Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/45f808-6c27-4579-8529-2bf8618b6f36/1/rr2jXtIioc7gJY3N8XLmm1sgLmU.roa
File: rr2jXtIioc7gJY3N8XLmm1sgLmU.roa (raw, json)
Hash identifier: q+L349nhrfyad66FPFG2ls1D9dDLbSWITAs6JFpYgoA=
Subject key identifier: AE:BD:A3:5E:D2:22:A1:CE:E0:25:8D:CD:F1:72:E6:9B:5B:20:2E:65
Certificate issuer: /CN=3001d9bd20658eac2b261ab16872b8f4764ebbb7
Certificate serial: 01884284452562DDB8872FD88501D0E8147F
Authority key identifier: 30:01:D9:BD:20:65:8E:AC:2B:26:1A:B1:68:72:B8:F4:76:4E:BB:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAHZvSBljqwrJhqxaHK49HZOu7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/45f808-6c27-4579-8529-2bf8618b6f36/1/rr2jXtIioc7gJY3N8XLmm1sgLmU.roa
Signing time: Mon 22 May 2023 08:12:24 +0000
ROA not before: Mon 22 May 2023 08:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62447
IP address blocks: 194.26.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:84:45:25:62:dd:b8:87:2f:d8:85:01:d0:e8:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3001d9bd20658eac2b261ab16872b8f4764ebbb7
Validity
Not Before: May 22 08:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aebda35ed222a1cee0258dcdf172e69b5b202e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:68:d6:08:14:03:87:6d:c9:1e:c7:67:e3:29:
4a:ff:8c:ba:15:40:3c:08:36:b1:5e:80:28:b7:38:
4a:7f:79:29:26:61:1d:40:3a:ad:d6:32:2d:eb:9f:
94:ca:56:7c:ad:5e:d1:24:30:fb:bd:69:b5:47:ec:
20:fd:f9:f9:0e:0a:14:21:06:b4:74:43:3a:12:f6:
21:dd:33:95:68:21:5e:a1:a7:5d:04:a2:10:7d:79:
5d:ea:1e:97:a4:25:45:05:6d:81:81:7f:47:6e:31:
25:81:18:64:3d:d9:c9:a9:df:1f:63:ff:e1:ca:15:
d8:42:61:4f:20:81:df:e3:16:22:a3:6b:6e:69:bc:
cd:04:80:ae:d7:4e:fd:1c:45:cc:53:5a:6b:64:6a:
a6:70:74:4f:96:fb:53:2d:46:25:28:32:52:12:e9:
7b:6e:b7:9a:ed:6c:ce:5a:3a:8b:2b:a7:78:b2:b4:
7f:f9:25:d8:61:cf:db:27:32:14:ab:19:ba:12:a5:
c2:92:47:7b:fd:9b:8c:75:7a:6b:2a:0e:14:b1:73:
c1:36:c3:28:2a:4f:03:f5:63:e6:54:4a:ab:d6:75:
dc:8d:62:16:e2:5d:9d:7c:53:bc:e5:3d:0b:86:d4:
fd:c0:a4:dd:17:9c:64:0e:9d:dc:bf:9b:c1:9d:22:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:A3:5E:D2:22:A1:CE:E0:25:8D:CD:F1:72:E6:9B:5B:20:2E:65
X509v3 Authority Key Identifier:
keyid:30:01:D9:BD:20:65:8E:AC:2B:26:1A:B1:68:72:B8:F4:76:4E:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAHZvSBljqwrJhqxaHK49HZOu7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/45f808-6c27-4579-8529-2bf8618b6f36/1/rr2jXtIioc7gJY3N8XLmm1sgLmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/45f808-6c27-4579-8529-2bf8618b6f36/1/MAHZvSBljqwrJhqxaHK49HZOu7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.227.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c6:00:0c:48:e0:63:97:ef:cb:b9:f7:fb:63:5c:b3:24:66:
de:5d:07:3a:bb:dd:25:d8:b6:f4:2e:8c:dd:b2:fc:5c:33:18:
07:fe:21:c1:12:3b:b9:03:0a:d9:d1:34:f8:09:b5:dc:f6:f9:
f0:a6:89:dc:f6:43:33:b4:72:d7:f8:3d:0a:0c:eb:eb:8f:86:
1f:33:a2:19:ea:f1:32:d1:39:8a:a0:c8:34:09:d8:97:3c:4a:
97:44:18:5b:45:87:9d:ac:47:78:48:76:99:23:60:9e:fd:a1:
eb:e6:0a:39:aa:50:4f:e8:6e:b4:b3:68:c5:27:7c:15:6d:e6:
71:54:4d:e7:a0:a6:00:90:d9:82:20:b1:56:b1:40:90:3d:0d:
fa:2d:2d:76:50:82:78:49:e9:c7:bc:ec:0c:53:0e:24:c9:3a:
1d:70:d2:3e:51:2a:fc:1a:7d:da:cc:51:90:a6:50:55:1c:d9:
0c:e7:9c:51:da:6f:b9:a5:1c:4f:28:08:c1:8c:2a:b8:12:88:
98:28:c9:b2:c2:c5:7b:28:f6:ca:2e:c4:86:a1:4a:5d:14:5c:
de:96:c2:54:82:3d:d5:d9:2f:57:cd:5e:4d:66:0e:b1:3d:3a:
0c:e1:74:39:58:3d:c7:d4:ff:65:1c:eb:d1:2c:ba:0a:4f:41:
30:68:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:31 2024 by rpki-client on console-ams.rpki-client.org