Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/kJyOdkogWGH-I7xKzl3_8X6oxqo.roa
File: kJyOdkogWGH-I7xKzl3_8X6oxqo.roa (raw, json)
Hash identifier: Po04rw1NpMmVCExZJxgN1SKp9ZPUYbn0TOk2AgIdclY=
Subject key identifier: 90:9C:8E:76:4A:20:58:61:FE:23:BC:4A:CE:5D:FF:F1:7E:A8:C6:AA
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 052FA93C
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/kJyOdkogWGH-I7xKzl3_8X6oxqo.roa
Signing time: Thu 24 Mar 2022 11:43:57 +0000
ROA not before: Thu 24 Mar 2022 11:43:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 194.50.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87009596 (0x52fa93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Mar 24 11:43:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=909c8e764a205861fe23bc4ace5dfff17ea8c6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:0a:cd:a0:40:c2:32:66:c1:f2:ee:56:15:
a9:de:0d:a3:84:48:ed:c9:8e:04:28:2b:69:61:43:
49:71:ff:86:0c:68:77:70:29:da:52:8d:5c:c4:5c:
a1:3a:bf:a9:27:aa:47:5c:79:4d:1f:f7:f7:a7:be:
f9:f2:61:c8:77:ca:78:f2:dc:81:21:a5:a4:ad:b9:
2e:09:66:60:d5:62:c0:6a:15:35:38:64:82:bd:97:
41:45:60:3f:33:bf:44:26:c1:a5:49:27:77:a8:ee:
06:0b:f3:f2:5c:05:5c:42:22:f5:84:c7:03:5f:d0:
ae:44:be:c1:38:97:99:51:f7:ad:92:b8:90:0b:fc:
21:f7:33:1e:85:6a:e2:35:3e:42:7f:75:b6:c5:6c:
8c:66:10:4a:17:68:38:22:60:f3:53:52:1b:54:e3:
2c:9b:72:10:5a:9c:ed:65:60:77:0f:ef:e0:a4:dc:
df:03:3d:f6:ad:ba:7e:55:9a:1f:ae:08:72:eb:61:
c0:ad:ac:cc:a1:32:ff:de:93:ce:38:15:82:ef:de:
9c:5e:16:cc:62:71:87:0b:a8:db:78:30:8f:f9:4a:
01:25:d5:38:63:7a:d5:9e:11:21:cb:a8:f0:2d:c6:
2d:79:b2:a5:41:83:68:1c:d1:1b:5d:55:be:0f:90:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:8E:76:4A:20:58:61:FE:23:BC:4A:CE:5D:FF:F1:7E:A8:C6:AA
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/kJyOdkogWGH-I7xKzl3_8X6oxqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:65:1b:24:90:a7:6c:13:81:d8:5e:f5:8c:b6:a1:3f:13:a1:
c9:3a:ec:b2:c0:91:fa:d3:d2:38:2a:5d:96:1b:f9:30:f5:5c:
04:f4:2e:55:3b:64:01:03:ec:55:69:d4:94:e5:a8:ea:8c:87:
f2:09:38:21:35:10:11:c3:ff:e8:69:3d:f5:5f:a7:68:d2:cc:
e7:89:74:7f:23:7a:90:e9:82:5a:31:1f:fa:d3:83:d7:a5:f6:
47:5f:16:1c:65:f2:c4:8f:3e:9c:00:10:73:36:82:08:ca:ea:
da:67:4e:7e:cd:c1:dc:37:20:52:fb:0e:b5:83:e4:36:e0:1a:
aa:fd:70:01:75:3d:d3:99:61:3e:7e:2b:e8:ad:df:ec:6c:c3:
93:2a:9d:11:d9:f5:27:07:1e:70:b4:7b:16:29:e2:b8:cb:a6:
99:3f:07:6d:f2:44:ae:e8:df:f9:b9:90:c0:8b:f0:05:55:3a:
25:6e:19:7e:2a:86:2d:51:14:75:cb:8f:c8:af:6a:ab:0f:98:
1d:55:4c:c4:fd:56:4d:7f:47:cd:c0:33:7f:85:28:7c:3f:29:
d4:f8:b2:bf:5b:d2:ff:06:ff:93:3c:88:89:fe:ae:ec:cc:37:
a6:b4:6e:55:92:02:ed:1d:f0:c0:a3:cd:bf:a5:53:e4:dc:e8:
7c:7e:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:14 2023 by rpki-client on console-fra.rpki-client.org