Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/dPNJpMruAIRRwe1MWNnEnkwWDa8.roa
File: dPNJpMruAIRRwe1MWNnEnkwWDa8.roa (raw, json)
Hash identifier: JcfYbxfrNdsaBZtSBVKSzdZ5U+yGPYKcJrAbuA8rl4Q=
Subject key identifier: 74:F3:49:A4:CA:EE:00:84:51:C1:ED:4C:58:D9:C4:9E:4C:16:0D:AF
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 04773908
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/dPNJpMruAIRRwe1MWNnEnkwWDa8.roa
Signing time: Sat 01 Jan 2022 13:58:37 +0000
ROA not before: Sat 01 Jan 2022 13:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.50.0.0/23 maxlen: 24
194.50.4.0/23 maxlen: 23
45.149.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74922248 (0x4773908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Jan 1 13:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74f349a4caee008451c1ed4c58d9c49e4c160daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:4a:1f:cd:f3:95:50:09:80:26:fd:2e:27:
53:85:b9:93:6d:e1:e3:95:be:ff:dc:d6:f7:ce:08:
e8:ae:58:b3:41:b8:57:d7:ad:eb:e0:bd:5a:75:62:
4a:52:f4:12:b7:36:6f:d5:7c:f6:26:b2:99:8f:79:
a9:52:33:b2:7f:2a:04:59:1d:0e:9a:35:de:ff:fd:
79:40:6d:89:d7:9b:b2:24:b4:ce:dd:6c:16:0d:a8:
cb:6a:c9:83:d6:17:0d:27:e8:8d:a3:d9:f0:42:4c:
19:5e:4a:31:18:2f:bb:2b:6c:33:f5:53:3b:a1:4a:
41:cb:58:40:a7:50:b9:45:b4:21:91:34:ee:24:38:
69:b8:24:97:70:10:11:d9:40:79:60:7d:6c:83:ef:
5f:f5:35:30:05:f6:f0:f1:59:be:50:84:0c:a7:28:
25:59:d7:30:0a:dd:27:7c:44:70:65:48:27:c4:53:
f5:0f:09:8b:42:b6:54:8f:5a:f5:30:fa:b8:d4:27:
f9:77:b4:5f:d6:37:85:51:00:cc:6b:83:09:24:e0:
fe:cb:21:9e:9a:30:85:93:f6:1f:61:7f:1d:a9:53:
31:6d:62:03:88:83:60:fd:10:81:1a:35:df:50:66:
4b:bf:04:57:17:cc:05:30:bd:89:af:5d:67:5d:d7:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:49:A4:CA:EE:00:84:51:C1:ED:4C:58:D9:C4:9E:4C:16:0D:AF
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/dPNJpMruAIRRwe1MWNnEnkwWDa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/22
194.50.0.0/23
194.50.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:50:2d:af:cc:40:3f:22:de:4b:05:cb:6e:a9:57:d3:9f:76:
e4:80:b3:4f:c3:40:61:5a:95:8f:54:99:b3:3a:ee:82:21:38:
c8:f9:15:12:6e:7f:c3:c6:9e:26:88:f2:42:b2:01:c4:53:cb:
0c:db:1d:f6:bb:c6:53:91:59:51:28:fe:32:fe:19:fb:f4:74:
9f:48:55:3b:1d:31:6a:ce:88:eb:83:fe:e2:93:b0:2a:45:99:
6a:4a:a2:a2:89:13:35:c6:87:aa:1b:34:06:80:6f:d4:7a:5b:
96:3a:54:33:d8:60:7c:43:21:51:ba:48:c8:28:bb:59:0e:74:
bc:65:54:62:02:b6:2b:62:07:a3:71:f2:eb:3e:c5:68:d6:2e:
53:e5:e6:ba:4c:02:20:4f:0e:5c:a0:da:70:45:ba:7f:35:88:
9e:de:c5:fe:6e:3f:79:6c:e5:4d:f3:e2:3c:5d:3c:36:8b:49:
27:7f:9d:17:04:a2:76:90:ec:4f:fe:d3:dd:80:79:6f:cd:a3:
b4:5f:7b:2e:32:a7:1f:10:78:5f:14:5b:30:c9:2d:14:04:cd:
58:cf:45:fd:ae:be:d1:f9:29:4a:6e:74:f6:bf:96:0f:33:b3:
3f:55:ed:ca:c5:f6:99:68:d1:98:ac:0a:be:0b:32:aa:59:d0:
81:a3:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:04 2023 by rpki-client on console-ams.rpki-client.org