Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/5cZUX-u5nEpe0HvWWpQxqBDHAzI.roa
File: 5cZUX-u5nEpe0HvWWpQxqBDHAzI.roa (raw, json)
Hash identifier: taXkQlUfWE2eNf0dXEmG2e/4nz6SHIu+sPUk6e6BvTk=
Subject key identifier: E5:C6:54:5F:EB:B9:9C:4A:5E:D0:7B:D6:5A:94:31:A8:10:C7:03:32
Certificate issuer: /CN=82231390cbfed43e23ed0b44ffd34139859a6571
Certificate serial: 98EC39
Authority key identifier: 82:23:13:90:CB:FE:D4:3E:23:ED:0B:44:FF:D3:41:39:85:9A:65:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giMTkMv-1D4j7QtE_9NBOYWaZXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/5cZUX-u5nEpe0HvWWpQxqBDHAzI.roa
Signing time: Sat 01 Jan 2022 03:01:53 +0000
ROA not before: Sat 01 Jan 2022 03:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 194.26.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10021945 (0x98ec39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82231390cbfed43e23ed0b44ffd34139859a6571
Validity
Not Before: Jan 1 03:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5c6545febb99c4a5ed07bd65a9431a810c70332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:bc:9e:2b:83:a3:0e:a9:fa:a2:d8:f5:15:
e6:1d:a0:b7:31:ca:4d:2b:70:95:e7:9c:63:8a:16:
dc:81:fc:57:28:58:e7:41:d1:91:7c:95:fb:d7:5f:
97:a6:0a:70:54:a9:e6:3f:5e:82:7d:e8:e1:0a:b9:
4a:24:00:f3:d2:07:5d:78:4e:97:38:27:7a:db:fa:
b9:ea:ca:ea:ec:88:a5:74:c0:38:f7:1b:ab:f0:4e:
0f:bc:58:11:2b:ff:fe:e2:89:99:34:ee:40:b6:32:
1e:f2:3f:a3:a9:e8:32:22:d3:73:cb:0e:4f:56:52:
4e:a7:1b:78:34:57:d4:6c:bc:ba:29:13:38:bc:d0:
b3:da:2c:42:9a:3c:27:03:bd:35:6f:4b:3b:1e:5f:
db:17:50:db:4f:3e:28:e3:ed:a1:37:b4:2b:44:f1:
a9:6e:ff:42:57:54:d7:98:ce:23:a9:df:38:fd:86:
31:54:97:6d:8f:38:1b:45:98:35:0a:b9:dd:5f:f7:
99:d6:4a:75:d5:80:de:e0:b7:09:9d:10:a8:b5:f6:
56:ec:ed:69:0a:c6:bc:14:3e:3d:d4:8d:19:0b:e0:
a1:bb:5f:d7:8d:18:c6:da:0a:a3:93:e3:e7:87:b3:
5b:c6:c0:59:19:09:84:a7:7c:f0:be:4d:e4:df:59:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:54:5F:EB:B9:9C:4A:5E:D0:7B:D6:5A:94:31:A8:10:C7:03:32
X509v3 Authority Key Identifier:
keyid:82:23:13:90:CB:FE:D4:3E:23:ED:0B:44:FF:D3:41:39:85:9A:65:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giMTkMv-1D4j7QtE_9NBOYWaZXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/5cZUX-u5nEpe0HvWWpQxqBDHAzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/giMTkMv-1D4j7QtE_9NBOYWaZXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.204.0/24
Signature Algorithm: sha256WithRSAEncryption
77:98:c1:39:ea:f9:bd:4a:58:d8:e9:b2:ee:5b:46:d8:9f:c0:
1f:20:d7:32:21:aa:fe:99:a4:a6:d2:bc:a1:52:30:1e:84:82:
0d:93:02:5e:b2:c0:40:bd:3d:82:bc:33:e1:d7:9f:0f:d4:54:
70:98:69:21:81:3d:fb:0b:96:f1:1d:5c:41:12:61:e1:9f:6e:
d2:28:7f:bc:6b:6c:e6:b4:ed:11:fd:ac:d3:fa:c7:36:d7:eb:
3b:16:3c:d4:77:01:52:d7:b3:8c:c3:a7:38:55:0a:c4:24:da:
47:84:c8:f5:3d:72:aa:6d:2a:02:95:da:43:3e:1a:dc:9d:5f:
c1:10:6e:8d:81:78:9d:6b:4d:42:89:62:b8:1d:a7:56:23:99:
ad:ba:14:03:d5:e0:94:90:e4:3f:82:a5:59:0e:f0:25:17:bc:
d8:15:93:07:23:7a:0c:43:6c:68:9e:04:ee:c5:e0:03:0e:69:
75:fe:9d:a7:ef:52:cc:75:13:02:d7:2d:eb:dc:d2:fa:73:de:
28:6c:fc:34:64:de:12:cc:47:47:09:74:5a:2a:d3:fd:e0:a5:
28:10:58:4a:70:c5:f9:19:81:1c:87:31:fa:00:7c:d1:da:34:
0d:05:86:eb:34:7c:7f:74:b9:e1:36:ca:ab:7f:82:30:7a:01:
82:66:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org