Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/syUpR4w30NhotM57bhZ9U7YlpB4.roa
File: syUpR4w30NhotM57bhZ9U7YlpB4.roa (raw, json)
Hash identifier: OGaLPCsjdmldekB4X+U5UystIEt7n+D4iUocSALGab4=
Subject key identifier: B3:25:29:47:8C:37:D0:D8:68:B4:CE:7B:6E:16:7D:53:B6:25:A4:1E
Certificate issuer: /CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Certificate serial: 01857054C5F551AE603A45966BC417E8E8CC
Authority key identifier: CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/syUpR4w30NhotM57bhZ9U7YlpB4.roa
Signing time: Mon 02 Jan 2023 02:34:41 +0000
ROA not before: Mon 02 Jan 2023 02:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212144
IP address blocks: 94.154.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:c5:f5:51:ae:60:3a:45:96:6b:c4:17:e8:e8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Validity
Not Before: Jan 2 02:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b32529478c37d0d868b4ce7b6e167d53b625a41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b6:72:43:6c:6d:56:e1:e1:5e:66:73:ad:b2:
a7:c3:c8:4a:f6:d6:ae:96:ce:c3:2c:a0:cc:51:4d:
62:33:35:87:2f:34:d4:fb:66:81:7b:31:38:ca:83:
66:12:67:f0:08:16:71:aa:46:47:16:97:5e:91:39:
3a:7a:70:6a:bf:4d:3d:92:d2:ca:14:aa:7b:e2:a5:
d3:10:0c:1b:03:da:38:ee:cb:65:99:6c:99:34:c4:
75:47:6a:75:35:f9:a1:39:7e:25:3d:53:36:8c:8b:
79:5a:20:b5:2d:16:eb:3d:4c:76:18:e6:9b:06:32:
08:31:11:04:41:a9:b4:39:68:fc:03:40:ae:99:24:
6a:f9:f5:44:d5:0b:af:d4:00:6d:2b:11:12:a8:68:
f5:44:8b:7c:c5:4f:58:c2:e4:e9:d6:49:06:b8:19:
26:e9:1e:07:89:7d:6f:57:58:46:92:f0:99:eb:28:
70:e0:db:78:d3:cd:ac:8e:23:d9:92:fe:5e:31:82:
20:d4:fe:36:9f:cc:a4:cb:f2:a6:0e:ed:75:a7:ad:
c4:bf:0d:43:ba:3d:4f:24:75:c7:a2:43:5b:c8:c2:
67:0e:a6:8a:93:36:d7:31:96:43:fd:83:d6:ba:ac:
e3:54:0a:0d:3b:fb:33:96:0c:7f:14:71:94:17:7b:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:25:29:47:8C:37:D0:D8:68:B4:CE:7B:6E:16:7D:53:B6:25:A4:1E
X509v3 Authority Key Identifier:
keyid:CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/syUpR4w30NhotM57bhZ9U7YlpB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:95:a9:8a:cc:35:8e:91:d7:a3:c6:d0:63:16:06:b7:ef:51:
df:75:29:d8:58:db:5e:dc:39:ee:eb:ee:f6:58:e5:38:b4:af:
98:7b:1b:d2:10:5d:1e:72:5c:79:77:a3:0f:10:3e:4e:42:34:
85:30:b3:41:c5:f5:d6:dd:26:b8:34:b9:ad:78:49:8a:5a:ef:
b5:d1:ff:54:f6:38:2e:ca:52:25:4c:a1:e0:71:36:cd:9b:7d:
07:81:bd:37:b9:83:3b:e6:ff:9d:18:52:5e:1f:b0:28:6c:44:
e8:40:c3:c6:f5:42:bf:9c:fc:d6:de:d9:44:c1:4a:63:8e:b0:
44:4c:23:68:bb:2f:95:02:85:70:85:9d:5d:56:84:c0:21:5d:
2b:c5:a8:e4:c6:d8:24:3a:a2:59:96:c9:20:0f:77:74:41:76:
07:1f:7c:35:ea:b4:2d:da:43:a7:56:9d:b3:ca:66:fd:ac:bd:
95:04:4b:54:c2:91:11:3a:c0:d2:21:70:66:33:bf:21:49:16:
02:73:4d:91:f5:7f:e9:c7:d7:c6:4b:6a:9d:f8:f3:59:1a:f9:
d6:fc:94:f1:14:91:96:ab:f7:f5:fa:43:5a:1f:b7:ee:85:c5:
9f:64:2a:b3:f3:df:2e:76:0f:3c:57:cd:1f:fb:ff:ab:31:d3:
06:4a:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:44 2024 by rpki-client on console-ams.rpki-client.org