Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/J76ldmbFpX77IwbztHha3zzBJtU.roa
File: J76ldmbFpX77IwbztHha3zzBJtU.roa (raw, json)
Hash identifier: eu2vSRsl7FVORP41U50PFgJ2hGdAn/7W6oePcAolwpI=
Subject key identifier: 27:BE:A5:76:66:C5:A5:7E:FB:23:06:F3:B4:78:5A:DF:3C:C1:26:D5
Certificate issuer: /CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Certificate serial: 052DCE8D
Authority key identifier: 74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/J76ldmbFpX77IwbztHha3zzBJtU.roa
Signing time: Sat 01 Jan 2022 16:04:53 +0000
ROA not before: Sat 01 Jan 2022 16:04:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 193.135.15.0/24 maxlen: 24
193.135.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86888077 (0x52dce8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Validity
Not Before: Jan 1 16:04:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27bea57666c5a57efb2306f3b4785adf3cc126d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:a7:6e:1a:39:9b:07:13:7e:b6:6e:8d:1f:
d1:60:23:f3:49:c6:40:82:7c:ba:2e:a4:c5:c3:a0:
08:e1:c7:27:7f:ed:f8:41:54:96:c6:9b:2c:59:6c:
56:50:1a:0b:ae:fd:b3:c3:91:24:60:e1:d4:cc:77:
0f:e7:b4:a4:f4:0d:e7:f4:60:fd:13:d6:e0:1d:98:
95:18:cc:5a:6b:27:92:d2:f1:f3:c2:54:f7:c9:22:
04:05:78:d6:af:0a:11:3c:7e:9a:2b:5d:21:af:87:
f3:34:5b:e6:97:be:69:2f:e1:09:71:18:a7:d6:c3:
e9:7d:63:dc:df:3a:97:d0:73:f7:fc:97:06:c6:ff:
69:43:f4:2d:28:52:cc:04:43:cf:16:8d:08:72:93:
51:72:e5:a1:2a:96:db:d1:04:99:c4:9d:f9:a8:89:
b8:83:d6:67:34:d0:7f:cd:c8:71:c6:00:df:c9:67:
37:03:94:53:85:69:28:3d:6a:1f:69:95:6b:e2:6d:
3c:bb:7e:ac:fb:60:e0:ec:87:62:b8:36:ed:c5:49:
ad:fe:87:af:50:4a:8c:17:ce:86:97:81:c2:27:12:
9c:85:3c:7f:fb:0a:4a:d7:39:6d:f1:86:5c:35:c4:
72:49:3e:50:a1:9d:2d:23:7a:89:60:b5:68:76:0d:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BE:A5:76:66:C5:A5:7E:FB:23:06:F3:B4:78:5A:DF:3C:C1:26:D5
X509v3 Authority Key Identifier:
keyid:74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/J76ldmbFpX77IwbztHha3zzBJtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/dMF8P0X8We5mdfEJFOw6nmi3I48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.15.0/24
193.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
50:69:52:68:46:4b:c2:13:a9:85:6c:ab:4d:50:5f:99:45:76:
a6:f0:49:eb:48:48:2e:f9:3c:3f:4c:62:d2:ad:47:c3:26:db:
99:82:71:17:82:c6:61:e3:fa:c5:db:eb:6f:47:c5:2d:e5:42:
25:38:6a:1b:46:eb:ef:79:31:9d:52:04:c8:7d:9e:0a:c2:26:
eb:bb:8b:27:96:b5:90:99:d8:84:80:c8:07:b8:94:5f:9f:de:
2b:00:86:08:09:0c:81:20:66:ac:6b:8a:cf:98:cf:09:2b:1c:
6a:90:fe:fa:45:f3:05:a8:f6:75:82:a6:7e:5d:7e:60:e4:14:
69:54:72:cb:11:68:44:bf:61:a9:58:a7:2a:5e:49:16:83:ec:
a0:2f:a6:1f:73:5e:31:0e:4a:3f:61:94:63:f1:82:53:45:35:
39:ec:ee:ec:2a:80:a8:c7:2f:e9:34:d0:82:bf:b1:4c:56:f9:
7b:93:43:92:aa:d5:a4:8a:15:a8:15:62:d0:3e:12:91:ad:c7:
11:2b:d3:2e:5c:37:3d:99:a7:c4:d4:c8:35:31:15:cc:7d:21:
38:ee:38:e2:74:87:c4:0e:9e:5c:c0:12:d1:23:93:36:6d:ff:
4e:39:71:56:02:64:b1:5c:8c:a9:62:d2:5b:5b:ef:0a:be:43:
9f:98:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:51 2024 by rpki-client on console-ams.rpki-client.org