Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/fh5vg5_qp91BCa7fpgg40WiC09g.roa
File: fh5vg5_qp91BCa7fpgg40WiC09g.roa (raw, json)
Hash identifier: ul73ST3DH3sHf0KHjL92z2pcQVDqG83KhBPJ1aKfU/c=
Subject key identifier: 7E:1E:6F:83:9F:EA:A7:DD:41:09:AE:DF:A6:08:38:D1:68:82:D3:D8
Certificate issuer: /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial: 018D843002B27A95946A5970DE5304BDC956
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/fh5vg5_qp91BCa7fpgg40WiC09g.roa
Signing time: Wed 07 Feb 2024 15:29:15 +0000
ROA not before: Wed 07 Feb 2024 15:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 194.26.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:30:02:b2:7a:95:94:6a:59:70:de:53:04:bd:c9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
Validity
Not Before: Feb 7 15:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e1e6f839feaa7dd4109aedfa60838d16882d3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:2d:c7:7f:76:da:8a:a1:87:6d:e5:98:d6:
3d:da:ef:67:9f:6c:70:f1:c3:80:49:ac:cd:8e:b1:
89:de:d9:91:90:67:8c:ca:a7:6f:ac:f6:84:09:14:
cf:2a:b4:d1:93:7f:23:09:79:5e:ad:cf:e1:e1:97:
98:b8:9c:d3:dc:6b:45:55:50:f2:df:f8:a5:8e:9c:
d0:f6:89:7e:b5:48:48:7d:aa:05:c3:35:59:23:3d:
37:a3:ca:ac:0d:2b:8b:ef:4b:b8:38:10:26:4d:ac:
36:a8:1f:42:01:8a:fd:32:b3:c8:3c:97:df:7f:58:
1a:d3:fe:b1:9b:3e:f1:1d:06:0c:8b:40:56:4a:e7:
02:72:13:4e:57:09:f6:4e:b2:cc:0f:29:ab:76:ac:
4e:a3:32:4e:c3:4e:f5:43:93:3f:81:ff:1d:39:81:
62:68:5f:8d:95:0e:88:30:5e:d5:bd:86:89:49:18:
81:e6:56:ce:33:53:bb:99:7e:9f:4e:8a:02:e8:2e:
ff:8a:5f:32:7b:ac:5a:9e:83:c9:0d:4f:5c:45:af:
c8:5f:33:eb:5d:86:b1:c9:c8:82:a7:bd:97:19:e3:
f5:f8:9c:32:f9:12:81:56:24:ab:00:3e:c5:95:da:
05:6b:ac:e4:bb:a9:ad:bc:ff:73:c5:3f:e9:98:ac:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:6F:83:9F:EA:A7:DD:41:09:AE:DF:A6:08:38:D1:68:82:D3:D8
X509v3 Authority Key Identifier:
keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/fh5vg5_qp91BCa7fpgg40WiC09g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.138.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4a:99:c8:29:aa:e2:b4:2c:c0:14:fc:b5:55:d1:8a:e1:20:
85:0b:cd:fb:be:8a:eb:d2:dd:67:c4:6d:31:6e:82:bd:0f:0a:
69:bf:18:a9:04:40:9b:67:b7:33:82:80:a3:7e:2f:5a:df:96:
f4:1e:81:33:a9:65:44:7d:31:e8:59:66:6e:53:7e:c7:b1:94:
81:f6:63:55:9e:4e:31:ab:8d:1f:ee:e9:bc:99:19:2e:64:18:
e4:3f:2e:eb:3d:c4:33:1b:25:2c:4e:4a:74:04:7b:24:28:aa:
e3:bf:ce:0f:c6:1a:19:82:59:68:3e:69:8e:02:6e:e1:a0:c5:
aa:5b:6c:c5:8d:79:54:1d:41:57:88:08:33:7b:92:cb:04:1c:
12:7a:47:87:fa:4d:83:5a:96:98:14:dc:94:e2:96:b2:c0:ae:
43:69:fe:8f:2c:d2:2b:52:a4:49:09:f7:86:19:2e:90:80:e2:
26:21:9d:4a:48:ce:21:51:fb:1b:9f:94:d4:aa:9b:5d:4c:3a:
41:3c:40:9d:b6:2e:b6:d8:1b:03:5b:79:7c:3e:b9:e4:63:4d:
34:a4:17:8e:eb:61:03:b7:93:ab:36:a8:f6:b1:7b:d3:98:4f:
5c:94:d4:9b:b6:b2:2d:d6:5e:41:c2:7f:0c:52:31:51:d4:69:
eb:08:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org