Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/leCOP0H1yc7UtXKK_ImLEJ2mYcY.roa
File: leCOP0H1yc7UtXKK_ImLEJ2mYcY.roa (raw, json)
Hash identifier: +mA4dRZrELtvkcbQuE78C2mkXec/Gue9a/abdVdRpAU=
Subject key identifier: 95:E0:8E:3F:41:F5:C9:CE:D4:B5:72:8A:FC:89:8B:10:9D:A6:61:C6
Certificate issuer: /CN=3b1f8da9cb0e362c424196b20e604e94a83bc850
Certificate serial: 01857130A106EC7AAF924D4A84E2E25D5E88
Authority key identifier: 3B:1F:8D:A9:CB:0E:36:2C:42:41:96:B2:0E:60:4E:94:A8:3B:C8:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ox-NqcsONixCQZayDmBOlKg7yFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/leCOP0H1yc7UtXKK_ImLEJ2mYcY.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.56.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a1:06:ec:7a:af:92:4d:4a:84:e2:e2:5d:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b1f8da9cb0e362c424196b20e604e94a83bc850
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95e08e3f41f5c9ced4b5728afc898b109da661c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:59:94:8a:bb:6d:77:e7:7a:d5:6a:00:c4:
49:7e:f7:53:f8:46:54:2f:c8:27:4f:b7:e9:e4:52:
a3:d5:0e:dc:70:b3:47:f2:e7:29:a7:f4:49:2c:ea:
58:71:f7:4e:e3:88:16:0b:2b:48:55:53:5e:1c:8c:
6a:93:77:90:b3:22:77:90:8d:ad:ba:1b:6e:cd:12:
37:39:96:c1:bc:3c:9d:37:36:c4:65:37:fe:00:ef:
72:99:b5:de:70:78:03:56:80:66:19:03:d6:96:83:
a7:ef:f1:c5:00:9d:69:48:25:1c:2b:df:03:d3:b7:
f2:08:34:bd:6f:c4:5d:a8:3b:a4:30:96:18:81:d4:
c7:d5:fd:22:84:e1:65:f7:3a:8a:81:45:42:fa:fd:
e6:0b:3f:da:3d:f3:a6:55:1d:a4:f1:b5:5d:5e:bd:
be:d7:7c:36:83:56:c0:87:ea:df:1b:59:08:95:b8:
16:c8:f6:20:16:d3:28:76:da:93:26:f7:de:71:2e:
7d:2d:81:71:c8:e8:26:a4:91:f3:82:e5:74:b2:2b:
d2:f2:59:a3:ac:26:1e:c4:b3:8d:d5:06:4b:30:4d:
ea:c5:df:c0:ae:c0:77:08:60:d1:ae:83:7b:62:0d:
bd:d9:0c:db:80:71:ef:ae:25:e8:50:c0:67:bf:23:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:8E:3F:41:F5:C9:CE:D4:B5:72:8A:FC:89:8B:10:9D:A6:61:C6
X509v3 Authority Key Identifier:
keyid:3B:1F:8D:A9:CB:0E:36:2C:42:41:96:B2:0E:60:4E:94:A8:3B:C8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ox-NqcsONixCQZayDmBOlKg7yFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/leCOP0H1yc7UtXKK_ImLEJ2mYcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/Ox-NqcsONixCQZayDmBOlKg7yFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.149.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:f1:e0:47:46:09:82:32:1d:9c:4d:a9:92:87:39:14:ce:0a:
10:72:87:50:5b:be:27:57:44:c9:f1:42:d0:0b:26:d4:0a:89:
da:fb:51:35:58:54:9c:ea:96:4c:a4:5c:4f:8c:8c:b3:10:c4:
f2:b5:f5:91:a0:90:c9:9e:85:c0:dd:f4:66:2e:30:77:6d:40:
a6:0e:98:cd:c5:d1:8c:91:09:c8:47:bd:8d:e5:0c:65:ba:e9:
2e:d7:c2:9a:a2:2a:5b:05:5b:fe:b2:54:8b:2b:33:d9:60:67:
48:e7:79:07:57:cb:9c:71:aa:38:a0:45:65:9f:65:cb:0f:96:
24:78:29:67:e5:0e:b4:55:2e:61:f6:5c:13:12:b9:d6:f1:4c:
b2:ff:50:30:33:dd:38:fd:5e:4e:9a:3c:7a:c0:6c:36:76:85:
83:12:92:c5:c0:6c:05:d5:b9:95:72:0b:7c:05:9c:29:de:65:
b9:f0:6a:91:df:be:b4:7e:78:e6:25:b0:d8:ba:2b:96:6e:80:
af:1d:ec:db:77:fc:57:a7:00:b3:c8:4c:d6:8c:4e:36:60:bf:
b0:a3:dc:18:69:11:03:80:f0:32:6e:bb:e4:71:5d:82:40:bd:
eb:18:14:09:78:da:e7:b6:5e:a7:c3:84:bf:fc:10:19:c3:f7:
3b:2e:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:29 2024 by rpki-client on console-fra.rpki-client.org