Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/mo_hBAdG3uPhGzdU0WlGydREWAs.roa
File: mo_hBAdG3uPhGzdU0WlGydREWAs.roa (raw, json)
Hash identifier: K8Z2B3aPaBmkorOvQHqgiAK4vBwS8eddquQrCgo6vO8=
Subject key identifier: 9A:8F:E1:04:07:46:DE:E3:E1:1B:37:54:D1:69:46:C9:D4:44:58:0B
Certificate issuer: /CN=72e34bc00843e43cf7d38d94201a633638e28dc0
Certificate serial: 018573683C568D62569D1005DA705C7B3758
Authority key identifier: 72:E3:4B:C0:08:43:E4:3C:F7:D3:8D:94:20:1A:63:36:38:E2:8D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuNLwAhD5Dz3042UIBpjNjjijcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/mo_hBAdG3uPhGzdU0WlGydREWAs.roa
Signing time: Mon 02 Jan 2023 16:54:48 +0000
ROA not before: Mon 02 Jan 2023 16:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12741
IP address blocks: 194.110.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:3c:56:8d:62:56:9d:10:05:da:70:5c:7b:37:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e34bc00843e43cf7d38d94201a633638e28dc0
Validity
Not Before: Jan 2 16:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a8fe1040746dee3e11b3754d16946c9d444580b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8f:08:01:23:ee:92:92:b9:19:fe:87:b8:b6:
4f:3b:03:9b:c1:f1:de:e5:fa:9e:57:57:3c:64:e4:
ed:86:13:be:a1:b5:0f:1d:43:bc:0f:0a:86:de:a9:
96:20:73:e4:86:94:6e:6d:32:bc:4a:16:64:95:49:
70:0b:37:95:9c:d4:28:2f:d8:1b:2b:10:8a:a5:cd:
09:eb:0a:a5:53:3f:41:30:7e:25:6d:c9:15:9d:93:
05:24:16:cc:70:02:01:25:55:73:eb:ec:08:5b:7f:
0e:22:58:3a:77:d1:fd:70:65:14:9c:8e:0f:e1:3a:
77:8c:92:d4:17:8e:60:e0:37:76:fe:73:e2:08:ad:
87:b2:b6:f3:a4:ed:e0:30:30:78:25:ee:ca:8f:c5:
1d:d1:42:67:ef:89:da:8c:05:45:d6:38:4c:c9:7f:
d9:e4:66:97:3e:f1:a6:eb:6e:4f:14:eb:a4:cf:e8:
a3:a4:a6:db:fd:d0:78:a1:ff:ea:f2:5a:80:a7:da:
93:6a:4d:1d:f5:ea:2b:f7:d6:d4:35:55:92:73:2e:
1f:d8:75:e5:0b:79:68:1e:25:48:bd:21:d4:9c:10:
3c:26:7a:24:b2:4d:c7:52:71:57:fc:2c:cc:c6:93:
f4:48:51:f6:c5:98:8c:1d:1e:3d:1c:ab:90:9f:7d:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8F:E1:04:07:46:DE:E3:E1:1B:37:54:D1:69:46:C9:D4:44:58:0B
X509v3 Authority Key Identifier:
keyid:72:E3:4B:C0:08:43:E4:3C:F7:D3:8D:94:20:1A:63:36:38:E2:8D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuNLwAhD5Dz3042UIBpjNjjijcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/mo_hBAdG3uPhGzdU0WlGydREWAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/cuNLwAhD5Dz3042UIBpjNjjijcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7e:e6:0c:1d:a4:78:bd:f1:22:14:fe:a7:86:c2:d2:73:79:
5f:44:66:4d:40:2b:a7:a0:72:d1:93:92:e2:ba:2a:55:c5:37:
00:fe:da:71:d3:d6:83:b1:6a:05:87:ed:a4:30:a8:38:0c:f7:
7c:d8:43:17:f4:4a:9e:51:70:15:b6:91:a0:b8:d0:f8:ef:87:
f0:52:9c:b6:df:9d:b6:50:a2:e5:80:17:72:df:f8:7d:57:80:
ff:b3:21:75:c1:15:f2:a6:a0:e3:89:73:4e:7e:ce:8e:ce:35:
13:49:d1:1c:c8:c6:7f:d7:a6:b1:28:af:d3:9d:cb:41:79:7d:
b1:2c:4a:0f:06:dc:ff:a8:df:0a:b0:ee:e9:d2:9b:ae:43:0f:
6c:1b:9e:e0:72:39:a1:41:63:65:06:36:9f:50:02:80:8c:44:
ba:d5:a8:08:fe:3a:ba:55:4a:98:9e:36:1b:98:99:84:e5:a5:
12:42:10:d9:4a:14:6a:48:db:4f:d3:e0:bf:d7:8e:78:03:ee:
f2:ba:ee:c6:fd:93:81:00:88:ca:f0:b0:f2:20:64:26:84:e9:
ff:b2:68:4e:39:d8:34:d1:34:1b:cf:4e:3b:cc:c6:e6:6b:08:
54:7b:3a:68:26:ba:73:88:5e:8f:76:45:34:68:d9:58:38:39:
d6:c5:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:37 2024 by rpki-client on console-fra.rpki-client.org