Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/rd-BVLdipLsPQhU_lzgMX-WOxyY.roa
File: rd-BVLdipLsPQhU_lzgMX-WOxyY.roa (raw, json)
Hash identifier: zegzdsXhiIyWvQ0Gcss+4CtcCPOxSkKk3l83EKAvPRE=
Subject key identifier: AD:DF:81:54:B7:62:A4:BB:0F:42:15:3F:97:38:0C:5F:E5:8E:C7:26
Certificate issuer: /CN=cbcd090db42803d74ade13a1363da428ca71853c
Certificate serial: C89BFB
Authority key identifier: CB:CD:09:0D:B4:28:03:D7:4A:DE:13:A1:36:3D:A4:28:CA:71:85:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y80JDbQoA9dK3hOhNj2kKMpxhTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/rd-BVLdipLsPQhU_lzgMX-WOxyY.roa
Signing time: Sat 01 Jan 2022 07:59:42 +0000
ROA not before: Sat 01 Jan 2022 07:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 194.126.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13147131 (0xc89bfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbcd090db42803d74ade13a1363da428ca71853c
Validity
Not Before: Jan 1 07:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=addf8154b762a4bb0f42153f97380c5fe58ec726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:bf:47:47:39:bc:d0:23:56:09:45:f1:8c:
e7:1e:bf:e5:46:ed:b8:7c:7d:91:52:c6:02:2a:50:
08:3e:02:b0:ae:a2:b0:e9:dd:c1:a1:19:33:3c:bd:
85:d4:21:f9:ad:ee:10:67:78:cd:49:4e:54:cb:a1:
ed:6c:69:e4:bb:25:5b:8d:f1:32:47:49:ab:ad:cf:
e6:49:14:ff:15:59:4b:b0:9d:32:8b:69:a7:e7:35:
ec:3a:ff:e3:5c:d6:d9:9e:6a:37:5b:27:f7:18:6a:
e6:3c:3a:38:2b:b1:db:d7:ab:aa:68:40:b3:00:09:
f8:2a:3d:22:92:2d:54:a6:28:12:ac:d0:c4:87:e7:
4c:73:b0:14:4c:6c:c6:e7:0b:b3:fe:a8:60:8f:01:
1b:bc:c3:12:94:d4:68:1f:aa:22:53:47:63:a4:41:
62:17:40:63:10:8d:b4:11:6c:9a:95:60:ac:3c:f6:
01:16:1a:cf:d1:73:75:8b:71:01:98:5e:ff:c9:b6:
c6:31:69:25:ac:4b:11:f7:85:4f:91:b9:82:8a:11:
87:66:4d:8b:ca:bb:e8:ec:01:8b:79:26:0d:91:5d:
c1:ab:98:0f:5b:83:8a:79:31:cf:e9:c4:f1:b1:8e:
c6:97:19:a3:d2:39:60:62:c8:3e:93:59:ec:62:88:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:81:54:B7:62:A4:BB:0F:42:15:3F:97:38:0C:5F:E5:8E:C7:26
X509v3 Authority Key Identifier:
keyid:CB:CD:09:0D:B4:28:03:D7:4A:DE:13:A1:36:3D:A4:28:CA:71:85:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y80JDbQoA9dK3hOhNj2kKMpxhTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/rd-BVLdipLsPQhU_lzgMX-WOxyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/y80JDbQoA9dK3hOhNj2kKMpxhTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.179.0/24
Signature Algorithm: sha256WithRSAEncryption
03:29:a5:c2:3b:60:f7:70:03:db:af:2e:ed:ce:86:79:d4:4c:
ea:46:e6:96:a1:18:e3:d1:6b:dd:4e:a7:88:f9:52:40:b9:a8:
fe:9f:68:5c:32:a7:1c:32:50:9d:d2:fc:ec:b0:cd:ec:47:6a:
09:a8:10:13:9d:3a:26:f5:95:56:e5:f9:97:02:7f:5a:b0:d5:
07:91:55:64:8b:1d:f1:b2:a9:35:18:78:35:d4:84:13:15:5d:
b9:e5:70:25:70:ac:b8:1b:d8:fd:c7:c9:82:64:31:27:1b:1d:
d5:90:ce:e5:b4:a5:93:1d:0d:93:9b:1b:0e:d1:60:d4:8a:28:
17:7b:c4:7a:d1:6c:b8:28:75:4e:47:a0:df:43:26:14:67:ed:
e3:21:b8:36:d3:33:91:74:13:fe:c7:6d:37:28:e2:09:ca:47:
b6:b8:ab:04:40:f4:01:94:27:91:c8:62:9e:9b:6f:be:1d:3e:
f9:33:0f:62:ba:e5:3c:46:e1:45:88:fa:76:46:2d:82:70:94:
e2:fe:13:ed:46:f4:bf:68:59:13:9e:df:db:8a:5b:a2:f1:4f:
d4:4f:c9:40:2d:25:05:a8:9d:e6:28:f8:cc:b2:6e:64:17:c0:
cb:50:5e:73:0c:1c:5e:73:7b:17:1d:be:99:1a:01:b6:98:7d:
b3:e3:05:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:50 2024 by rpki-client on console-fra.rpki-client.org