Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e151d2-ba9d-4783-9cf5-04c7082a2d4a/1/cnZRQdLmkMVzry0L9DsQzH2Cq9g.roa
File: cnZRQdLmkMVzry0L9DsQzH2Cq9g.roa (raw, json)
Hash identifier: Lj4+P9WxfKGT08CyuFzSh1lo+erRlxLEjFv5rY2Lt8Q=
Subject key identifier: 72:76:51:41:D2:E6:90:C5:73:AF:2D:0B:F4:3B:10:CC:7D:82:AB:D8
Certificate issuer: /CN=f242452bef81c982b6629a1a92bb19aa05d20d3a
Certificate serial: BCF70B
Authority key identifier: F2:42:45:2B:EF:81:C9:82:B6:62:9A:1A:92:BB:19:AA:05:D2:0D:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kJFK--ByYK2YpoakrsZqgXSDTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e151d2-ba9d-4783-9cf5-04c7082a2d4a/1/cnZRQdLmkMVzry0L9DsQzH2Cq9g.roa
Signing time: Sat 01 Jan 2022 12:02:03 +0000
ROA not before: Sat 01 Jan 2022 12:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196618
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12384011 (0xbcf70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f242452bef81c982b6629a1a92bb19aa05d20d3a
Validity
Not Before: Jan 1 12:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72765141d2e690c573af2d0bf43b10cc7d82abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:20:8e:4a:6f:53:e1:41:33:1a:c0:93:6f:
40:0a:ae:51:19:24:42:68:38:b2:c6:f8:6d:2b:3e:
01:2a:5b:b0:d0:dd:df:27:03:ad:8a:2e:63:2f:e3:
07:7e:01:a6:8f:88:84:c7:e7:48:51:c1:33:1a:d1:
6a:da:32:fd:d6:35:55:2a:93:9c:ef:0e:08:aa:05:
d0:4e:e0:93:e8:4e:77:4f:88:a3:fc:e7:e0:a8:38:
7b:dd:52:5f:1e:a2:27:86:ad:95:d8:5a:fc:57:a7:
c7:c5:b3:2e:8f:38:ad:cb:7c:7c:60:ce:13:5e:36:
b1:aa:ad:31:d3:0e:44:56:5d:c1:7d:97:e8:1e:34:
64:e7:33:a7:41:6e:21:5e:57:ba:2c:f2:f8:34:fe:
07:ce:a4:fc:77:e9:e7:49:e5:31:c2:bb:e9:78:ec:
de:b3:49:5a:36:bb:4f:c6:c3:02:73:2e:e6:89:eb:
50:01:ed:de:0d:15:97:1d:88:a6:6b:e9:0c:16:4e:
a8:ec:63:46:ce:f6:b8:3e:2a:b4:78:e8:4e:16:4d:
4c:fd:fe:72:c0:09:18:0f:97:e4:73:8b:f7:31:b1:
68:46:51:6a:ad:33:bc:40:8b:71:bb:23:fe:51:91:
8c:90:3a:df:35:c3:13:c2:cd:80:c2:86:64:07:ee:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:51:41:D2:E6:90:C5:73:AF:2D:0B:F4:3B:10:CC:7D:82:AB:D8
X509v3 Authority Key Identifier:
keyid:F2:42:45:2B:EF:81:C9:82:B6:62:9A:1A:92:BB:19:AA:05:D2:0D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kJFK--ByYK2YpoakrsZqgXSDTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e151d2-ba9d-4783-9cf5-04c7082a2d4a/1/cnZRQdLmkMVzry0L9DsQzH2Cq9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e151d2-ba9d-4783-9cf5-04c7082a2d4a/1/8kJFK--ByYK2YpoakrsZqgXSDTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:75:8e:4b:b2:e0:2c:6f:19:90:79:ad:60:c5:23:b4:98:2f:
72:70:26:a2:4e:8c:39:20:c2:36:c0:f8:c7:da:48:b6:ab:ad:
a4:0b:bb:c2:f8:27:b4:ce:8e:a0:5d:f1:1b:32:d7:02:9d:0a:
f5:71:0a:69:9d:8d:4b:b6:de:2e:82:7e:28:c7:72:0e:5d:96:
64:aa:86:ed:12:81:c5:f6:13:d3:d5:55:a6:0e:a4:d3:73:b0:
1d:d6:34:ab:df:8e:58:39:c5:7f:63:4a:15:b4:b6:4e:e8:ee:
94:e8:4b:40:ad:c0:6b:77:95:97:41:40:bb:6e:70:cf:02:c3:
5e:3f:8c:d5:62:c7:b2:99:e8:21:3d:23:1d:68:e6:96:ad:4b:
4f:5a:c9:67:f4:0b:1d:92:08:f6:8c:37:64:3f:30:5b:22:10:
61:88:c4:1f:81:6a:79:01:78:bf:e4:d9:ae:b9:49:88:58:1e:
eb:31:86:47:0b:2b:00:99:30:57:09:2a:3e:88:cc:7e:9a:a0:
53:9f:10:a8:37:21:d8:e8:73:1e:e0:cb:7c:b6:93:d3:05:b4:
2c:d5:6b:49:14:cd:f8:b9:b8:c5:5b:ec:6d:df:c8:16:bb:8f:
15:46:87:06:d2:26:95:2b:a4:01:32:fb:97:9c:40:93:ac:ba:
b8:2a:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:29 2024 by rpki-client on console-ams.rpki-client.org