Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f21054-0fad-4f4b-bf96-c07c2311c43a/1/t0vaoSlePmAXd_JTdSRp3KG1Hkk.roa
File: t0vaoSlePmAXd_JTdSRp3KG1Hkk.roa (raw, json)
Hash identifier: tBng87LecXAt/iB/A/LAu/ZCkvxoEHDA/3HowUfQc9w=
Subject key identifier: B7:4B:DA:A1:29:5E:3E:60:17:77:F2:53:75:24:69:DC:A1:B5:1E:49
Certificate issuer: /CN=288849f0134b1ab666961d8016f473d73dbb381e
Certificate serial: 01856D78AE7CFCE488777C167F9FD5D2BA50
Authority key identifier: 28:88:49:F0:13:4B:1A:B6:66:96:1D:80:16:F4:73:D7:3D:BB:38:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIhJ8BNLGrZmlh2AFvRz1z27OB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f21054-0fad-4f4b-bf96-c07c2311c43a/1/t0vaoSlePmAXd_JTdSRp3KG1Hkk.roa
Signing time: Sun 01 Jan 2023 13:15:03 +0000
ROA not before: Sun 01 Jan 2023 13:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39522
IP address blocks: 194.26.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:ae:7c:fc:e4:88:77:7c:16:7f:9f:d5:d2:ba:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=288849f0134b1ab666961d8016f473d73dbb381e
Validity
Not Before: Jan 1 13:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b74bdaa1295e3e601777f253752469dca1b51e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:4c:6f:c2:fd:16:60:73:50:8a:a5:22:b4:
6e:f3:f3:96:57:8b:55:0e:eb:e6:84:ff:21:e0:2a:
53:30:ec:14:c9:ef:5a:ba:44:bd:60:07:22:d7:61:
66:61:bc:38:43:a6:ce:e4:7a:cc:0f:fb:7c:67:9b:
f1:be:5a:39:9f:e3:3c:8d:35:65:82:9c:86:a7:07:
f9:51:dd:8a:a5:81:55:d2:47:71:bd:9a:01:e8:3b:
a4:d3:8a:b3:05:11:81:fb:cc:ba:cf:8e:f0:0e:f5:
24:c2:ba:88:7d:41:1a:c3:a4:11:e7:61:76:16:81:
f6:6c:5e:7a:e8:72:c9:ec:e2:18:4a:15:88:76:8b:
27:17:1d:77:86:37:54:a4:92:aa:d6:76:44:fb:2a:
4e:f7:f4:d6:6c:31:4e:a4:e7:0b:f2:9b:94:27:89:
e0:6d:14:7e:e8:d8:ec:49:75:c4:81:e3:3a:58:42:
b5:f9:0d:25:85:f6:e1:f9:14:00:64:19:eb:f2:ee:
ff:99:b9:7e:ae:83:72:46:16:02:d0:72:16:f5:ee:
c8:4a:7a:1b:05:76:0e:16:e4:dc:22:6b:ec:fc:3b:
40:0c:69:86:5e:58:69:16:54:d4:b2:75:e0:06:73:
2c:9c:64:31:83:fd:11:04:89:53:a8:a6:fc:8d:84:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:DA:A1:29:5E:3E:60:17:77:F2:53:75:24:69:DC:A1:B5:1E:49
X509v3 Authority Key Identifier:
keyid:28:88:49:F0:13:4B:1A:B6:66:96:1D:80:16:F4:73:D7:3D:BB:38:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIhJ8BNLGrZmlh2AFvRz1z27OB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f21054-0fad-4f4b-bf96-c07c2311c43a/1/t0vaoSlePmAXd_JTdSRp3KG1Hkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f21054-0fad-4f4b-bf96-c07c2311c43a/1/KIhJ8BNLGrZmlh2AFvRz1z27OB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.19.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9c:ab:d4:8e:81:a4:c0:5e:c8:e9:e7:2b:ee:56:23:29:38:
b3:b3:56:9d:9a:08:59:e6:6b:d4:ae:96:7f:a9:36:da:6c:67:
cc:88:8e:0a:25:f4:e1:fc:6a:74:d9:71:00:10:b3:0e:9e:bd:
80:8e:d4:ba:42:0b:fa:b5:ed:b4:4f:13:8d:70:43:b0:4d:7a:
15:95:dc:06:ec:33:3f:ef:3d:ab:88:0b:8f:dd:8e:23:64:03:
ee:b3:cd:bb:f9:6e:21:66:df:c9:d3:45:bb:03:f2:26:02:24:
08:92:8c:6b:34:01:92:5d:5f:68:c2:d0:06:80:a6:60:d1:ea:
a8:e1:c6:83:1c:fe:e7:95:66:42:f5:c2:29:54:0a:f5:64:4d:
8e:19:90:24:28:b0:92:c0:cc:ba:e6:a7:c7:37:50:75:23:77:
f3:92:d9:40:7c:6b:21:57:a2:bf:31:02:b5:14:de:13:c9:b2:
a0:c9:c5:29:88:b7:9a:48:53:18:41:79:05:37:e1:04:65:60:
03:37:00:c0:1a:37:6e:6c:f6:e5:ab:aa:64:9f:47:e9:52:f4:
10:31:f0:a4:fd:5b:05:62:41:f0:11:42:a2:c5:f7:32:4b:36:
a1:42:c8:55:d8:d1:38:a1:14:ed:b2:ff:b1:07:27:ee:6e:e6:
c5:e1:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org