Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/jDCUYiTH4LHrjoQKQ0mu5i0n588.roa
File: jDCUYiTH4LHrjoQKQ0mu5i0n588.roa (raw, json)
Hash identifier: 4nsoMsR46V8geAQxyeg5bIEQPHeayjlE3i1QJNEHe9g=
Subject key identifier: 8C:30:94:62:24:C7:E0:B1:EB:8E:84:0A:43:49:AE:E6:2D:27:E7:CF
Certificate issuer: /CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Certificate serial: 0188916A71803170BA04B1C3C2DAEB4EB5AF
Authority key identifier: BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/jDCUYiTH4LHrjoQKQ0mu5i0n588.roa
Signing time: Tue 06 Jun 2023 15:54:12 +0000
ROA not before: Tue 06 Jun 2023 15:54:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 194.104.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6a:71:80:31:70:ba:04:b1:c3:c2:da:eb:4e:b5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Validity
Not Before: Jun 6 15:54:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c30946224c7e0b1eb8e840a4349aee62d27e7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:d1:dc:54:19:a6:f0:55:95:4d:91:7b:18:
97:74:bc:a3:99:5c:e3:d1:8f:80:0d:79:9a:4d:d0:
73:fa:75:f2:69:77:ea:f9:96:38:23:cc:3a:8b:b6:
8f:27:cb:56:0f:53:76:e1:24:7f:0c:1c:ab:1f:ad:
a3:56:46:e9:63:da:89:91:33:ca:60:49:ad:10:3a:
d5:10:82:8e:f1:c2:7b:12:43:ed:b5:9c:87:80:50:
09:82:37:df:e3:38:d0:b4:a5:05:77:e5:17:7f:1b:
45:7f:99:d0:f3:e1:f3:a6:78:d3:40:e0:32:f3:f2:
e5:33:f9:66:f7:c8:57:cd:67:ec:36:ce:36:89:d2:
a3:98:7a:2b:71:ad:0e:b7:5f:63:c5:81:7b:b7:da:
d6:58:e7:9d:fd:5c:6b:84:c6:ab:67:14:5f:55:6a:
ee:2e:ac:6c:cb:18:2f:40:36:d0:7c:b2:05:9e:51:
78:23:b5:23:1d:05:1d:08:48:dc:dd:10:f3:d2:d0:
8f:98:9d:56:5c:af:98:90:cb:2d:78:c7:9f:3c:0a:
cb:1e:15:cb:e5:d0:6d:ae:ee:b3:7f:3a:32:f4:1f:
78:de:2e:32:f6:10:06:0e:eb:c1:df:09:19:39:7b:
e8:02:78:9a:3e:e3:a0:2b:f6:70:07:5c:bf:5c:5e:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:94:62:24:C7:E0:B1:EB:8E:84:0A:43:49:AE:E6:2D:27:E7:CF
X509v3 Authority Key Identifier:
keyid:BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/jDCUYiTH4LHrjoQKQ0mu5i0n588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/vPOPs8mzkIvW_UlwKI0huFWDYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
27:15:51:b9:0e:be:4c:0d:3f:15:2d:23:3c:6d:95:5f:a8:b7:
40:60:49:71:06:9e:ce:89:57:86:cb:e0:45:2e:88:ce:e7:80:
1f:92:b7:4d:d7:ec:69:19:6d:de:91:55:7f:6a:d0:dd:69:22:
c7:79:01:6c:c9:52:b3:94:cc:39:e3:8e:e0:37:07:ed:a8:56:
94:15:9f:ce:8b:78:1a:72:40:5b:dd:86:bd:e1:21:cd:eb:d4:
31:2c:20:1d:93:a3:e3:58:ca:a4:0f:20:8b:8a:ad:4a:0c:19:
6c:d3:80:77:6f:1d:cd:f3:b4:67:45:64:25:49:4d:1b:e2:e1:
c4:44:28:9b:30:e6:5e:a0:08:e6:37:e2:68:c3:b2:59:fa:1b:
7b:23:76:ff:5e:82:87:73:48:a7:85:50:ee:a4:09:ee:ec:41:
fb:28:c7:b4:e4:d8:47:7f:61:ee:3d:69:bb:da:70:57:df:ab:
fc:c1:67:f9:05:a5:e9:a2:ae:e8:00:67:bf:11:83:e0:18:e6:
8f:86:65:32:d4:6c:88:ff:7c:c2:d4:05:e6:b1:1c:80:64:b4:
30:81:79:4f:6e:30:b9:d8:64:ff:3b:89:fd:dd:96:b7:d1:0e:
19:d9:1f:bb:24:45:b8:d4:8d:e0:c6:2f:18:58:a5:5f:49:4c:
31:94:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org