Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/ZjD_ion8Pmp9Und80vuj9u8Fj2s.roa
File: ZjD_ion8Pmp9Und80vuj9u8Fj2s.roa (raw, json)
Hash identifier: 6xtuNsXumOzur13Nhaa20Zx0PqAHtGbMCl1P9Yhyxko=
Subject key identifier: 66:30:FF:8A:89:FC:3E:6A:7D:52:77:7C:D2:FB:A3:F6:EF:05:8F:6B
Certificate issuer: /CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Certificate serial: 01856E2F9DB44C255112DBE353C3C22F24E5
Authority key identifier: BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/ZjD_ion8Pmp9Und80vuj9u8Fj2s.roa
Signing time: Sun 01 Jan 2023 16:34:52 +0000
ROA not before: Sun 01 Jan 2023 16:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 194.104.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9d:b4:4c:25:51:12:db:e3:53:c3:c2:2f:24:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Validity
Not Before: Jan 1 16:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6630ff8a89fc3e6a7d52777cd2fba3f6ef058f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:ae:f1:74:8e:93:04:b4:65:32:69:b9:f5:
aa:41:d5:47:78:38:74:bf:d8:37:47:17:b4:99:79:
06:32:61:1b:87:62:f6:52:0e:89:1b:07:82:7a:3c:
6d:4e:2a:d4:65:fc:71:4f:2f:7d:a2:5b:ef:65:1e:
21:c8:a0:33:e4:19:12:28:a2:82:9d:0a:9a:35:9c:
0d:56:d5:b5:fb:a0:37:38:19:5b:b3:90:d6:bf:45:
cf:e4:df:48:eb:45:03:6e:29:74:d1:f8:8c:9d:8e:
a3:d9:bf:58:5a:7f:2f:4f:75:11:d4:d3:24:3e:d6:
97:05:75:65:53:55:4d:0b:cb:20:a3:8a:50:62:01:
71:3d:4e:ed:04:57:09:69:d0:f5:2c:5f:c6:da:57:
bf:52:14:63:df:7a:68:ce:80:6d:27:09:55:17:b5:
a1:de:5a:b4:ad:11:4c:01:af:b5:b5:1f:b2:d7:b4:
e2:32:a8:e2:e8:3d:5f:05:1f:55:0b:95:94:60:78:
72:2c:58:e3:8a:8d:d0:59:8d:5d:92:83:4d:1b:61:
d2:3c:bf:92:ca:08:ed:8d:35:96:57:9b:b3:d6:a0:
f9:5a:b6:1a:ff:be:ba:dc:cd:e1:e7:47:91:b8:99:
52:23:ad:4c:8a:43:da:fd:f9:55:02:d7:ee:66:26:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:FF:8A:89:FC:3E:6A:7D:52:77:7C:D2:FB:A3:F6:EF:05:8F:6B
X509v3 Authority Key Identifier:
keyid:BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/ZjD_ion8Pmp9Und80vuj9u8Fj2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/vPOPs8mzkIvW_UlwKI0huFWDYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1c:8d:35:7a:f1:37:a0:08:5d:79:56:2f:eb:31:49:5b:fe:
3e:d3:f1:75:87:05:67:d3:4e:cc:19:36:09:fa:d2:50:5f:3c:
e7:2c:51:dc:7a:49:ec:65:f5:94:5e:f1:9a:ec:e4:a4:49:25:
77:ab:95:ee:44:16:d4:5d:cb:a8:00:62:90:01:bd:2d:48:16:
28:26:c0:64:6b:6a:b3:cc:a9:a7:03:6e:59:b7:90:16:52:61:
96:5b:54:4a:8c:36:3e:3f:4b:9d:56:0c:87:91:74:b5:c7:83:
6b:cf:ca:f6:ff:70:f9:83:e7:ef:8c:48:85:62:c4:30:72:f2:
42:6b:10:65:cf:62:bd:ea:da:cd:b5:06:d5:96:f4:76:5b:d9:
ad:cd:07:b4:89:e8:ca:4d:e8:fd:e3:e6:6b:3a:85:f2:d7:86:
6f:66:03:32:bd:6f:3b:d1:ec:7d:b6:4d:c9:d9:48:72:67:c1:
f3:33:66:bf:96:e8:c7:09:8c:2e:1e:48:51:73:59:e2:69:d3:
41:88:27:6f:a9:67:77:bc:da:ea:bc:59:ad:08:a0:40:c4:2f:
d2:74:52:44:a8:1d:d3:5d:0c:4e:59:9e:17:41:9d:28:93:b2:
ed:7e:e4:b6:5c:8f:bf:58:f1:de:b1:8c:2f:c6:42:10:b4:d3:
1f:de:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org