Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/_FvwwQ5S4pbK9_VI0gYi5U5X6FU.roa
File: _FvwwQ5S4pbK9_VI0gYi5U5X6FU.roa (raw, json)
Hash identifier: zGP4yOfWCycJYaRitVOW4r+gKe+ASPrcUepdrKV8VJI=
Subject key identifier: FC:5B:F0:C1:0E:52:E2:96:CA:F7:F5:48:D2:06:22:E5:4E:57:E8:55
Certificate issuer: /CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
Certificate serial: 0188916B5C374770DB82937206BC5A4B77A2
Authority key identifier: F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/_FvwwQ5S4pbK9_VI0gYi5U5X6FU.roa
Signing time: Tue 06 Jun 2023 15:55:12 +0000
ROA not before: Tue 06 Jun 2023 15:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 194.26.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6b:5c:37:47:70:db:82:93:72:06:bc:5a:4b:77:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
Validity
Not Before: Jun 6 15:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc5bf0c10e52e296caf7f548d20622e54e57e855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:10:43:ad:77:b5:a1:e4:35:55:b0:15:ca:
5c:d7:5a:9f:fc:6e:1b:67:95:04:ba:7c:60:2d:72:
22:75:72:99:32:0a:99:60:ce:ef:75:dc:61:4b:30:
86:af:bb:8c:c6:70:87:05:bf:d8:11:80:c9:e1:8f:
33:79:7e:c1:82:58:06:18:cf:92:49:87:11:ba:37:
8a:f3:06:4e:26:f0:bf:db:15:91:be:c9:74:a0:60:
45:21:f0:91:97:4b:91:61:ad:6d:9b:2e:d1:a4:18:
24:bf:57:68:b2:62:dd:c6:08:0f:68:14:01:d3:11:
e8:1d:24:19:df:21:b8:99:6e:b1:bd:50:92:46:65:
3d:3a:8b:2f:1c:f5:6b:35:7d:24:0d:75:0e:68:56:
97:78:62:6c:3f:e6:ad:b3:bf:f9:10:f9:7f:1f:bf:
d7:2d:b7:54:ea:d1:54:43:2e:c6:d0:f3:bf:3f:26:
e5:26:d8:b2:4f:6a:0a:e0:97:1e:6f:0f:c9:75:3d:
11:fd:b9:ab:be:e8:a1:94:35:3a:d5:a5:a7:ed:a9:
2b:99:b9:05:5a:49:f7:8a:f9:e6:53:3d:f6:a1:fb:
a4:41:c3:2a:b1:e2:4f:bb:ea:0f:0f:36:b9:9b:cf:
62:0f:cd:60:ac:a4:1d:41:be:11:bf:67:a7:60:76:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:F0:C1:0E:52:E2:96:CA:F7:F5:48:D2:06:22:E5:4E:57:E8:55
X509v3 Authority Key Identifier:
keyid:F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/_FvwwQ5S4pbK9_VI0gYi5U5X6FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/9DSK57rtxU7BIPQg151qG3Hef7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.129.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bf:ba:bd:55:67:04:18:95:5d:b1:65:71:9f:0b:a5:cd:9a:
1c:51:18:71:dc:c4:c4:ec:71:e3:72:96:47:8b:9a:4f:39:93:
68:63:73:73:0e:4c:9b:93:89:ff:5b:6e:53:2a:9c:f7:2c:52:
8e:6b:7a:7d:ed:dc:ea:a8:4b:fa:bb:55:57:36:43:65:14:99:
75:ba:05:04:5e:14:bf:ad:61:25:6d:a3:62:14:7e:a9:40:cf:
38:ad:ef:3d:b5:91:f3:07:cc:a6:5a:ad:8b:7e:71:6d:fe:3b:
54:f8:f3:e1:ff:96:43:f2:34:66:02:2b:9c:b8:23:eb:33:7c:
27:8e:0d:74:d4:d6:53:54:4d:44:1a:aa:89:03:0b:2c:2f:44:
4f:bc:26:c2:98:50:4b:aa:9b:d5:1e:5a:a2:91:42:5e:81:c1:
98:71:88:76:08:15:5b:e9:7b:74:5a:dd:a4:77:f2:ef:05:d1:
d0:e7:cb:51:75:09:b3:cc:18:f5:0a:dc:d5:16:e8:ee:41:39:
dd:e8:88:85:a5:4f:2b:1a:fb:e0:fa:5d:18:55:a4:72:4b:4f:
cd:59:95:04:9b:89:af:1f:d0:35:88:7c:e8:22:b7:89:8d:e2:
3e:5a:e6:df:8b:22:19:7e:b6:97:02:85:57:6e:b7:6e:fb:52:
ff:e0:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 11:04:10 2023 by rpki-client on console-fra.rpki-client.org