Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/l8TuiT7nMxZyRqQNwpBqolzmVKg.roa
File: l8TuiT7nMxZyRqQNwpBqolzmVKg.roa (raw, json)
Hash identifier: RBQe8TJdqQrswwUA7DgQRvx8mu7pOWEOAeiPZ25fwm0=
Subject key identifier: 97:C4:EE:89:3E:E7:33:16:72:46:A4:0D:C2:90:6A:A2:5C:E6:54:A8
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 04FF3332
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/l8TuiT7nMxZyRqQNwpBqolzmVKg.roa
Signing time: Sat 05 Mar 2022 17:09:22 +0000
ROA not before: Sat 05 Mar 2022 17:09:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83833650 (0x4ff3332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Mar 5 17:09:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97c4ee893ee733167246a40dc2906aa25ce654a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:4b:3c:1c:ef:a5:1e:e1:8c:b4:d1:f0:89:
ab:b7:d2:43:fa:8b:2a:b7:18:87:b4:9d:b0:e8:02:
13:40:7f:96:80:fc:4d:a0:72:3b:f5:22:5c:01:35:
58:66:76:36:37:17:38:1c:e8:e6:af:83:6c:e0:e4:
c6:85:07:f3:3b:a3:3e:8a:6a:79:00:ab:dc:52:7c:
94:b9:9b:4a:cf:1f:9d:c3:a7:b1:79:77:09:20:fa:
58:89:ad:45:d6:bd:b3:30:5b:3b:07:23:8a:d6:3a:
c0:70:3b:93:dd:c9:af:7d:09:7e:14:3d:73:75:78:
77:14:c7:b0:7d:8a:09:5b:bc:e5:07:c3:ff:24:b6:
dd:fc:a2:ed:e0:df:04:e0:03:91:82:f9:bd:a1:0b:
c0:e2:b9:44:c9:7d:72:ae:e4:b4:9d:ab:0f:37:1e:
23:bf:b7:e1:fa:44:ad:ad:a8:46:ca:d6:de:7b:db:
50:7f:94:0e:74:02:ee:13:1a:b6:f5:4d:67:94:ef:
0b:ab:53:69:d2:6c:45:85:75:6d:e6:c7:e9:63:77:
d3:51:a5:09:d9:0d:59:a3:85:16:de:32:81:1d:06:
65:73:5a:7a:45:70:3a:94:8c:5c:2b:f3:06:35:c0:
16:b0:36:9f:34:bb:0b:81:ef:b5:66:f6:33:b0:57:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:EE:89:3E:E7:33:16:72:46:A4:0D:C2:90:6A:A2:5C:E6:54:A8
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/l8TuiT7nMxZyRqQNwpBqolzmVKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
04:18:74:57:ba:bb:ee:12:f0:12:3b:3b:be:f2:f9:71:f7:35:
a7:ef:e6:76:94:13:d6:ce:00:24:f9:c1:8b:99:d4:13:67:df:
ca:e8:d5:8b:d4:cf:3f:b2:a9:e9:64:2d:a7:37:d7:94:62:64:
63:53:1a:aa:3a:08:a3:af:4e:34:ed:31:6f:27:02:23:4a:b6:
d5:a2:3d:97:c7:6c:f2:c2:6c:f7:3a:a8:29:d3:70:01:2b:90:
86:78:c7:e3:3c:bd:6b:db:b8:fd:c4:7a:27:5f:80:71:61:cc:
e7:64:50:f2:26:01:ed:95:e2:ab:69:ec:ac:75:ba:cb:c4:78:
43:ec:29:6b:0c:01:e9:7a:eb:0b:32:e2:0a:35:97:11:65:7c:
ed:04:b8:c3:99:0a:be:f2:c2:a7:9c:56:be:a2:10:2e:f1:0b:
56:21:26:ad:b0:94:00:81:06:6d:fd:e6:79:ce:48:84:fa:b0:
2d:a2:d8:29:5c:9f:9d:11:0a:16:1f:58:66:36:8a:26:74:41:
39:09:5c:35:ce:35:0a:e7:ac:6c:6d:14:13:cf:6f:7d:e2:6a:
6b:b6:61:cf:d7:80:69:29:cc:7c:cc:c3:09:bb:64:9a:34:9e:
e3:35:2d:8e:8f:14:0a:b2:d7:32:52:7e:99:f8:a5:df:9d:6c:
00:dd:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:04 2023 by rpki-client on console-ams.rpki-client.org