Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/_3v1Rde0UYtV6Mgi18zYvkgmp6g.roa
File: _3v1Rde0UYtV6Mgi18zYvkgmp6g.roa (raw, json)
Hash identifier: AFHJPoCH/Z3ev1sJ/P+QYcJToJiMznreltd83qWJBBM=
Subject key identifier: FF:7B:F5:45:D7:B4:51:8B:55:E8:C8:22:D7:CC:D8:BE:48:26:A7:A8
Certificate issuer: /CN=cbcd090db42803d74ade13a1363da428ca71853c
Certificate serial: 01857102BACF41F58973A72FFFEEE2146013
Authority key identifier: CB:CD:09:0D:B4:28:03:D7:4A:DE:13:A1:36:3D:A4:28:CA:71:85:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y80JDbQoA9dK3hOhNj2kKMpxhTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/_3v1Rde0UYtV6Mgi18zYvkgmp6g.roa
Signing time: Mon 02 Jan 2023 05:44:42 +0000
ROA not before: Mon 02 Jan 2023 05:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 194.126.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ba:cf:41:f5:89:73:a7:2f:ff:ee:e2:14:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbcd090db42803d74ade13a1363da428ca71853c
Validity
Not Before: Jan 2 05:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff7bf545d7b4518b55e8c822d7ccd8be4826a7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:76:52:99:41:cd:ff:82:32:16:19:31:16:
ca:7e:2b:5a:46:81:a2:b1:c7:97:fe:5d:e6:fa:02:
98:af:5e:65:28:49:00:5f:8d:3b:73:4b:2b:ca:06:
c9:e5:b6:1e:32:de:f3:8f:fb:66:ad:b3:fc:22:46:
14:61:3f:88:28:13:0f:47:30:f4:f4:89:97:e2:06:
e9:0c:79:39:d1:2a:8f:e2:47:ad:cd:70:e2:14:95:
84:72:89:09:0f:3f:d6:35:bb:a6:e2:c5:58:f9:14:
71:6a:8e:73:36:a5:14:c1:bd:e7:f7:69:25:1a:a7:
6b:30:57:07:e5:3a:7c:2c:fa:6e:da:54:d9:66:01:
a3:ef:e9:a3:51:6a:d8:9e:7e:57:a0:5e:c5:96:82:
b3:c4:0d:2d:8d:5d:de:3e:fb:08:e2:a3:0c:5a:54:
6b:73:cd:94:0a:cb:3a:02:9b:d8:55:d2:46:7c:51:
ee:f2:a2:f5:62:37:17:2e:9e:09:b2:c2:f1:03:b9:
de:ed:db:36:4e:8e:08:e7:56:90:bc:41:4a:9c:d3:
04:b9:b7:86:88:a5:61:38:e3:f4:1a:35:ab:97:e9:
10:bb:ee:3e:e9:11:7c:68:1c:d0:c6:d2:af:49:ef:
17:a5:e3:3f:30:f3:a2:20:4b:a5:03:4a:13:d4:ba:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:F5:45:D7:B4:51:8B:55:E8:C8:22:D7:CC:D8:BE:48:26:A7:A8
X509v3 Authority Key Identifier:
keyid:CB:CD:09:0D:B4:28:03:D7:4A:DE:13:A1:36:3D:A4:28:CA:71:85:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y80JDbQoA9dK3hOhNj2kKMpxhTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/_3v1Rde0UYtV6Mgi18zYvkgmp6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/y80JDbQoA9dK3hOhNj2kKMpxhTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:82:cc:2f:de:de:5e:f6:80:da:d5:39:3d:5e:04:5a:77:e6:
6c:45:76:18:a1:6c:0a:ab:ce:02:28:55:23:c8:c7:94:d0:4f:
b3:3f:85:39:2d:ee:7f:fd:19:e0:91:c5:7d:86:55:6f:0c:b5:
b7:57:93:8c:b5:dd:46:b4:79:c2:5a:d8:34:39:d0:a8:8e:c9:
75:cb:46:a3:b5:4c:77:8b:ca:d4:fd:65:2e:11:3e:0f:a5:e6:
42:9d:5a:55:0a:5a:56:ca:f4:01:95:3c:c6:8d:cc:23:c1:13:
fd:b4:a9:5a:56:34:61:f0:09:ff:a7:1c:84:06:a6:07:20:56:
e5:b7:f3:8f:1f:9d:89:d2:22:ba:f0:aa:ef:3f:1e:35:d3:42:
42:b7:d0:32:d4:83:fe:d5:46:6a:61:85:2d:2f:1a:85:85:a2:
a7:d1:c1:04:5d:0f:32:6e:bf:d6:38:fa:3a:ef:50:bd:02:16:
b7:de:a3:af:11:00:0c:1e:c7:b2:12:ce:99:eb:7c:2d:ff:51:
6a:0f:86:3d:3f:a3:a2:ed:0b:e5:23:04:f6:b4:10:a2:94:c2:
5a:0e:e3:75:46:b5:57:a7:f8:f6:08:99:61:e2:5d:75:8a:7f:
e0:90:8a:96:d6:20:f2:79:9b:fc:ac:15:8d:b7:aa:a3:c7:8b:
6d:49:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:50 2024 by rpki-client on console-fra.rpki-client.org