Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/HrUDBZKvoSMXKKXzCbbhTH0OsfY.roa
File: HrUDBZKvoSMXKKXzCbbhTH0OsfY.roa (raw, json)
Hash identifier: XvdxRVIAoKKpGWImqGdywWTR7CevhybZVY7s99daPl4=
Subject key identifier: 1E:B5:03:05:92:AF:A1:23:17:28:A5:F3:09:B6:E1:4C:7D:0E:B1:F6
Certificate issuer: /CN=82231390cbfed43e23ed0b44ffd34139859a6571
Certificate serial: 018964C0513C217AAA0F22552FA176BBECF7
Authority key identifier: 82:23:13:90:CB:FE:D4:3E:23:ED:0B:44:FF:D3:41:39:85:9A:65:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giMTkMv-1D4j7QtE_9NBOYWaZXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/HrUDBZKvoSMXKKXzCbbhTH0OsfY.roa
Signing time: Mon 17 Jul 2023 16:47:52 +0000
ROA not before: Mon 17 Jul 2023 16:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 194.26.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:51:3c:21:7a:aa:0f:22:55:2f:a1:76:bb:ec:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82231390cbfed43e23ed0b44ffd34139859a6571
Validity
Not Before: Jul 17 16:47:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eb5030592afa1231728a5f309b6e14c7d0eb1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4b:c7:92:3b:ca:0b:22:ee:7b:cc:fb:bd:3d:
67:a6:6e:84:77:c5:43:49:26:a2:14:12:f2:e9:27:
9d:d8:e5:fb:b7:15:fa:e0:ef:e4:19:09:96:18:d7:
33:2c:1a:b0:05:03:4d:d7:8d:da:3a:a5:1e:41:f7:
56:c5:19:98:04:0b:87:d3:fa:82:18:0c:77:40:df:
15:30:0e:80:37:d8:1c:1d:9f:58:41:62:d3:75:8f:
9a:3b:48:64:e3:35:17:98:c6:89:fd:90:b5:9b:f7:
2d:bf:b8:28:a2:64:9a:d3:64:91:fb:37:30:a4:27:
3d:78:09:2e:20:db:d9:4b:6e:ab:cd:4e:ec:5a:77:
03:a6:18:9f:0d:1b:13:6a:05:0d:70:64:83:92:e2:
93:f2:e3:4f:00:56:ff:dc:42:1f:19:d3:30:46:62:
29:57:26:f0:b0:71:74:6c:90:ae:e5:d9:4d:0c:a6:
b4:d9:9a:35:2a:74:24:ee:5c:51:90:fd:a8:18:70:
1e:46:51:0f:90:2a:b8:39:46:b0:f1:3d:79:50:9d:
11:2e:8c:72:63:8f:ca:3a:fd:8d:d6:48:cd:66:3a:
f5:78:02:da:21:f1:c2:77:4b:fb:b4:bc:8e:30:92:
3b:97:70:aa:97:79:fb:90:96:95:d2:d6:4e:9c:f1:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B5:03:05:92:AF:A1:23:17:28:A5:F3:09:B6:E1:4C:7D:0E:B1:F6
X509v3 Authority Key Identifier:
keyid:82:23:13:90:CB:FE:D4:3E:23:ED:0B:44:FF:D3:41:39:85:9A:65:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giMTkMv-1D4j7QtE_9NBOYWaZXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/HrUDBZKvoSMXKKXzCbbhTH0OsfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/40d11b-ac02-406b-a3da-2ed2a3de440e/1/giMTkMv-1D4j7QtE_9NBOYWaZXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:59:f8:43:f4:28:e8:26:dc:50:57:05:1e:6b:90:32:02:57:
60:61:10:44:4c:74:14:bf:d9:3b:37:bc:91:20:93:c2:52:c3:
2d:5d:cd:59:91:e6:cc:b8:ce:67:9e:dd:6a:51:82:48:84:b6:
10:eb:17:e0:8f:85:8f:99:ba:52:98:ac:eb:89:44:00:b5:8d:
8a:51:47:5b:2b:aa:07:1b:35:a3:c9:e4:77:bf:cd:68:f4:98:
c9:c6:d1:7a:c1:75:56:d2:87:b3:9d:17:f4:8c:dc:3e:d7:12:
d4:bd:c7:f4:54:fa:cf:b4:31:6d:a4:d0:dc:c7:9e:82:29:65:
bd:b9:b6:98:df:8d:07:34:1c:4d:14:a6:84:de:2f:d7:0c:9b:
51:44:08:6c:b0:2a:57:d9:88:02:db:4f:6b:97:9c:7a:06:fc:
4d:64:27:bc:2e:5c:68:41:13:cd:a2:9c:84:b1:2a:44:25:3f:
63:45:e8:3d:e6:8b:60:39:73:2f:23:41:f1:ce:de:af:86:93:
fa:e7:ec:f6:92:3d:0c:23:9c:69:2d:99:62:45:de:21:05:39:
72:8c:7c:6c:19:78:fd:d7:43:10:06:fc:9a:51:77:fa:8c:cc:
ef:34:1b:e5:3b:25:c5:b0:16:44:f8:d9:ae:32:d9:d3:b5:e4:
15:3a:c1:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwFE8IXqqDyJVL6F2u+z3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMjMxMzkwY2JmZWQ0M2UyM2VkMGI0NGZmZDM0MTM5ODU5
YTY1NzEwHhcNMjMwNzE3MTY0NzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWI1MDMwNTkyYWZhMTIzMTcyOGE1ZjMwOWI2ZTE0YzdkMGViMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70vHkjvKCyLue8z7vT1npm6Ed8VD
SSaiFBLy6Sed2OX7txX64O/kGQmWGNczLBqwBQNN143aOqUeQfdWxRmYBAuH0/qC
GAx3QN8VMA6AN9gcHZ9YQWLTdY+aO0hk4zUXmMaJ/ZC1m/ctv7goomSa02SR+zcw
pCc9eAkuINvZS26rzU7sWncDphifDRsTagUNcGSDkuKT8uNPAFb/3EIfGdMwRmIp
VybwsHF0bJCu5dlNDKa02Zo1KnQk7lxRkP2oGHAeRlEPkCq4OUaw8T15UJ0RLoxy
Y4/KOv2N1kjNZjr1eALaIfHCd0v7tLyOMJI7l3Cql3n7kJaV0tZOnPG7FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB61AwWSr6EjFyil8wm24Ux9DrH2MB8GA1UdIwQY
MBaAFIIjE5DL/tQ+I+0LRP/TQTmFmmVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lNVGtNdi0xRDRqN1F0RV85TkJPWVdhWlhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80MGQxMWItYWMwMi00MDZiLWEzZGEt
MmVkMmEzZGU0NDBlLzEvSHJVREJaS3ZvU01YS0tYekNiYmhUSDBPc2ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80MGQxMWItYWMwMi00MDZiLWEzZGEtMmVkMmEzZGU0NDBl
LzEvZ2lNVGtNdi0xRDRqN1F0RV85TkJPWVdhWlhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrMMA0G
CSqGSIb3DQEBCwUAA4IBAQBaWfhD9CjoJtxQVwUea5AyAldgYRBETHQUv9k7N7yR
IJPCUsMtXc1ZkebMuM5nnt1qUYJIhLYQ6xfgj4WPmbpSmKzriUQAtY2KUUdbK6oH
GzWjyeR3v81o9JjJxtF6wXVW0oeznRf0jNw+1xLUvcf0VPrPtDFtpNDcx56CKWW9
ubaY340HNBxNFKaE3i/XDJtRRAhssCpX2YgC209rl5x6BvxNZCe8LlxoQRPNopyE
sSpEJT9jReg95otgOXMvI0Hxzt6vhpP65+z2kj0MI5xpLZliRd4hBTlyjHxsGXj9
10MQBvyaUXf6jMzvNBvlOyXFsBZE+NmuMtnTteQVOsF5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:49 2024 by rpki-client on console-fra.rpki-client.org