Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/tUlAlUcwrNMOaHwHIdzD3wNY2RE.roa
File: tUlAlUcwrNMOaHwHIdzD3wNY2RE.roa (raw, json)
Hash identifier: IRB+WvAU3hYv31FqDp3Xv1w4Ls+KOf8kO/EinuFH1zw=
Subject key identifier: B5:49:40:95:47:30:AC:D3:0E:68:7C:07:21:DC:C3:DF:03:58:D9:11
Certificate issuer: /CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Certificate serial: 01856E2F9CB92989EC5C3293DFA0B1222673
Authority key identifier: BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/tUlAlUcwrNMOaHwHIdzD3wNY2RE.roa
Signing time: Sun 01 Jan 2023 16:34:52 +0000
ROA not before: Sun 01 Jan 2023 16:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 194.104.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9c:b9:29:89:ec:5c:32:93:df:a0:b1:22:26:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf38fb3c9b3908bd6fd4970288d21b855836174
Validity
Not Before: Jan 1 16:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b54940954730acd30e687c0721dcc3df0358d911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:60:c2:53:d3:5a:cf:b4:a8:da:e0:66:03:7a:
6b:0b:67:00:72:92:a2:0d:27:35:61:78:7c:20:d1:
14:51:09:15:3d:67:2d:b2:30:ba:de:c0:ff:93:9b:
80:a8:b2:03:61:d6:5e:7d:34:f6:04:81:f7:35:c4:
a8:fd:2b:c2:13:3d:15:27:c6:53:7d:75:02:57:67:
75:b2:dc:8f:21:bd:db:b7:23:5d:f7:a8:bb:73:eb:
44:56:56:13:91:75:df:a6:be:5b:1f:06:a2:e1:fa:
00:d3:80:94:fb:fc:bc:60:78:dc:01:0a:ea:3b:cb:
45:b8:ed:d1:f0:99:d4:a2:10:69:33:50:db:d0:ca:
3f:30:a8:49:40:fa:a1:a9:3f:53:77:37:7e:f7:54:
ec:b4:18:8f:55:03:93:15:71:90:a0:94:66:c7:7f:
ae:24:b4:81:9d:81:06:72:86:4f:09:c8:cd:0e:75:
36:fd:be:ce:7b:8b:c9:30:4c:98:da:eb:f4:7b:dd:
47:4d:cb:4c:eb:3f:2c:51:50:55:d2:cc:2c:86:08:
b0:bf:28:dc:09:b6:64:6b:de:8f:af:fe:d0:6d:c1:
da:25:c5:63:6b:27:80:7b:3e:30:de:e6:e7:34:be:
82:d4:fb:d2:61:48:2d:8c:69:1e:71:55:9c:e2:f6:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:40:95:47:30:AC:D3:0E:68:7C:07:21:DC:C3:DF:03:58:D9:11
X509v3 Authority Key Identifier:
keyid:BC:F3:8F:B3:C9:B3:90:8B:D6:FD:49:70:28:8D:21:B8:55:83:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPOPs8mzkIvW_UlwKI0huFWDYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/tUlAlUcwrNMOaHwHIdzD3wNY2RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/426846-c9ec-472b-8bff-3b492f463bff/1/vPOPs8mzkIvW_UlwKI0huFWDYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
94:86:50:a6:bd:bf:8c:69:f8:d3:f0:b2:58:51:b7:0b:de:63:
d8:b0:b8:bc:8c:54:8a:db:b0:55:7f:1b:83:fb:d2:7f:79:02:
42:96:8f:9f:87:0b:e9:cb:ee:3f:ea:4a:2f:25:d0:06:02:e4:
99:98:80:d4:f9:91:f8:3a:a3:c2:f5:a0:77:fb:70:d2:0c:5c:
66:aa:ec:67:79:c1:ce:13:4f:81:e2:86:80:98:30:d6:0f:35:
b2:e8:85:32:cd:5e:87:86:04:73:75:e1:c5:14:21:e0:f8:6d:
16:87:df:9c:63:1a:9a:90:7c:50:1f:ed:1a:5e:b3:17:57:6a:
59:a6:ae:0a:d5:c3:38:60:ca:fb:e7:73:00:60:71:9b:90:32:
6b:6f:5d:05:3a:0a:4f:3e:dc:f5:d8:a1:05:69:2c:a7:b3:56:
fa:a5:06:83:44:80:cd:df:43:fc:72:74:3a:17:7e:cd:fc:69:
8a:3f:20:24:9f:d7:7a:da:64:62:30:54:69:12:ea:f2:58:58:
d7:68:56:ec:99:39:d4:a2:67:dd:79:4f:5b:6c:64:7d:00:38:
18:43:4f:d1:cb:40:2a:29:28:36:1e:ee:78:0a:79:6a:66:37:
0c:ca:b3:0c:7a:b1:83:59:b0:ea:c3:fd:b7:cf:f2:8d:fb:de:
7f:5f:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org