Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/2FRzhCan8WDf0pY-aMbG7kokZWQ.roa
File: 2FRzhCan8WDf0pY-aMbG7kokZWQ.roa (raw, json)
Hash identifier: B6ejXqr/FLk7rWXR0t5ZOXU5C6sYGtodJY4ljQ22FGI=
Subject key identifier: D8:54:73:84:26:A7:F1:60:DF:D2:96:3E:68:C6:C6:EE:4A:24:65:64
Certificate issuer: /CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Certificate serial: 03B0B01B
Authority key identifier: 24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/2FRzhCan8WDf0pY-aMbG7kokZWQ.roa
Signing time: Sat 01 Jan 2022 12:00:42 +0000
ROA not before: Sat 01 Jan 2022 12:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39281
IP address blocks: 194.35.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61911067 (0x3b0b01b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Validity
Not Before: Jan 1 12:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d854738426a7f160dfd2963e68c6c6ee4a246564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:38:95:a6:f1:af:b8:bc:59:26:e1:60:04:
df:91:4d:6a:41:aa:03:26:4f:c9:bb:03:a0:5f:4b:
75:b6:2b:04:11:47:c3:84:e4:1d:1e:f1:58:b0:08:
ef:c6:ce:4a:49:df:8d:8a:c9:01:b8:2b:03:b5:e2:
9c:9d:c6:7a:8e:3b:b2:53:12:72:41:8b:c7:ce:30:
5d:4e:2a:24:0d:8e:22:6d:12:dd:33:5c:20:ac:0d:
ce:ae:9a:2f:ae:2d:4c:2a:70:c1:65:e6:84:27:3e:
ea:0a:ae:10:d1:a4:89:86:4d:70:5e:22:bf:e3:a2:
9e:c4:0d:5c:63:2c:8c:b7:2d:6d:58:d0:03:82:a1:
f6:bc:80:b2:e9:d6:d5:5c:f7:77:32:4a:de:40:a7:
6b:70:f8:0e:ce:8a:6d:27:b7:6a:5f:ae:08:c0:b0:
ec:16:74:2d:dc:36:fc:81:1a:d1:cb:80:1e:3d:31:
40:69:34:04:23:6f:c5:2f:e7:a7:f0:79:2a:a7:e2:
9c:d9:a9:52:56:a3:cc:0e:e4:31:6a:26:8e:07:76:
f9:b1:f5:a1:fc:32:e7:03:4d:20:e4:93:e1:05:8c:
95:f1:ad:36:fe:0a:b1:89:46:53:e8:1c:33:c5:0f:
fc:80:4a:4d:1c:3c:d7:d3:e5:b9:d9:ca:5f:79:9d:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:73:84:26:A7:F1:60:DF:D2:96:3E:68:C6:C6:EE:4A:24:65:64
X509v3 Authority Key Identifier:
keyid:24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/2FRzhCan8WDf0pY-aMbG7kokZWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:2a:cb:84:94:ed:c3:65:f5:4e:d8:b7:56:44:a3:15:bf:7a:
db:59:76:c0:bb:2d:39:30:b9:8c:8d:04:af:47:1e:f5:23:66:
1b:66:c8:de:63:8a:ae:a3:12:b6:50:e2:c1:66:27:8e:a7:df:
a0:c3:ec:ae:c1:20:9e:4f:f6:45:d7:63:1e:78:85:40:b2:32:
ff:38:6e:e1:1c:05:3e:44:d0:09:00:42:88:ed:e4:6f:77:81:
42:96:75:54:5b:87:ce:58:40:38:69:39:58:22:51:88:55:9e:
1b:d1:4d:0b:90:ab:cf:d8:88:4a:ac:72:c0:61:25:3b:d0:ba:
09:fc:d1:e3:9c:91:6d:92:27:54:51:f6:7c:c5:76:59:5d:a9:
1b:98:aa:89:e8:5b:39:a7:f2:9e:d6:70:ae:02:8a:0d:c6:96:
a6:c6:9e:ba:df:84:39:0b:e8:76:a8:5e:cc:6b:d4:c2:d8:8a:
a8:96:5a:5c:ca:2c:ab:f7:7d:db:29:d3:96:63:f2:04:de:bd:
b7:bf:be:a2:9e:e7:1f:dc:96:08:64:eb:64:e6:0c:f9:4e:9d:
5f:a3:93:58:bf:4e:4f:6a:fb:35:9f:f6:77:59:76:82:5b:f1:
b5:12:6e:95:59:37:79:1d:e1:86:3d:8f:b9:92:6f:3b:c0:02:
f2:7a:53:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org