Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/Qr8D5tKFehNFpvytUHWxCe5iI9g.roa
File: Qr8D5tKFehNFpvytUHWxCe5iI9g.roa (raw, json)
Hash identifier: Z9T/R+7aJKEKzLeb5ZuYMAiN8SCGnvaVhAVQT+GRLig=
Subject key identifier: 42:BF:03:E6:D2:85:7A:13:45:A6:FC:AD:50:75:B1:09:EE:62:23:D8
Certificate issuer: /CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
Certificate serial: 018573685FDF20B36D23BEB9943B0F979968
Authority key identifier: F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/Qr8D5tKFehNFpvytUHWxCe5iI9g.roa
Signing time: Mon 02 Jan 2023 16:54:58 +0000
ROA not before: Mon 02 Jan 2023 16:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 194.26.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:5f:df:20:b3:6d:23:be:b9:94:3b:0f:97:99:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
Validity
Not Before: Jan 2 16:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42bf03e6d2857a1345a6fcad5075b109ee6223d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:66:39:54:e8:4f:4a:0b:4f:c9:b6:53:28:
27:f5:61:d7:83:d9:08:ea:92:dd:a6:c3:90:ec:f3:
3c:a4:ad:72:25:26:11:fb:ea:c6:e7:b4:a7:61:54:
33:ea:81:13:b2:83:3d:6a:dc:7c:43:4e:78:f1:f4:
9a:df:81:6d:58:23:0c:09:d3:32:c4:29:26:0f:d7:
43:c3:5b:b1:61:d1:b1:b4:12:f9:32:a1:29:52:d0:
6b:87:b2:95:9a:b5:52:b8:b4:1b:76:33:27:b5:15:
aa:7d:4c:22:4e:35:ef:b9:69:b3:45:29:a1:25:00:
67:ea:7e:91:4f:95:ae:19:64:fb:99:f8:77:94:e5:
99:db:6a:9a:f7:d5:95:03:2b:90:0a:a5:70:79:dc:
7d:b1:0c:26:a3:33:a0:3c:f9:20:d1:5d:f0:a7:86:
0d:32:9f:91:c0:c2:48:d0:f6:03:2e:a9:56:80:44:
a4:64:b7:b2:68:0f:c2:35:b6:44:1f:4f:a0:56:2a:
b1:c0:07:32:e7:1d:6c:58:55:d6:95:f5:07:5d:e8:
5e:d4:45:72:cd:33:5b:7e:9f:2c:08:82:ed:6e:ad:
ec:b8:05:1e:fa:01:c8:57:2b:c7:8e:af:12:66:34:
a9:2b:ee:7b:fd:20:98:e5:ab:dd:3b:1c:ab:3e:e7:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BF:03:E6:D2:85:7A:13:45:A6:FC:AD:50:75:B1:09:EE:62:23:D8
X509v3 Authority Key Identifier:
keyid:F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/Qr8D5tKFehNFpvytUHWxCe5iI9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/9DSK57rtxU7BIPQg151qG3Hef7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.129.0/24
Signature Algorithm: sha256WithRSAEncryption
07:19:c4:1a:19:df:14:34:98:a9:b5:59:3b:42:0b:47:bc:2c:
42:f1:fd:86:f8:e2:57:91:ad:c9:e7:82:45:5c:5e:03:dd:fb:
b8:b1:1a:33:44:1a:9a:a6:45:2b:b9:b2:72:e2:cf:b7:ff:af:
81:7d:42:45:d4:0b:23:ed:3d:02:c7:c1:e0:98:7d:29:1a:cc:
96:a4:af:de:81:e1:09:9f:4f:c3:7e:53:c5:5d:4e:a4:2a:ad:
df:36:ed:49:50:59:7e:26:58:7d:d0:01:ad:a6:4b:89:a2:77:
f2:0f:cd:1a:87:3f:1b:8b:4d:3e:b0:97:3a:d1:80:cc:70:dc:
26:3b:b0:a1:b5:b7:a2:d4:cc:91:50:e4:aa:5f:35:c3:31:1b:
93:ea:45:91:7b:97:99:fd:1f:e2:6e:c4:2a:f0:f8:60:fc:33:
e0:8e:f5:be:37:54:e5:b7:5f:11:be:da:b9:5e:06:bf:f9:ca:
2a:cb:6d:01:5c:d4:7a:fb:14:95:48:7b:e9:3d:df:e3:ae:9e:
92:ea:33:83:46:77:05:3c:e5:27:21:e7:f6:1e:6b:5e:da:3f:
3d:6e:04:8c:12:c2:f5:42:77:f4:d2:27:c9:b9:e5:e2:f9:ae:
22:d8:35:55:cb:1d:93:b3:80:84:41:0c:d3:4c:f3:84:fa:5a:
31:9b:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:44 2024 by rpki-client on console-fra.rpki-client.org