Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/HB1Z9wcQSAjsJ_lT58BCnBEILDs.roa
File: HB1Z9wcQSAjsJ_lT58BCnBEILDs.roa (raw, json)
Hash identifier: C6OdaAGie3C8RZw6ZPo4UKh3F0YbuZDNWaWgJRHhcd8=
Subject key identifier: 1C:1D:59:F7:07:10:48:08:EC:27:F9:53:E7:C0:42:9C:11:08:2C:3B
Certificate issuer: /CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
Certificate serial: 01857115232646C56B6BD2EB2F848985729E
Authority key identifier: 7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/HB1Z9wcQSAjsJ_lT58BCnBEILDs.roa
Signing time: Mon 02 Jan 2023 06:04:48 +0000
ROA not before: Mon 02 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 194.26.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:23:26:46:c5:6b:6b:d2:eb:2f:84:89:85:72:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
Validity
Not Before: Jan 2 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c1d59f707104808ec27f953e7c0429c11082c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:b6:31:12:0c:1d:83:14:7a:19:03:b2:3c:
9f:c4:5c:92:c4:50:4e:b4:ea:46:53:cb:46:c5:85:
74:d9:3c:d2:0c:69:a2:51:0b:b6:2b:b5:06:f7:cc:
d6:03:f3:9c:9e:59:aa:dd:60:9b:18:75:5a:c7:b0:
e8:87:fc:df:b6:e8:52:4f:d8:eb:75:4d:9f:40:3d:
0a:4e:b7:cd:76:63:55:f3:e1:cc:54:6a:5c:bc:61:
6c:08:3e:97:2a:77:10:2c:2f:a0:2c:3f:78:98:00:
7d:d8:e5:1a:c4:f5:12:9c:56:a3:90:7a:46:86:73:
1d:14:5a:58:bf:f1:c9:d4:16:4f:6d:20:ff:26:01:
2b:8e:0d:58:6a:50:c2:97:2e:4f:ed:bd:af:bf:68:
07:89:bd:dd:43:08:3b:32:6f:89:24:4e:05:71:88:
cf:cb:40:60:2b:7c:bf:97:0e:09:f3:33:90:a9:5b:
f1:ea:8c:00:8c:5f:6a:df:13:8b:42:44:31:be:86:
2e:08:29:02:58:f3:46:1a:12:d8:7e:8b:a3:a0:ae:
71:4a:eb:af:bd:6e:74:f5:b8:cb:da:bf:7e:19:ed:
29:8e:6b:65:a3:8b:e6:cd:12:4c:4e:ab:32:0a:ad:
8e:91:87:56:42:e6:59:a8:d6:59:17:7c:4a:8d:c8:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:59:F7:07:10:48:08:EC:27:F9:53:E7:C0:42:9C:11:08:2C:3B
X509v3 Authority Key Identifier:
keyid:7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/HB1Z9wcQSAjsJ_lT58BCnBEILDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9c:52:e5:cf:f6:0b:2e:52:c2:83:6f:28:5b:05:1a:29:39:
3c:26:c4:a9:26:70:65:82:13:9d:9a:8c:6b:e8:43:da:0e:af:
93:66:3e:71:ac:89:d7:18:d0:e8:84:29:84:31:fe:54:2d:94:
31:74:e2:2f:48:46:d1:43:98:bf:ab:95:81:3d:61:d5:d7:ee:
2d:8a:b7:ff:8d:b5:27:b8:07:95:54:98:e6:c8:f5:d1:d2:71:
68:eb:b6:0b:3d:9d:43:de:13:e1:ad:be:2d:65:06:6d:17:6c:
21:15:b6:f2:37:2c:ac:b0:45:3b:5c:15:ba:09:30:e7:79:e6:
88:d9:6b:36:41:13:4d:d8:eb:12:1f:fc:f4:2f:05:e0:64:74:
ce:f1:7a:18:7e:0c:49:db:31:ce:11:a5:21:2d:4e:dc:9d:f2:
f2:a9:63:78:3e:e1:e5:ae:b5:61:0d:df:91:de:28:2d:0a:2a:
61:b0:b7:2e:1b:f0:c9:a1:50:b0:cc:92:c0:82:ed:d3:3e:43:
77:23:4a:a0:d9:81:e4:a6:6f:f5:7e:d6:87:8e:a6:c6:c3:2a:
92:84:47:95:e0:ee:d8:3e:d3:43:dc:ef:5b:a2:b3:92:d6:65:
c0:ac:65:9d:64:fe:2d:50:1a:84:d3:5b:e3:6e:f1:99:65:f7:
af:e9:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:14 2024 by rpki-client on console-ams.rpki-client.org