Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/WtF6mpZcqr-bEWsY8u-0umm_JQE.roa
File: WtF6mpZcqr-bEWsY8u-0umm_JQE.roa (raw, json)
Hash identifier: sq5QIz1woVV/ruKWIYY0UCLoWB8KFWzxt3ai3pqG34o=
Subject key identifier: 5A:D1:7A:9A:96:5C:AA:BF:9B:11:6B:18:F2:EF:B4:BA:69:BF:25:01
Certificate issuer: /CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Certificate serial: 1BA0D0
Authority key identifier: BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/WtF6mpZcqr-bEWsY8u-0umm_JQE.roa
Signing time: Sat 01 Jan 2022 01:56:14 +0000
ROA not before: Sat 01 Jan 2022 01:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 194.104.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810640 (0x1ba0d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Validity
Not Before: Jan 1 01:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ad17a9a965caabf9b116b18f2efb4ba69bf2501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:8a:d7:89:05:dd:71:d8:78:72:2e:53:ef:
31:c2:76:92:48:fa:41:9b:9e:48:be:30:4c:bd:95:
25:b2:06:26:91:d2:3d:5c:68:e3:23:ca:28:c3:6b:
2d:00:9f:9b:4c:1b:d3:c3:b8:d2:94:5e:de:24:ff:
67:7f:a1:04:a0:92:d3:f8:3f:e8:21:d3:16:f8:24:
3d:9b:7f:49:ed:e7:d7:6a:ac:1a:a8:ff:c9:55:d2:
6d:0e:ef:f7:dc:bc:7b:b9:52:e3:87:4b:9e:c7:57:
d5:03:12:d7:14:9f:08:0b:31:f3:52:25:e4:e4:2d:
ce:bb:ca:ee:25:c9:8f:1e:c2:26:48:b4:1c:76:84:
59:50:64:fa:c7:d0:94:3b:39:0c:7a:cc:4d:5b:1f:
5d:04:49:e5:7d:f0:78:d1:d6:ea:77:e7:18:63:6c:
cb:5e:fd:38:9e:1b:9c:cd:dc:e6:b1:89:9e:2b:fb:
62:c1:86:97:6e:3e:0b:b4:a2:f7:5a:6d:3e:b3:04:
42:9b:2a:fd:5f:9b:2c:33:e8:54:35:03:96:05:1d:
ae:e2:30:5e:17:16:14:b6:e8:22:4f:ec:e7:fe:32:
c1:29:18:c3:1f:32:13:ad:65:d2:a1:c8:cb:35:50:
52:e9:9c:4e:c4:0c:77:aa:11:75:78:3b:8e:2a:a2:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:7A:9A:96:5C:AA:BF:9B:11:6B:18:F2:EF:B4:BA:69:BF:25:01
X509v3 Authority Key Identifier:
keyid:BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/WtF6mpZcqr-bEWsY8u-0umm_JQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/vPOPs8mzkIvW_UlwKI0huFWDYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
70:90:f7:1a:81:5a:cf:ae:31:11:d8:a2:0d:ab:94:b3:7a:36:
fe:8b:56:4d:8a:c1:aa:75:5c:59:84:34:31:8c:35:ce:d3:95:
b0:a1:17:e7:b0:c8:ff:b1:04:62:8e:da:47:17:2e:4a:9a:2b:
08:71:44:ac:d4:0c:bf:46:be:32:95:bf:eb:bb:6a:54:4a:b1:
06:44:3f:95:c8:14:45:a1:34:7c:db:e8:a5:66:72:e3:74:0b:
e9:6b:dd:36:3d:3a:8b:19:70:f9:58:f6:d7:42:3a:29:c3:ae:
ca:46:cb:6f:ea:f2:a7:f2:c6:52:2d:ae:f5:12:4d:31:9e:7f:
35:47:31:1d:80:b5:1a:79:94:d5:3f:a9:0c:0a:b3:cf:57:de:
c9:94:1a:60:ac:b2:f1:cf:b7:cf:db:8c:f1:13:9b:c5:d5:a9:
88:58:bd:67:f1:87:5a:d1:84:4f:5f:1c:36:d6:35:d2:4d:f0:
ac:26:18:4e:d0:0c:7e:7a:2f:fe:3d:f0:30:36:b7:bd:e3:cd:
24:7f:ce:2c:1a:55:6c:45:35:bd:32:68:8d:98:4b:37:e8:5e:
e4:d2:4f:5f:23:23:ff:ce:e1:04:97:57:67:61:7d:b4:a6:f5:
a8:97:f9:28:a9:28:9b:49:32:4e:ba:8e:0c:3f:42:c0:08:3a:
96:6f:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org