Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/bdURWmwu0WM8p_slic5FNzfCPWg.roa
File: bdURWmwu0WM8p_slic5FNzfCPWg.roa (raw, json)
Hash identifier: Ot4yXo33R+wJizBSCbGr8PJBc6ouX37cwz3wrQAWDk0=
Subject key identifier: 6D:D5:11:5A:6C:2E:D1:63:3C:A7:FB:25:89:CE:45:37:37:C2:3D:68
Certificate issuer: /CN=849ff2cc8e0b8ac046f7a49a5e3268dd402a5907
Certificate serial: 01856D540253A07ABD3440C22F55F3A77021
Authority key identifier: 84:9F:F2:CC:8E:0B:8A:C0:46:F7:A4:9A:5E:32:68:DD:40:2A:59:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ_yzI4LisBG96SaXjJo3UAqWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/bdURWmwu0WM8p_slic5FNzfCPWg.roa
Signing time: Sun 01 Jan 2023 12:35:00 +0000
ROA not before: Sun 01 Jan 2023 12:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 194.26.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:02:53:a0:7a:bd:34:40:c2:2f:55:f3:a7:70:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ff2cc8e0b8ac046f7a49a5e3268dd402a5907
Validity
Not Before: Jan 1 12:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dd5115a6c2ed1633ca7fb2589ce453737c23d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:08:9f:6d:b9:7d:8b:25:96:f5:6c:55:f4:
4c:1c:95:77:b4:b0:f8:a0:ac:64:bb:84:81:2f:d2:
f0:85:68:dc:2c:0a:0b:16:2a:ee:6c:d0:39:d8:9b:
a4:78:2e:13:e7:1b:0f:ac:8f:66:df:f6:25:cb:ba:
0d:70:ac:96:b5:2b:da:f4:7a:da:59:cd:66:f7:8b:
fa:ab:dd:60:5a:ae:58:c2:6f:30:64:05:0d:f5:71:
ee:9f:20:d2:23:00:bc:67:b1:e7:fe:94:66:7b:9b:
63:e2:1a:3b:f1:15:71:f2:91:a0:73:47:16:50:0d:
76:27:16:81:48:00:cb:08:bb:d1:97:ea:4c:5a:e8:
a7:2e:b7:83:f7:82:60:3f:25:52:4e:d7:88:61:95:
8b:90:3f:d9:fb:8a:6f:31:d5:46:59:4d:18:bf:a5:
a6:ef:19:e2:ea:ed:83:c4:b1:e8:73:3c:9b:94:3b:
bd:36:82:b2:d1:a5:a7:df:80:62:73:1b:9a:31:6d:
fe:fa:31:92:4d:a4:e5:9a:b2:00:e5:32:ed:78:63:
a5:af:0a:ba:d3:c5:a4:6d:97:8c:b0:d3:27:e9:32:
78:6f:28:c6:c0:44:fb:79:29:f2:01:1e:62:0f:e3:
3d:9a:12:c2:97:f7:72:f5:4c:e7:59:31:a0:be:8f:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D5:11:5A:6C:2E:D1:63:3C:A7:FB:25:89:CE:45:37:37:C2:3D:68
X509v3 Authority Key Identifier:
keyid:84:9F:F2:CC:8E:0B:8A:C0:46:F7:A4:9A:5E:32:68:DD:40:2A:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ_yzI4LisBG96SaXjJo3UAqWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/bdURWmwu0WM8p_slic5FNzfCPWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/hJ_yzI4LisBG96SaXjJo3UAqWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.141.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:ce:f3:68:d9:13:1e:f3:d0:63:51:7a:11:77:b0:db:64:0c:
9c:c0:45:9e:7e:60:15:30:ff:41:a3:f9:bf:14:be:d8:f3:bb:
a5:e3:9b:63:ea:17:95:49:6a:bb:cd:49:a1:8c:3f:0f:96:f5:
06:22:15:13:59:60:bf:4e:36:8d:42:5f:04:9e:83:df:1c:5d:
d0:54:1f:ae:8d:7d:c5:89:dc:f9:4e:ed:f2:73:fc:ae:14:b0:
b2:57:93:33:a9:09:ea:73:b2:07:b0:04:6d:25:9c:0f:5a:df:
01:05:ef:1e:c1:5e:f9:02:ba:fc:80:47:f2:f6:02:7b:4e:0c:
f6:36:c7:f6:83:7d:79:29:5a:03:53:17:13:a7:bb:15:7d:55:
f7:4c:ba:33:41:da:8a:cb:12:3b:62:1a:1e:c7:23:a9:52:73:
00:d5:72:25:36:06:c3:cc:5f:fe:26:0a:ca:55:90:6d:7a:52:
e5:c0:ea:04:35:a6:7b:8a:17:e1:66:18:bd:b9:17:64:86:02:
ce:c0:d4:4f:9d:ee:24:67:a4:90:5b:13:fb:78:d6:23:74:3f:
a4:66:9a:1b:2e:eb:f2:1c:4c:1b:20:9c:a4:5d:40:8e:b9:24:
f4:10:c1:a0:7e:3d:c0:38:75:d0:73:86:e2:75:ef:70:03:ed:
88:a6:8e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:08 2024 by rpki-client on console-ams.rpki-client.org