Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e44648-cb05-4baf-971b-ce85bd4a4c9e/1/cx5GyQUAVepjPia19dsJRm0Ktbc.roa
File: cx5GyQUAVepjPia19dsJRm0Ktbc.roa (raw, json)
Hash identifier: ymlZwj/m3IsbdR6HjI4ZDYz04BsevFW6U7+NRlw8U18=
Subject key identifier: 73:1E:46:C9:05:00:55:EA:63:3E:26:B5:F5:DB:09:46:6D:0A:B5:B7
Certificate issuer: /CN=03dab461e7913c1a3b925f035bd5f7a1ef5d4887
Certificate serial: 1061DFA9
Authority key identifier: 03:DA:B4:61:E7:91:3C:1A:3B:92:5F:03:5B:D5:F7:A1:EF:5D:48:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9q0YeeRPBo7kl8DW9X3oe9dSIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e44648-cb05-4baf-971b-ce85bd4a4c9e/1/cx5GyQUAVepjPia19dsJRm0Ktbc.roa
Signing time: Sat 01 Jan 2022 13:55:55 +0000
ROA not before: Sat 01 Jan 2022 13:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28959
IP address blocks: 194.126.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274849705 (0x1061dfa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dab461e7913c1a3b925f035bd5f7a1ef5d4887
Validity
Not Before: Jan 1 13:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=731e46c9050055ea633e26b5f5db09466d0ab5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:af:06:5f:ef:52:4a:63:89:6a:f6:eb:37:
ae:f5:db:7f:69:98:c8:77:2d:37:25:db:35:2a:68:
e5:4e:d5:3f:52:9a:65:93:a8:9a:16:4c:65:a5:a9:
f0:04:20:ed:e7:1f:0b:d5:7d:f3:69:14:24:d6:ef:
58:b0:0b:b4:09:9d:2f:df:d5:16:ff:89:de:4f:75:
af:4a:85:fb:7b:d2:98:b6:64:a1:64:a1:d6:e4:c4:
23:bd:a1:74:b5:cf:4c:d4:e4:f0:0f:39:01:6c:ed:
74:f7:da:2b:22:53:f6:1a:d1:21:c4:f0:0d:01:22:
ae:fe:8a:05:63:3c:c8:bd:60:81:f7:ff:7f:44:07:
20:fa:e0:f1:48:a6:a5:f7:d7:67:f3:99:4c:f3:f0:
34:ed:71:85:11:8d:86:20:bb:bc:e2:21:07:88:41:
eb:b7:59:3a:fd:5f:fc:29:e1:65:d3:1f:64:16:9e:
7f:c7:7e:eb:aa:02:5f:cc:21:89:38:06:3d:7c:54:
7e:cd:bb:cd:0e:ad:dc:88:fb:1b:f7:8b:0f:79:3e:
e9:ee:81:3d:d9:01:47:ac:85:b0:6d:6a:d9:bc:af:
63:47:9f:20:94:b9:34:3a:2a:ad:11:7a:99:ee:cb:
da:84:86:6b:68:52:24:45:e0:58:66:2c:00:ce:85:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1E:46:C9:05:00:55:EA:63:3E:26:B5:F5:DB:09:46:6D:0A:B5:B7
X509v3 Authority Key Identifier:
keyid:03:DA:B4:61:E7:91:3C:1A:3B:92:5F:03:5B:D5:F7:A1:EF:5D:48:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9q0YeeRPBo7kl8DW9X3oe9dSIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e44648-cb05-4baf-971b-ce85bd4a4c9e/1/cx5GyQUAVepjPia19dsJRm0Ktbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e44648-cb05-4baf-971b-ce85bd4a4c9e/1/A9q0YeeRPBo7kl8DW9X3oe9dSIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.209.0/24
Signature Algorithm: sha256WithRSAEncryption
30:11:9b:ad:7c:24:4a:01:d2:b1:2b:10:ab:be:5e:80:b8:c5:
c3:a2:fa:81:3f:f4:1b:ed:af:dc:b6:34:d2:ea:c2:f3:1d:fb:
7f:6f:f8:d9:de:9f:47:05:a5:4c:01:16:b1:75:a6:9f:6e:13:
88:5f:7f:58:bd:18:28:7c:3a:f8:1b:5f:85:c7:69:13:4c:9d:
1c:1d:76:65:57:71:58:d1:ff:7e:6c:09:1d:7c:a7:b1:d6:9e:
ba:dc:ca:09:a2:cd:6b:e6:5a:4b:c7:e7:7c:7b:f8:39:1c:46:
a4:0a:fe:8a:a3:63:74:0d:ae:a8:6a:8b:e0:74:79:ef:80:b6:
bb:25:99:6c:a4:de:5d:e4:58:cb:bd:dc:64:ed:91:9d:41:61:
f3:92:22:b2:d3:2c:c9:35:ba:d9:e6:23:f8:fe:d3:ab:77:39:
46:2b:f4:9d:ea:35:fc:5e:0b:12:ef:98:30:31:9b:1e:94:b4:
36:6f:51:da:4d:bd:19:c1:36:46:46:ec:5c:70:10:21:e4:f9:
71:26:24:4b:22:a6:c2:b4:b0:31:6f:ea:ca:94:e1:6d:98:28:
31:98:3a:47:05:c2:ba:49:86:ba:c9:06:b5:df:11:94:45:0f:
65:a5:ba:d0:d6:9a:b7:45:e3:99:6f:5b:1e:7f:d6:0f:bb:fd:
9d:f7:00:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:25 2024 by rpki-client on console-ams.rpki-client.org