Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/4L7BbzOVwBRHJI9BLkBxajnwkdw.roa
File: 4L7BbzOVwBRHJI9BLkBxajnwkdw.roa (raw, json)
Hash identifier: yHV4B7yVnTxkolajSp2eDQ7NSKGrGjENccT1R2rnD6Y=
Subject key identifier: E0:BE:C1:6F:33:95:C0:14:47:24:8F:41:2E:40:71:6A:39:F0:91:DC
Certificate issuer: /CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Certificate serial: 072C8B9D
Authority key identifier: 2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/4L7BbzOVwBRHJI9BLkBxajnwkdw.roa
Signing time: Wed 19 Jan 2022 21:53:03 +0000
ROA not before: Wed 19 Jan 2022 21:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209730
IP address blocks: 193.26.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120359837 (0x72c8b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Validity
Not Before: Jan 19 21:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0bec16f3395c01447248f412e40716a39f091dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:1e:49:84:c0:3c:c0:3c:b1:c7:be:6e:c4:
19:d5:4f:d0:1c:6e:8c:16:db:e1:76:f6:e4:5f:7d:
39:e6:60:af:f9:73:a1:56:fc:8f:f3:95:66:b5:d8:
57:78:18:a1:47:31:f1:3e:f0:b7:19:75:fb:20:ad:
96:69:d2:9b:ac:41:99:d4:33:50:bd:e6:14:10:72:
13:7a:09:da:1f:c5:19:44:64:33:09:9b:84:36:bc:
98:3c:1d:10:35:44:69:c0:c8:cf:07:74:dc:6e:31:
ab:07:07:e5:09:54:69:0b:2f:b8:e8:93:92:f1:f3:
74:81:aa:4a:41:22:db:23:84:9b:f2:81:9b:8f:e9:
f7:e9:de:e5:29:c4:3c:29:bb:77:8e:f5:eb:2f:6b:
de:0b:2c:d9:05:09:1b:e2:a7:11:d8:c1:d1:9b:dc:
d3:77:85:7e:98:a3:8b:6d:43:14:31:3d:c5:26:5c:
59:13:53:64:b3:b4:23:a3:9e:0c:5a:02:9b:18:1f:
33:ab:39:9b:3d:44:70:46:e6:62:fa:25:01:d1:f2:
fe:22:23:39:61:46:83:13:e6:8a:0e:09:bb:c6:e5:
45:61:e6:e0:b6:ac:1c:1f:49:fe:e4:98:f0:b4:cc:
8c:0a:bc:a8:d3:f3:e8:3f:d2:ec:31:20:68:50:02:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:C1:6F:33:95:C0:14:47:24:8F:41:2E:40:71:6A:39:F0:91:DC
X509v3 Authority Key Identifier:
keyid:2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/4L7BbzOVwBRHJI9BLkBxajnwkdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/KqaU9ED7dgISuSBW4OtbMdUVD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.121.0/24
Signature Algorithm: sha256WithRSAEncryption
55:bd:f6:69:6b:cb:d7:99:db:14:41:54:a1:2a:42:b2:29:cb:
fb:de:31:bd:1c:e4:73:9d:d6:5e:06:b4:4a:ae:93:b1:69:bb:
46:9b:66:e6:03:14:16:40:fe:e9:19:26:37:8e:26:b9:06:46:
10:3e:ce:14:ef:50:ff:de:03:a0:b3:ea:b9:3b:3d:74:82:63:
84:b6:2b:cf:68:b6:4b:e8:4a:b1:c4:72:d6:b8:f0:81:04:e9:
3a:8e:47:de:a8:32:f8:15:d3:98:1e:40:ff:e8:07:a0:8d:df:
c2:07:42:98:3c:a9:30:a0:38:08:9c:3f:f0:ca:3a:f1:e9:1e:
83:d7:5d:3b:3a:0a:ae:64:1c:f7:70:fa:d3:e7:e5:1c:60:83:
88:09:69:4f:7b:66:8c:a5:0d:a3:f8:63:b2:8a:cb:49:e7:1d:
fa:38:f9:dc:a1:6e:ba:8e:60:25:68:9f:96:96:c7:22:6e:ae:
ee:eb:60:f6:bf:da:7c:a6:7f:9a:97:cf:ab:80:66:ba:30:2d:
a9:2d:f8:5e:d7:5d:84:bc:ce:11:6f:37:62:60:d2:b7:7d:29:
e2:97:eb:81:4d:23:65:d9:66:e2:11:0b:7c:e6:a3:cf:47:e8:
dc:e9:da:75:6f:d6:89:27:1f:d0:6e:b4:2e:72:7b:c6:4d:d7:
88:89:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-ams.rpki-client.org