Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/4SYRMCSu0rxBy3qYukcar-UKupY.roa
File: 4SYRMCSu0rxBy3qYukcar-UKupY.roa (raw, json)
Hash identifier: 3jjewwmyBTx6nOqzGTPbb/Enf9ugdY2uthSDAIbS1R4=
Subject key identifier: E1:26:11:30:24:AE:D2:BC:41:CB:7A:98:BA:47:1A:AF:E5:0A:BA:96
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 05271B94
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/4SYRMCSu0rxBy3qYukcar-UKupY.roa
Signing time: Mon 21 Mar 2022 14:52:52 +0000
ROA not before: Mon 21 Mar 2022 14:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86449044 (0x5271b94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Mar 21 14:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e126113024aed2bc41cb7a98ba471aafe50aba96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:d6:fe:bf:06:c8:bf:c6:0f:1d:24:53:69:
c2:0e:85:9e:0d:0c:53:97:7f:94:a1:db:43:d3:b0:
ce:52:bc:6b:89:83:91:52:d6:39:e7:16:be:73:a3:
ad:e9:61:bd:34:ba:b8:dc:8c:61:b7:21:d6:29:f2:
d7:4c:47:c6:f8:44:46:cc:51:b4:d4:54:fa:81:83:
1d:57:f3:19:6f:2c:5c:1e:3e:92:b2:5d:92:cb:8b:
de:06:a8:4a:e6:d7:c7:99:77:62:f8:7f:f9:6a:37:
bd:f4:c5:42:ab:b2:dd:5e:b1:d7:92:af:c7:33:7e:
cf:79:37:9f:29:ab:b1:ce:13:b6:80:84:61:96:ee:
60:fe:87:b9:6d:f6:17:ef:de:bf:7f:50:be:2e:7f:
b6:eb:7f:f8:a4:b5:22:db:aa:00:34:ec:3b:8e:19:
7a:4e:2b:7e:52:d0:bd:4a:05:ac:04:43:7f:f4:08:
97:ab:2f:26:4a:ff:04:20:27:64:95:e8:9a:9b:0d:
6b:bc:f9:7c:cb:e4:7c:37:40:b1:8b:4f:07:2f:84:
9e:a6:af:ad:60:69:d1:e9:b6:f6:c6:0d:a9:12:fc:
da:80:4b:6c:c2:6c:74:ff:1e:86:8b:e4:a7:db:15:
9c:93:4f:76:af:2a:8a:8b:bd:1e:2d:bb:94:e2:00:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:26:11:30:24:AE:D2:BC:41:CB:7A:98:BA:47:1A:AF:E5:0A:BA:96
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/4SYRMCSu0rxBy3qYukcar-UKupY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
33:12:b0:bf:e9:62:31:75:70:92:21:c7:15:75:6b:97:38:ae:
47:b9:b3:e1:6b:a7:9f:ab:90:e5:e2:b0:7f:c2:c9:1c:a5:67:
ad:df:a3:61:05:9e:db:f6:6c:49:92:3a:74:3d:27:3e:24:5c:
be:e4:5a:72:bf:9e:82:25:e1:de:d0:67:84:74:d2:7a:9d:41:
71:76:15:cc:71:13:20:44:db:de:1d:a3:fe:d1:59:a9:5d:83:
8f:26:4f:96:93:cd:83:33:a4:6d:ca:34:1a:1b:48:23:09:31:
73:c4:80:85:f8:30:61:0c:5d:33:40:ec:f3:5c:0a:7f:f9:5b:
f4:5f:46:56:60:f5:c2:f6:1f:53:2b:5a:d2:6b:f9:4a:67:ec:
a1:67:fc:92:31:0f:7a:85:56:a4:7a:03:26:d4:1f:c3:15:47:
7a:28:33:de:e5:c8:31:b0:3e:8f:a7:59:e2:60:8f:97:f5:58:
e6:51:a4:e6:82:78:ab:c3:a8:f0:71:fd:38:22:4b:34:fe:d6:
af:e5:a0:c4:49:46:f8:d1:cd:fe:8d:9f:59:fa:8c:6f:7c:8e:
e8:a8:72:4b:ca:e2:5a:18:91:2c:04:9a:80:7d:b7:e4:d0:93:
b6:74:83:da:d9:d2:97:eb:50:18:4e:e9:e2:eb:f9:1b:b7:d0:
ec:ca:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:14 2023 by rpki-client on console-fra.rpki-client.org