Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/Pdo7IcqADHviSOKNa8MZSk6rtj8.roa
File: Pdo7IcqADHviSOKNa8MZSk6rtj8.roa (raw, json)
Hash identifier: SkSO9cGCMYYHWs845SpQBgdBeNUanUW31D2VlTCM6+w=
Subject key identifier: 3D:DA:3B:21:CA:80:0C:7B:E2:48:E2:8D:6B:C3:19:4A:4E:AB:B6:3F
Certificate issuer: /CN=655db0434a917bb2980986a7c84e3512c2a895ad
Certificate serial: 0188916D310DB86E4F461553647101C20705
Authority key identifier: 65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/Pdo7IcqADHviSOKNa8MZSk6rtj8.roa
Signing time: Tue 06 Jun 2023 15:57:12 +0000
ROA not before: Tue 06 Jun 2023 15:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 194.70.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6d:31:0d:b8:6e:4f:46:15:53:64:71:01:c2:07:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655db0434a917bb2980986a7c84e3512c2a895ad
Validity
Not Before: Jun 6 15:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dda3b21ca800c7be248e28d6bc3194a4eabb63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cf:46:7c:e2:49:46:ea:ee:b5:d8:56:64:a9:
3f:9f:94:de:17:ca:8f:a7:b3:07:0b:d6:58:c5:b0:
06:e1:30:15:e0:94:96:58:a6:e0:c8:1a:cb:2f:e5:
13:d9:a8:62:aa:d7:06:c3:01:25:f0:2a:de:13:bb:
66:eb:d0:ee:b4:0f:6e:32:f2:2e:d8:88:41:34:f3:
b1:de:d8:e7:7d:21:49:80:bd:ba:35:d4:9c:80:04:
92:1a:65:9e:83:c1:c5:25:39:a2:05:6f:93:ce:8e:
9b:1e:f9:24:9e:9d:d4:95:04:0d:e0:f8:9a:d8:01:
eb:62:1d:2a:80:e1:58:a7:64:01:bb:98:28:15:15:
17:3d:ce:90:22:3a:a9:25:e5:78:d0:a5:e0:e0:57:
52:83:ee:e9:29:a5:23:ba:92:d8:ba:bf:fe:e4:94:
90:25:0a:c5:e7:9d:8e:1f:99:6a:04:a2:5f:ff:28:
7d:cf:37:47:bd:03:6a:0f:1e:af:6e:55:c7:b2:05:
60:19:16:2e:e8:fe:13:3b:21:97:dc:5c:ae:ae:59:
56:1c:cf:6d:f8:d9:22:96:ed:9b:15:2a:7f:90:6c:
0a:bb:51:c2:0b:ed:31:3a:3e:96:8e:65:6c:e0:d1:
6f:53:cb:45:26:87:f4:4d:e0:2c:df:66:13:df:49:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DA:3B:21:CA:80:0C:7B:E2:48:E2:8D:6B:C3:19:4A:4E:AB:B6:3F
X509v3 Authority Key Identifier:
keyid:65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/Pdo7IcqADHviSOKNa8MZSk6rtj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/ZV2wQ0qRe7KYCYanyE41EsKola0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.70.234.0/24
Signature Algorithm: sha256WithRSAEncryption
58:17:78:f5:d1:a9:44:ad:f4:a8:b4:cd:b3:1a:2a:2a:44:dd:
b8:5c:e8:a1:66:19:63:11:a2:5c:f6:ef:16:8c:78:6e:81:35:
6f:24:c2:ba:bc:c2:2f:c5:04:f1:03:30:e9:c9:ed:6a:55:aa:
ab:51:6a:56:03:39:03:22:e1:0e:89:5f:2b:81:e0:15:f1:7a:
aa:ce:0f:6e:bd:16:ee:d3:f2:ea:4d:fa:29:5d:4f:3a:54:49:
0d:d6:df:d4:7c:6e:0d:59:16:26:d9:bb:ce:a3:22:0c:60:22:
5a:51:25:82:ca:02:34:fe:19:35:d5:2a:16:16:bc:19:c4:34:
fe:43:19:e6:89:b5:20:cd:90:5a:ad:94:39:31:60:42:b4:ec:
d5:cd:7c:cb:f4:fe:86:87:47:85:ba:4a:b4:c3:80:e8:e0:9d:
42:be:87:bb:77:d8:f0:a3:fb:85:c5:bb:6b:75:d1:4a:06:71:
b5:76:63:4f:ce:4f:15:ee:dd:05:b4:96:fd:e5:76:b5:98:52:
16:fa:e6:bb:3a:8f:a0:71:2d:54:56:3d:7e:a0:4b:46:a6:8a:
4b:9c:4c:55:ac:c7:9d:e0:5a:18:10:1d:84:62:79:b4:27:74:
8f:f5:24:6a:49:12:69:87:2e:ce:0e:21:b9:57:a1:4f:63:74:
39:5f:ef:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:08 2024 by rpki-client on console-fra.rpki-client.org