Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/8XIVSyjzh3vt3dweP88AzEdzDo0.roa
File: 8XIVSyjzh3vt3dweP88AzEdzDo0.roa (raw, json)
Hash identifier: PXnZrbmsCc0h60fclEvNi/7p0Tll2353HrmDmvS/9qo=
Subject key identifier: F1:72:15:4B:28:F3:87:7B:ED:DD:DC:1E:3F:CF:00:CC:47:73:0E:8D
Certificate issuer: /CN=5d99ffba1b1296344a1ca0e0cd557d717e324aae
Certificate serial: 8C739B
Authority key identifier: 5D:99:FF:BA:1B:12:96:34:4A:1C:A0:E0:CD:55:7D:71:7E:32:4A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZn_uhsSljRKHKDgzVV9cX4ySq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/8XIVSyjzh3vt3dweP88AzEdzDo0.roa
Signing time: Sat 01 Jan 2022 02:55:18 +0000
ROA not before: Sat 01 Jan 2022 02:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57013
IP address blocks: 194.26.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9204635 (0x8c739b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99ffba1b1296344a1ca0e0cd557d717e324aae
Validity
Not Before: Jan 1 02:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f172154b28f3877beddddc1e3fcf00cc47730e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:aa:53:52:30:b5:8b:e4:45:40:04:94:66:
3e:08:f0:6e:dd:f6:a1:ac:99:4a:03:f6:e8:70:26:
1e:44:08:f3:50:bb:e1:e8:19:f1:f8:f2:7e:8a:aa:
dd:c3:60:97:97:c5:ea:0d:27:25:af:9e:96:60:8f:
3c:ae:b7:cb:5d:9e:95:91:8a:93:ed:e4:1b:7a:0e:
ee:c6:93:6c:c4:d7:ba:a3:38:6c:c3:c4:e1:67:5f:
62:9c:e5:da:fe:26:61:38:75:f1:84:a5:00:b8:d8:
55:e5:ee:cf:87:24:45:fd:c4:0e:b1:46:3e:a2:50:
0e:fe:b9:12:95:f8:13:12:70:55:5e:36:3a:5d:c7:
98:bc:52:00:cc:8d:8e:f7:68:cd:10:72:a8:f1:3b:
e8:d1:cf:7d:7c:db:f9:b9:48:b9:89:bf:1e:bd:50:
45:8f:92:92:10:be:f9:e0:0c:35:61:93:e7:fe:84:
a9:77:2f:ea:0a:84:4b:1e:c2:68:7b:88:d1:3d:bc:
b8:15:22:d5:ed:6d:e2:9d:cc:78:41:96:4f:a8:10:
f9:e0:41:57:64:70:1a:e1:2a:e5:84:ec:95:2f:c6:
49:82:b3:06:f1:6f:6b:62:af:db:59:5b:e0:f9:6e:
44:d7:20:01:92:8a:a7:54:af:22:5f:f0:04:70:b0:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:72:15:4B:28:F3:87:7B:ED:DD:DC:1E:3F:CF:00:CC:47:73:0E:8D
X509v3 Authority Key Identifier:
keyid:5D:99:FF:BA:1B:12:96:34:4A:1C:A0:E0:CD:55:7D:71:7E:32:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZn_uhsSljRKHKDgzVV9cX4ySq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/8XIVSyjzh3vt3dweP88AzEdzDo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/XZn_uhsSljRKHKDgzVV9cX4ySq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:89:e0:14:4e:31:d3:f9:8e:8f:93:e0:92:d9:a7:fe:63:d2:
55:c5:cd:7f:24:e1:51:92:67:02:96:46:c4:f3:bc:f1:01:8f:
ab:b1:b5:a9:1a:da:c2:01:1e:ed:85:a8:be:96:de:6c:2e:66:
b7:51:d8:5b:a6:25:cc:2f:10:2c:e2:cb:76:b8:93:85:60:06:
d0:e0:02:d9:19:9c:f2:19:d4:43:de:b2:64:a9:7c:45:00:7b:
3a:dd:9c:db:18:66:85:f4:f6:f7:5a:fe:3e:e5:10:2b:c9:5e:
67:9a:dc:1b:c4:8d:11:dc:84:bd:9f:d2:7f:56:a6:ab:b8:ce:
be:db:e7:67:51:83:d4:ca:3f:0f:5f:00:1e:44:08:73:24:ea:
6a:aa:93:37:e1:6a:b0:ad:7f:ed:b4:65:59:0e:0c:97:d9:83:
62:18:1a:a3:f4:23:2a:96:15:88:24:fc:87:1d:79:82:e8:05:
a1:d6:c4:27:e4:c4:47:ab:dc:b1:e5:44:a3:fe:8e:20:a0:2d:
1b:49:e0:a3:94:97:b6:9a:3e:eb:53:06:5d:ab:b0:90:2b:11:
ad:f1:cf:3f:6a:7c:e4:4e:f3:a0:c9:77:eb:e3:0f:0c:ff:47:
c5:be:4a:0a:a3:c7:38:1b:95:ef:2d:7d:39:f7:35:38:53:2a:
3f:fa:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:57 2024 by rpki-client on console-fra.rpki-client.org