Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/xEqWE34aKsr9Js8egnbzsI5YVkk.roa
File: xEqWE34aKsr9Js8egnbzsI5YVkk.roa (raw, json)
Hash identifier: J+HM33efTldWqdnGDmT7u7Umvn2AMOAacQsVAPMeglk=
Subject key identifier: C4:4A:96:13:7E:1A:2A:CA:FD:26:CF:1E:82:76:F3:B0:8E:58:56:49
Certificate issuer: /CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Certificate serial: 018571A7AC2D12433AFDB8D8687D95BABE5B
Authority key identifier: 0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/xEqWE34aKsr9Js8egnbzsI5YVkk.roa
Signing time: Mon 02 Jan 2023 08:44:51 +0000
ROA not before: Mon 02 Jan 2023 08:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 194.26.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ac:2d:12:43:3a:fd:b8:d8:68:7d:95:ba:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Validity
Not Before: Jan 2 08:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c44a96137e1a2acafd26cf1e8276f3b08e585649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:4f:d7:4c:53:97:df:44:71:55:e6:5f:56:
4b:a4:d5:5e:94:3b:36:29:46:15:74:da:c3:02:85:
07:36:c8:ca:3f:17:a5:3a:d1:04:21:8d:c2:4f:f9:
44:1b:54:6b:69:1b:0f:3f:e9:bd:9b:12:1d:2f:dd:
9f:22:0b:30:8c:c8:80:13:47:ae:d5:98:d8:44:61:
37:88:b7:05:02:c7:21:1a:e0:23:f7:c9:6a:f1:04:
3d:35:73:6c:b1:66:fa:eb:45:55:58:04:9f:03:b9:
87:5b:70:a4:00:cc:cf:30:6b:93:b2:36:98:57:b2:
38:da:cb:c1:09:17:a9:3d:70:1f:a2:13:2e:39:6a:
cb:a7:49:07:9c:ff:2e:67:60:96:f9:f0:ec:a5:58:
0d:b5:3e:f6:ab:e5:b5:9b:c7:0d:7b:e7:7d:5b:82:
49:55:f2:a1:a0:34:7b:f8:b2:13:89:e5:68:4d:b6:
7d:cb:6e:4f:0e:97:26:4d:b5:ba:6d:22:ab:6f:e0:
70:93:f1:6e:0a:ed:a0:46:ed:91:76:0a:77:e6:d5:
c7:10:f8:86:b2:87:c4:35:65:97:8b:1c:98:39:ee:
72:7c:a6:e0:8c:e3:97:c6:d4:50:b9:a7:eb:f6:20:
ca:12:d0:a4:c4:10:18:ea:16:c6:84:35:59:45:ec:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:96:13:7E:1A:2A:CA:FD:26:CF:1E:82:76:F3:B0:8E:58:56:49
X509v3 Authority Key Identifier:
keyid:0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/xEqWE34aKsr9Js8egnbzsI5YVkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/C_yuCUeuoYqR3CYE5y-Bo02VTMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.234.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1c:3c:31:73:7c:b9:9d:39:89:a1:ce:d8:00:df:11:5f:ea:
ca:03:08:c8:b5:9c:16:f7:4d:b4:c9:81:c7:90:0f:db:4c:f7:
7d:ce:c0:3e:a6:c4:c6:8b:dd:30:c8:c4:8b:d2:4d:b3:60:03:
f8:f2:29:f7:33:61:06:9c:f4:88:44:e4:83:e9:f2:eb:b7:42:
7b:cb:1b:f5:9f:ef:31:e4:b0:8c:c0:b2:f5:46:c3:b8:78:08:
a6:74:db:cd:d4:a1:b6:30:49:39:9d:75:14:cf:86:69:9c:f6:
49:8a:81:b0:6d:cd:1a:2d:43:54:89:48:f1:ee:83:f2:6d:b7:
d8:dc:6b:db:06:9b:9d:31:3f:ae:66:bb:f5:cf:fa:27:8f:21:
cc:72:a3:e8:0a:35:59:62:44:64:27:74:93:4a:87:bf:fc:26:
54:ae:91:40:a9:21:90:fa:79:50:42:8d:39:41:8c:40:d9:9e:
6a:8c:c3:3b:8c:f4:91:22:ce:06:49:a9:0d:4f:aa:36:dc:4f:
13:0d:42:ca:78:e0:03:6a:d3:20:a8:c3:13:e4:7a:e6:fa:ad:
71:dc:03:61:ea:13:94:dc:16:69:87:31:07:e8:31:ec:93:69:
92:a1:1f:0b:6b:49:d2:bc:1d:1b:4a:7b:6d:21:dc:30:1e:87:
28:eb:4b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 09:15:36 2023 by rpki-client on console-ams.rpki-client.org