Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/Uz34yN8uTX638Q-Q_uagdY3BuLo.roa
File: Uz34yN8uTX638Q-Q_uagdY3BuLo.roa (raw, json)
Hash identifier: dAhQG2QHFd/OlCrVyt+xHzK9gfCTLzjerRNVSuY/pao=
Subject key identifier: 53:3D:F8:C8:DF:2E:4D:7E:B7:F1:0F:90:FE:E6:A0:75:8D:C1:B8:BA
Certificate issuer: /CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Certificate serial: 018CC56DE56B65DD2FF09CC6A3A62ECBDD41
Authority key identifier: D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/Uz34yN8uTX638Q-Q_uagdY3BuLo.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212147
IP address blocks: 194.26.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e5:6b:65:dd:2f:f0:9c:c6:a3:a6:2e:cb:dd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=533df8c8df2e4d7eb7f10f90fee6a0758dc1b8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:d8:91:25:ee:c7:58:c5:13:ac:5a:98:74:
b2:1b:b7:aa:a4:6d:dd:7e:11:ca:0a:3e:c7:01:ff:
1f:7e:01:74:02:59:41:a4:63:a1:1c:87:eb:a1:37:
fc:5b:85:ab:db:44:f0:fc:2d:90:82:11:f2:11:b4:
cf:10:80:c0:ce:0f:7b:94:b4:13:fd:18:ca:fa:34:
58:33:5b:67:3f:96:91:46:72:d8:7b:d8:8e:b6:51:
d9:1a:91:ec:52:6d:e1:dc:78:ac:2d:60:de:61:0e:
2e:b6:1d:ec:d1:cf:37:c7:9c:0c:f3:d8:bb:c0:5c:
c0:b7:15:26:67:9f:0b:e2:40:28:5a:10:82:37:9c:
ff:e0:bd:68:3e:75:6e:ae:f4:4f:6d:c2:33:03:58:
42:9d:ed:41:44:2c:cb:ba:4c:0b:fc:bc:8a:8e:1a:
91:32:df:7c:bd:b9:c3:f0:0d:3a:ee:e9:7c:71:24:
de:6f:46:8d:5a:79:7c:d8:b6:e7:8c:88:55:94:c4:
1d:db:59:f0:85:c9:8c:1a:f4:6f:38:ce:34:5a:c5:
61:0f:0f:d8:d0:55:2e:3f:8f:54:e7:ad:4b:5d:bc:
74:30:c6:d0:1c:7a:00:3f:08:51:29:b6:53:78:0e:
e6:f0:34:73:34:e3:32:6d:7b:fc:5a:68:9f:bc:44:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:F8:C8:DF:2E:4D:7E:B7:F1:0F:90:FE:E6:A0:75:8D:C1:B8:BA
X509v3 Authority Key Identifier:
keyid:D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/Uz34yN8uTX638Q-Q_uagdY3BuLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/2AYuTMJvLfdu8wjOem48g0TJ0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.137.0/24
Signature Algorithm: sha256WithRSAEncryption
87:21:c2:83:02:36:d2:77:c9:97:fc:50:1f:92:8a:17:e4:d4:
bc:f9:4c:31:1b:4e:dd:30:db:2a:8b:ed:2e:15:48:5f:1d:5d:
9f:4b:39:3b:18:ab:bf:9e:87:5e:43:e2:d2:ac:5e:92:34:e1:
54:b4:49:98:b3:a8:48:3f:7e:4c:26:af:11:84:7c:c7:c2:ee:
c0:b6:4b:a3:2e:fd:aa:fd:3d:97:52:f8:78:b8:3f:a8:68:f6:
82:1c:bb:93:5d:78:a3:0d:97:e9:3a:ba:c6:9b:05:04:4e:8a:
f1:df:96:a7:4c:a8:6d:ce:a9:d8:3c:79:8a:e3:46:4c:32:31:
1c:71:6d:20:47:cf:5d:1f:99:0d:45:4a:31:86:1b:c5:7a:f3:
b4:da:28:91:d3:4a:27:ae:3d:c0:10:34:c4:10:5f:e3:94:2f:
60:68:cc:70:61:ed:8b:88:d8:48:bb:db:26:f9:90:72:fe:d1:
04:2d:0c:1b:b1:70:a5:eb:43:72:71:f4:97:ad:4f:63:08:4c:
be:69:de:33:1b:54:81:48:24:8b:43:a3:61:0d:bd:80:88:b3:
eb:43:a2:84:97:9b:0f:e5:ea:bb:92:fa:21:e3:af:fc:d1:8f:
bd:ea:72:81:b4:ce:fa:da:4a:81:33:a2:74:c2:26:03:f7:8f:
83:aa:2d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 17:09:50 2024 by rpki-client on console-ams.rpki-client.org