Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/K5CI0B6T2peEbDJt7LjOoVJEyUQ.roa
File: K5CI0B6T2peEbDJt7LjOoVJEyUQ.roa (raw, json)
Hash identifier: rXXEXR/V0Z/ZMJykZrWGYvf2fCE6pJda1b/mIx8psB8=
Subject key identifier: 2B:90:88:D0:1E:93:DA:97:84:6C:32:6D:EC:B8:CE:A1:52:44:C9:44
Certificate issuer: /CN=3c3784403d86b2d85b3d1d1e02d3dc00a0413d41
Certificate serial: 01856BCA4D430F5EEBEE5108DA712FA12D12
Authority key identifier: 3C:37:84:40:3D:86:B2:D8:5B:3D:1D:1E:02:D3:DC:00:A0:41:3D:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDeEQD2GsthbPR0eAtPcAKBBPUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/K5CI0B6T2peEbDJt7LjOoVJEyUQ.roa
Signing time: Sun 01 Jan 2023 05:24:58 +0000
ROA not before: Sun 01 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 194.26.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:4d:43:0f:5e:eb:ee:51:08:da:71:2f:a1:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3784403d86b2d85b3d1d1e02d3dc00a0413d41
Validity
Not Before: Jan 1 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b9088d01e93da97846c326decb8cea15244c944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:8c:f9:10:9a:31:d1:fb:5d:a2:5e:ae:5b:
23:5e:38:27:b4:d8:93:c9:55:33:c6:61:a3:77:66:
05:4c:dc:d4:c7:4b:ac:a9:9d:27:6a:50:d9:18:de:
b8:43:9b:bb:3b:af:8d:38:34:2e:1b:a0:c4:10:58:
9c:01:ed:09:44:fc:18:d8:f0:f0:40:43:90:f5:f2:
88:28:81:b5:33:8f:b7:29:8f:92:31:fc:23:6f:10:
9e:21:e1:ef:6d:20:75:81:bd:bf:16:6b:d6:13:79:
0c:be:c9:0c:89:fa:b7:6c:34:dc:c1:1c:58:e1:bd:
51:76:1d:fc:24:4c:e6:bc:8d:81:fa:bc:a3:35:07:
5a:75:b4:63:6f:6f:ba:0d:6f:56:73:29:13:f0:51:
d9:da:da:ce:9e:74:26:63:6b:8a:f9:64:3e:eb:b6:
33:8b:10:46:0f:e5:55:75:aa:a2:a6:71:79:50:10:
37:dc:51:f5:94:02:c5:f6:df:91:4b:18:47:fe:6b:
e8:fb:5d:64:eb:50:3e:2f:f3:ee:df:8d:51:7a:50:
95:8e:ba:32:df:db:e0:ff:3f:15:8b:1b:ea:b3:ba:
7b:3b:f5:af:d1:6f:16:7f:95:c0:f2:d8:a4:60:80:
88:d1:3a:7d:86:98:72:d6:b7:50:14:fa:36:55:3e:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:88:D0:1E:93:DA:97:84:6C:32:6D:EC:B8:CE:A1:52:44:C9:44
X509v3 Authority Key Identifier:
keyid:3C:37:84:40:3D:86:B2:D8:5B:3D:1D:1E:02:D3:DC:00:A0:41:3D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDeEQD2GsthbPR0eAtPcAKBBPUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/K5CI0B6T2peEbDJt7LjOoVJEyUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/PDeEQD2GsthbPR0eAtPcAKBBPUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.221.0/24
Signature Algorithm: sha256WithRSAEncryption
72:32:68:7a:37:88:1e:60:02:3a:e8:fc:92:98:09:15:04:a7:
d8:1a:41:44:64:4b:02:74:2c:b7:10:c6:6b:6a:f8:91:81:09:
43:7e:7c:f2:44:e9:0a:d1:61:9b:b6:bd:71:0f:1b:6b:39:6b:
d8:5b:03:06:78:c2:40:6a:ef:b9:29:71:e8:ee:dc:f9:3b:0b:
70:c6:4e:ab:e2:df:d4:a1:79:13:1f:8e:4f:48:61:43:6c:71:
34:01:eb:2a:5d:ef:46:00:86:1d:4a:fa:e1:0f:ae:f5:86:00:
fd:74:e6:32:91:37:31:23:87:5e:db:cf:37:6c:4c:0a:70:83:
61:b3:54:8b:f1:32:3b:13:d3:42:dd:cb:0f:1d:ee:3c:99:3c:
0d:f5:92:59:6d:03:e6:e2:03:98:af:7c:bb:bb:cc:3f:9b:6d:
1d:3b:92:66:8d:54:a9:39:08:de:0d:ac:c8:ee:a7:0e:b1:4a:
b0:63:03:c4:2e:e8:cb:dc:df:51:92:e8:82:92:0c:37:b3:a8:
1c:f4:26:14:bf:1e:5b:32:f0:c1:19:98:ea:c2:8a:43:6f:b0:
ae:98:e2:18:d1:19:47:a1:91:60:b6:c7:8c:4e:50:8e:7b:7d:
0f:9b:8e:23:e7:00:13:22:4f:c4:4a:59:b5:f7:a2:0d:58:1f:
fa:83:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org