Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f1d818-5cb7-4683-96b3-5f212e685277/1/DPyfA4BxuJiT3OdCNcwt6Bmbafo.roa
File: DPyfA4BxuJiT3OdCNcwt6Bmbafo.roa (raw, json)
Hash identifier: +1jHcWrh0iJTBhOgMJhpwC4MH+2oheIc8rQuFwtx070=
Subject key identifier: 0C:FC:9F:03:80:71:B8:98:93:DC:E7:42:35:CC:2D:E8:19:9B:69:FA
Certificate issuer: /CN=e399d8f7ca68a2c2373b45eb76442d044afacdd9
Certificate serial: 01857255BA46285AC9F04B35C11A0BD1C7E9
Authority key identifier: E3:99:D8:F7:CA:68:A2:C2:37:3B:45:EB:76:44:2D:04:4A:FA:CD:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45nY98poosI3O0XrdkQtBEr6zdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f1d818-5cb7-4683-96b3-5f212e685277/1/DPyfA4BxuJiT3OdCNcwt6Bmbafo.roa
Signing time: Mon 02 Jan 2023 11:54:58 +0000
ROA not before: Mon 02 Jan 2023 11:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 194.1.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:ba:46:28:5a:c9:f0:4b:35:c1:1a:0b:d1:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e399d8f7ca68a2c2373b45eb76442d044afacdd9
Validity
Not Before: Jan 2 11:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cfc9f038071b89893dce74235cc2de8199b69fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:cc:ec:44:d9:25:51:8e:2c:46:9b:8f:1e:
b6:50:76:39:99:34:cf:35:c4:8a:01:d2:6a:c8:34:
b9:b9:c7:dc:aa:15:57:83:c2:df:cb:db:cb:77:0c:
83:41:0d:ab:ff:ce:05:b8:56:d2:ec:76:b6:13:5e:
61:6a:c8:bc:c4:ca:67:69:8f:52:90:c9:3f:37:67:
54:d5:b9:e5:45:e8:a2:24:c7:62:ac:42:65:58:c8:
2e:ef:4e:86:b7:0c:73:bc:c6:f3:a4:13:d6:ac:e6:
2c:83:aa:a5:d7:b3:08:7c:c7:35:b0:f5:25:72:08:
41:3b:78:3a:50:a5:28:c2:06:84:7a:17:de:af:03:
d2:c4:9c:9b:61:40:71:39:80:67:3b:03:d8:e8:d3:
96:21:4c:bd:82:2d:7d:c5:79:04:f9:80:89:18:cd:
9a:ce:fc:41:3a:c7:30:61:89:6d:68:fc:d3:61:dd:
47:2b:d6:a5:a8:d0:66:d8:c1:f3:f5:2a:79:54:90:
21:96:23:2a:d1:67:40:4f:d8:0f:2d:ae:59:90:d3:
71:c9:38:49:79:19:0d:e1:98:12:f4:38:b4:7a:36:
34:89:e2:aa:52:6f:3f:57:b4:8f:c2:c0:8e:09:42:
b4:d6:bb:35:76:6f:e2:4b:1c:8e:ef:64:46:da:c7:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FC:9F:03:80:71:B8:98:93:DC:E7:42:35:CC:2D:E8:19:9B:69:FA
X509v3 Authority Key Identifier:
keyid:E3:99:D8:F7:CA:68:A2:C2:37:3B:45:EB:76:44:2D:04:4A:FA:CD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45nY98poosI3O0XrdkQtBEr6zdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f1d818-5cb7-4683-96b3-5f212e685277/1/DPyfA4BxuJiT3OdCNcwt6Bmbafo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f1d818-5cb7-4683-96b3-5f212e685277/1/45nY98poosI3O0XrdkQtBEr6zdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.200.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:56:de:9f:98:6a:17:3a:90:be:56:31:00:72:37:e9:f1:55:
17:a4:a8:42:4d:b8:07:52:20:dd:1f:5d:85:43:45:8c:74:cb:
d5:75:bf:8c:cc:fe:61:59:95:1c:76:4f:a9:7e:62:c8:10:d4:
58:7c:48:7e:61:bf:8d:40:ca:00:c7:e5:d9:bf:7c:46:d7:63:
ca:72:42:83:be:21:e4:58:e8:55:2d:3c:1b:4b:23:fd:2d:88:
c3:54:95:38:96:25:66:2a:b0:b8:7d:a1:ae:d4:43:c8:6b:f6:
9b:ad:8c:62:64:c3:2e:94:e1:d5:93:7b:5e:91:0f:b3:8b:2e:
40:7d:ba:a3:7c:a5:70:92:17:f0:5f:c0:5b:ad:f6:e7:21:71:
db:92:83:d2:fa:5f:2d:e2:3a:29:cd:9e:6a:6c:ef:a1:f5:da:
4d:fe:5a:c3:f7:d0:b9:11:d6:f5:4c:6a:eb:ae:0c:65:52:8a:
32:c6:ab:83:c6:18:95:f4:38:db:8a:7c:6b:e4:6e:e0:b1:95:
47:e8:54:24:d6:37:49:07:d2:bc:c6:42:84:b6:c4:bd:d8:fe:
dc:0e:cc:6d:34:df:f5:0b:7e:6f:7d:82:65:4a:74:0c:1b:1b:
cb:7d:00:ca:0e:d7:80:85:53:95:37:61:b6:27:9b:f9:25:8e:
e7:9d:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org