Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c40fdf-a18f-4200-9150-32827cc88449/1/1-ib3lHNyHZuzo6zdPogcjf8hTow.roa
File: 1-ib3lHNyHZuzo6zdPogcjf8hTow.roa (raw, json)
Hash identifier: UCWbztIzFK3Cn5oV9i+gq4cQwYDeIo1vvVt8HfGJeCc=
Subject key identifier: FA:26:F7:94:73:72:1D:9B:B3:A3:AC:DD:3E:88:1C:8D:FF:21:4E:8C
Certificate issuer: /CN=7eb05a2d143d8f9f4dfae25273da631d56ffa414
Certificate serial: 0188D485475C4BB50F3026AEF38FB3D61F11
Authority key identifier: 7E:B0:5A:2D:14:3D:8F:9F:4D:FA:E2:52:73:DA:63:1D:56:FF:A4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frBaLRQ9j59N-uJSc9pjHVb_pBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c40fdf-a18f-4200-9150-32827cc88449/1/1-ib3lHNyHZuzo6zdPogcjf8hTow.roa
Signing time: Mon 19 Jun 2023 16:38:04 +0000
ROA not before: Mon 19 Jun 2023 16:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136787
IP address blocks: 194.26.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:85:47:5c:4b:b5:0f:30:26:ae:f3:8f:b3:d6:1f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb05a2d143d8f9f4dfae25273da631d56ffa414
Validity
Not Before: Jun 19 16:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa26f79473721d9bb3a3acdd3e881c8dff214e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:da:d0:cf:23:f9:a3:44:02:8a:4d:f0:84:
06:68:45:de:bb:f4:32:19:02:1c:77:19:5e:05:0e:
ae:c1:e0:c2:ee:91:95:07:be:fd:45:1d:7d:c2:f2:
8c:7d:e9:7b:17:d1:40:ba:91:71:8c:f2:db:a0:44:
35:5f:ca:45:5c:4e:9b:6e:df:18:43:31:ab:4d:0c:
22:b0:36:1f:1f:9a:2b:8f:b5:01:f1:79:97:16:0b:
1b:35:49:71:89:a7:be:07:af:76:d3:e1:4d:c2:02:
01:88:96:97:6e:22:ee:6e:84:c4:8d:2b:c1:c4:a6:
ae:75:15:87:b4:03:71:7f:3c:81:b4:d9:b1:79:e0:
cc:3b:ce:66:4f:fa:a9:1c:3d:4a:5c:a5:0d:72:07:
4b:3b:0e:a5:1a:bc:7b:82:31:91:88:2b:68:98:1f:
6d:02:e4:1f:82:87:0c:3b:62:6a:b5:aa:d9:c5:ff:
5f:f1:be:7b:25:30:96:19:31:97:33:57:b9:ec:ba:
38:61:87:20:ad:59:6c:a5:45:87:64:e8:a1:4b:59:
e1:5e:3a:81:26:12:1a:4a:5c:cc:e0:50:f3:a5:06:
e0:f0:8d:3c:bd:b8:5e:d1:e2:7e:b6:07:52:0f:65:
9c:4c:34:2f:5e:95:24:ea:f5:a5:0f:fa:78:a3:d1:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:26:F7:94:73:72:1D:9B:B3:A3:AC:DD:3E:88:1C:8D:FF:21:4E:8C
X509v3 Authority Key Identifier:
keyid:7E:B0:5A:2D:14:3D:8F:9F:4D:FA:E2:52:73:DA:63:1D:56:FF:A4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frBaLRQ9j59N-uJSc9pjHVb_pBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c40fdf-a18f-4200-9150-32827cc88449/1/1-ib3lHNyHZuzo6zdPogcjf8hTow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c40fdf-a18f-4200-9150-32827cc88449/1/frBaLRQ9j59N-uJSc9pjHVb_pBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:99:91:88:cf:57:f9:f2:5c:72:7b:1d:51:5c:57:92:f5:5c:
8f:4f:48:10:39:49:ff:5c:dc:2c:ff:74:ac:81:e8:8f:94:ea:
76:fd:21:62:da:ed:f6:e7:a7:f3:5a:54:5b:eb:1c:4b:7b:e6:
57:a0:fe:6d:e7:62:a7:20:77:70:a3:ec:06:80:91:be:6c:ba:
9c:44:a4:b2:b5:68:b9:f1:ba:c2:05:a7:73:07:1e:2b:7d:13:
95:c1:58:b3:a7:3e:97:ce:23:6c:9d:a8:59:e4:5a:fc:77:1b:
10:e7:09:3a:e4:a7:ee:50:18:5d:15:f8:6f:20:bf:fa:7e:67:
8b:84:2c:8f:88:8b:08:df:a8:32:90:b0:05:8a:a9:b0:d9:c6:
63:fc:e8:46:c1:12:26:43:6e:66:75:12:c4:7f:48:9c:ab:33:
16:60:a1:9a:54:d1:d8:2e:e6:2e:4d:38:02:c6:97:d4:41:4c:
cf:98:21:46:1b:61:7a:84:b1:f9:b1:16:76:a3:e4:52:e8:8a:
8b:02:cd:96:37:db:1e:de:e4:58:a1:50:d2:46:e8:84:9a:6e:
69:1a:d5:d8:77:9e:e2:b4:27:b8:d8:16:33:35:da:67:b1:99:
f6:ce:bc:8f:7d:d3:5d:a9:47:9e:93:1c:89:3d:16:2c:4f:38:
07:df:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:50 2024 by rpki-client on console-fra.rpki-client.org