Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0278d4-28df-45fd-9771-a33c684cb2a3/1/2SY3NFwR-rHdZ4032ftZu0kU8IM.roa
File: 2SY3NFwR-rHdZ4032ftZu0kU8IM.roa (raw, json)
Hash identifier: MEBiBhY2ypR+/tioSIUv3QXoM4gIA0DfuMeCYZjts5A=
Subject key identifier: D9:26:37:34:5C:11:FA:B1:DD:67:8D:37:D9:FB:59:BB:49:14:F0:83
Certificate issuer: /CN=d78e527a8dde83f76ac7bd409ee6429ab8fd553b
Certificate serial: 94FF2C
Authority key identifier: D7:8E:52:7A:8D:DE:83:F7:6A:C7:BD:40:9E:E6:42:9A:B8:FD:55:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/145Seo3eg_dqx71AnuZCmrj9VTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0278d4-28df-45fd-9771-a33c684cb2a3/1/2SY3NFwR-rHdZ4032ftZu0kU8IM.roa
Signing time: Tue 14 Jun 2022 21:19:44 +0000
ROA not before: Tue 14 Jun 2022 21:19:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208935
IP address blocks: 194.104.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9764652 (0x94ff2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78e527a8dde83f76ac7bd409ee6429ab8fd553b
Validity
Not Before: Jun 14 21:19:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d92637345c11fab1dd678d37d9fb59bb4914f083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:98:77:ee:b2:38:ab:ad:0f:b6:ec:43:23:
ff:d8:14:29:81:57:1d:05:23:0a:8d:a7:a5:32:74:
5b:f5:46:17:d1:14:a5:66:d6:be:9b:78:0b:f7:ec:
ad:24:f8:8b:fd:4e:0e:28:6d:be:84:21:43:c6:bb:
71:2b:84:cd:4a:16:94:e1:61:fc:04:34:b4:b4:a9:
fb:9f:99:65:8f:cd:5a:87:0c:c6:60:82:ee:29:9a:
25:78:79:08:fd:86:d7:3e:be:23:b7:17:f0:67:4b:
84:4b:92:70:88:2d:53:5a:53:0b:e0:37:5a:8a:dc:
5d:5c:07:24:17:94:e1:97:e2:81:2f:bc:4f:58:cd:
d4:5f:16:24:cc:5c:0e:58:12:c6:52:d3:03:38:25:
a5:bb:8a:48:8c:14:13:5f:c4:b9:8c:00:2c:92:39:
51:24:19:f1:4a:51:9d:77:5c:7b:92:73:1b:25:02:
ea:0c:d2:8c:47:5e:46:9f:f4:74:bf:a0:31:16:fb:
61:f0:6b:44:68:f6:27:63:ec:ad:62:a4:9d:7a:1e:
ca:4c:a9:ca:0b:4d:2b:3e:20:43:01:ac:87:18:b6:
d3:ff:1e:3b:ef:3c:20:6c:5f:8c:b3:0e:ef:22:9c:
de:95:9b:36:4c:6e:cc:31:68:70:17:37:87:a2:de:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:37:34:5C:11:FA:B1:DD:67:8D:37:D9:FB:59:BB:49:14:F0:83
X509v3 Authority Key Identifier:
keyid:D7:8E:52:7A:8D:DE:83:F7:6A:C7:BD:40:9E:E6:42:9A:B8:FD:55:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/145Seo3eg_dqx71AnuZCmrj9VTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0278d4-28df-45fd-9771-a33c684cb2a3/1/2SY3NFwR-rHdZ4032ftZu0kU8IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0278d4-28df-45fd-9771-a33c684cb2a3/1/145Seo3eg_dqx71AnuZCmrj9VTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7b:03:14:1b:22:a4:e5:45:71:80:3a:64:a9:38:9d:85:87:
14:06:49:68:d2:64:b5:bb:99:d6:9b:9a:21:4d:33:62:d1:26:
02:12:eb:c7:df:a8:91:7b:07:a5:0a:ca:aa:0d:33:1b:27:61:
b8:b2:8f:e9:08:db:e9:4f:c3:bf:94:0a:ec:ee:6a:06:fb:15:
2c:54:db:33:50:a4:f5:cb:9d:2a:ed:9b:dc:12:48:6a:38:29:
dd:07:84:e3:db:5c:cd:f4:3a:bd:8d:b6:55:2e:aa:72:d7:4e:
a2:49:43:95:2d:a5:53:59:13:0d:d6:43:3b:f2:0a:3a:d2:bf:
9d:0d:14:fe:87:5b:7d:0c:1a:d6:22:d3:fb:94:d8:7d:3e:ed:
ea:d6:40:f8:6d:1a:b1:60:f1:05:0b:95:fd:aa:37:55:b5:8e:
99:5e:ba:17:5e:b1:4c:10:c8:b6:cf:ac:2b:db:a9:82:a8:0f:
00:97:f3:de:e4:ac:a0:74:84:e1:74:8a:e3:b7:c6:6c:14:a5:
74:d6:be:34:58:dd:98:b7:40:2a:c4:c1:8a:8b:bd:93:b5:68:
2b:cb:f1:1d:5d:84:2f:33:e2:00:56:2d:78:88:4f:58:57:ad:
d2:f0:73:12:82:e6:de:ef:b2:ff:84:cb:d5:59:c2:71:2a:cd:
17:5b:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:24 2023 by rpki-client on console-fra.rpki-client.org