98:3e:a8:ac:9a:2c:8d:c6:36:4f:27:15:7e:
73:bf:d9:99:11:4b:96:a3:81:5f:54:99:06:d0:65:72:37:64:
95:72:c9:42:0a:a0:1d:a7:91:97:fb:cc:d1:f5:0e:de:ee:31:
07:3d:2a:fb:e1:01:eb:3d:13:13:ab:cf:8a:cc:1f:00:66:51:
30:d3:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org