Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/PNLvIUXT0giAexEdO6G4Fr5fK_U.roa
File: PNLvIUXT0giAexEdO6G4Fr5fK_U.roa (raw, json)
Hash identifier: Jac/VpMmmVLYb3Mv2mswxWmZ5HP8UHOOqBN4OL6qWMI=
Subject key identifier: 3C:D2:EF:21:45:D3:D2:08:80:7B:11:1D:3B:A1:B8:16:BE:5F:2B:F5
Certificate issuer: /CN=6ecb285d26bde0997dde7db8489aa1d6e04ac445
Certificate serial: 018572A809D1CF178B683393041CE2052E8B
Authority key identifier: 6E:CB:28:5D:26:BD:E0:99:7D:DE:7D:B8:48:9A:A1:D6:E0:4A:C4:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bssoXSa94Jl93n24SJqh1uBKxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/PNLvIUXT0giAexEdO6G4Fr5fK_U.roa
Signing time: Mon 02 Jan 2023 13:24:53 +0000
ROA not before: Mon 02 Jan 2023 13:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 194.26.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a8:09:d1:cf:17:8b:68:33:93:04:1c:e2:05:2e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecb285d26bde0997dde7db8489aa1d6e04ac445
Validity
Not Before: Jan 2 13:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cd2ef2145d3d208807b111d3ba1b816be5f2bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:29:a6:42:79:a8:38:24:47:52:6a:1d:1b:
c8:30:98:7a:42:be:9a:bb:5a:21:52:22:98:44:fa:
67:ab:2b:0d:fa:07:93:4e:54:44:a7:14:b9:f7:a6:
40:b1:98:92:03:e1:22:1d:b5:6b:89:f5:a5:14:fd:
3a:b5:1c:0f:1f:49:52:08:ee:aa:13:41:16:4a:78:
14:ef:8f:64:1b:3d:29:4b:59:50:e3:f5:db:38:2b:
d7:eb:3a:92:7c:3e:62:9a:1c:92:c4:f8:eb:1e:e9:
c1:80:78:4e:94:fa:fb:82:ea:91:b2:36:b1:36:49:
34:df:db:aa:54:1f:3a:d2:43:72:03:87:2d:28:09:
93:21:1a:55:67:15:9a:8a:69:7e:ab:06:e5:4c:05:
d0:37:d0:c1:83:47:c6:2d:4a:15:f6:ca:5c:68:0a:
e8:e7:e4:38:bc:e4:f1:60:b2:3c:c4:f7:26:2e:4b:
f4:84:02:58:55:88:c7:da:b8:8a:ee:b9:18:d2:ad:
88:9b:f0:f3:46:3f:7f:d7:e8:84:8b:47:21:b9:a7:
13:21:b4:cc:bf:73:62:47:37:04:d0:6d:70:11:07:
36:e5:45:10:35:e2:a6:bb:99:39:43:6b:39:88:66:
b8:58:e9:3a:a0:5e:30:6b:a0:8e:e8:23:d9:11:cc:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D2:EF:21:45:D3:D2:08:80:7B:11:1D:3B:A1:B8:16:BE:5F:2B:F5
X509v3 Authority Key Identifier:
keyid:6E:CB:28:5D:26:BD:E0:99:7D:DE:7D:B8:48:9A:A1:D6:E0:4A:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bssoXSa94Jl93n24SJqh1uBKxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/PNLvIUXT0giAexEdO6G4Fr5fK_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/bssoXSa94Jl93n24SJqh1uBKxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:47:14:c7:89:09:2e:ba:25:54:12:4b:ff:bc:8f:35:0f:23:
4f:39:6d:5c:c7:77:df:50:6e:13:1c:c9:81:21:80:9b:e0:82:
88:ab:8b:8c:e8:14:49:d2:b6:5c:9e:c2:72:b6:8b:7b:1b:fa:
80:45:2b:44:07:8d:96:20:a2:63:79:01:33:b0:6b:ce:fd:ac:
fb:a3:bf:5d:e7:21:c7:5b:c9:59:1b:94:cc:de:9d:55:05:03:
26:c8:ff:7b:4f:84:fb:5c:83:58:87:03:18:fb:3b:25:55:dc:
b0:bc:dc:04:d7:f1:8e:20:3e:c8:68:cf:c5:9e:32:50:fe:86:
58:3c:79:41:21:f1:9f:5e:ee:c1:2f:df:85:0b:1c:43:e2:b1:
94:8c:c4:a4:5f:aa:a2:e3:a2:85:02:2b:05:30:69:c8:e4:bf:
c7:ba:31:d5:b3:f9:b2:9f:06:3a:a6:01:07:ae:69:1f:19:81:
c6:70:9d:97:df:09:62:fa:ed:dc:a0:da:a3:68:da:16:4b:45:
aa:3e:86:e2:e2:20:63:ab:1e:40:86:ad:a2:69:d5:b1:c8:93:
34:45:4b:0f:39:88:c1:a7:26:b4:45:e1:0f:97:46:2a:0e:d9:
c0:60:b8:9b:c6:c7:4e:c7:fd:6c:84:c3:d8:b4:98:78:c9:e7:
6f:13:6f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:35 2024 by rpki-client on console-fra.rpki-client.org