Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/vSBmISd2a7rPcThtIjRxTIG-lj4.roa
File: vSBmISd2a7rPcThtIjRxTIG-lj4.roa (raw, json)
Hash identifier: arunCJlTYBgO30YJsHKZlevqb2+g2DnRTAqnhorItYU=
Subject key identifier: BD:20:66:21:27:76:6B:BA:CF:71:38:6D:22:34:71:4C:81:BE:96:3E
Certificate issuer: /CN=5d99ffba1b1296344a1ca0e0cd557d717e324aae
Certificate serial: 01857343BE9B815E78F6240B9C1528D3A71C
Authority key identifier: 5D:99:FF:BA:1B:12:96:34:4A:1C:A0:E0:CD:55:7D:71:7E:32:4A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZn_uhsSljRKHKDgzVV9cX4ySq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/vSBmISd2a7rPcThtIjRxTIG-lj4.roa
Signing time: Mon 02 Jan 2023 16:14:57 +0000
ROA not before: Mon 02 Jan 2023 16:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57013
IP address blocks: 194.26.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:be:9b:81:5e:78:f6:24:0b:9c:15:28:d3:a7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99ffba1b1296344a1ca0e0cd557d717e324aae
Validity
Not Before: Jan 2 16:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd20662127766bbacf71386d2234714c81be963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:ae:8c:57:92:6e:3b:60:4e:15:45:a9:fc:
b6:c3:58:d1:7d:4a:e0:02:bb:f6:47:a1:d2:20:db:
72:25:72:75:3b:53:43:04:d8:0b:02:8c:3d:34:86:
7c:fb:e1:f3:6c:c4:5a:51:c9:19:32:a7:b7:f7:e1:
b1:0b:34:c3:39:14:c8:1e:53:e6:d6:97:a8:b2:b6:
ab:27:2d:85:91:1f:f0:a3:79:fc:c8:48:c8:0d:22:
d5:93:e4:a9:21:30:f2:9d:f4:21:90:f3:1c:04:bf:
b1:0d:8d:29:a8:05:9c:4a:3f:e5:58:2e:95:ba:2b:
10:a7:b6:d6:f4:35:c8:6e:56:24:7c:39:21:c6:60:
27:4b:c9:70:5d:77:7f:3e:8d:a8:83:fd:d9:97:c1:
4a:82:11:89:af:31:d6:74:f7:3c:25:76:cd:dd:e1:
45:f4:e8:2b:7b:27:f3:5b:5d:42:2f:1f:88:e4:bf:
26:8c:d8:0f:1f:0d:4c:c1:8a:62:81:82:0e:3d:da:
18:66:d4:ba:73:c2:02:80:4f:f9:fb:e3:64:5b:8c:
d2:0a:f4:86:f4:c7:3b:b3:c3:b9:31:4d:6f:3b:25:
fe:00:75:b2:04:35:1d:81:f2:52:6e:8d:ee:47:b1:
29:d4:7e:a9:17:82:95:de:ae:a4:59:7f:0b:a8:ab:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:66:21:27:76:6B:BA:CF:71:38:6D:22:34:71:4C:81:BE:96:3E
X509v3 Authority Key Identifier:
keyid:5D:99:FF:BA:1B:12:96:34:4A:1C:A0:E0:CD:55:7D:71:7E:32:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZn_uhsSljRKHKDgzVV9cX4ySq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/vSBmISd2a7rPcThtIjRxTIG-lj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/XZn_uhsSljRKHKDgzVV9cX4ySq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.220.0/24
Signature Algorithm: sha256WithRSAEncryption
28:13:ef:69:46:a8:e8:88:e0:ba:6d:52:2e:fd:08:48:98:f2:
82:8a:3d:71:a8:1d:f4:41:15:75:6a:e8:84:15:4b:e4:e7:ae:
80:b6:60:1f:9f:78:10:30:00:07:57:94:64:94:c7:8a:4e:fb:
eb:e0:1c:30:c1:ea:41:bd:af:75:d8:0f:48:bf:b7:a9:7b:39:
50:0e:b5:44:75:51:be:a0:b7:0e:0b:e7:2d:7c:a6:16:1f:b5:
2b:60:7e:6b:1c:dc:8c:cb:22:dd:81:40:06:95:f2:0e:58:5b:
76:bd:85:96:d9:3a:67:00:41:2a:3b:72:b2:3e:12:f3:28:17:
b2:32:0b:b0:bb:44:6e:70:96:9a:2f:47:fd:5f:e0:55:3c:13:
31:48:9e:56:28:85:e1:0a:57:30:2a:2e:50:49:d3:cf:3f:84:
6c:ee:83:4d:56:4b:cb:57:aa:05:ab:df:37:0e:a1:1b:45:76:
f7:af:59:ba:cd:8d:34:fe:77:b2:2b:37:40:d7:64:f0:bb:80:
fd:7c:b5:80:0a:27:80:63:01:5b:d9:0d:61:f1:df:26:7c:90:
7b:c9:1d:7c:dd:f4:ea:44:ed:bf:ed:29:56:da:f5:57:27:2c:
65:e3:58:78:4d:19:de:b4:f2:91:15:c8:46:51:d5:d8:41:be:
62:bc:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:23 2024 by rpki-client on console-ams.rpki-client.org