Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/J5rZFKz8_n7zY0Pr0SsVMfvFggM.roa
File: J5rZFKz8_n7zY0Pr0SsVMfvFggM.roa (raw, json)
Hash identifier: /hOXAzisteeqmpaMoi43osfaxnU2rDGl+EfnAd52Z/8=
Subject key identifier: 27:9A:D9:14:AC:FC:FE:7E:F3:63:43:EB:D1:2B:15:31:FB:C5:82:03
Certificate issuer: /CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Certificate serial: 07401C7F
Authority key identifier: 2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/J5rZFKz8_n7zY0Pr0SsVMfvFggM.roa
Signing time: Wed 26 Jan 2022 19:38:20 +0000
ROA not before: Wed 26 Jan 2022 19:38:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210880
IP address blocks: 193.26.14.0/24 maxlen: 24
193.26.121.0/24 maxlen: 24
193.26.22.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121642111 (0x7401c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Validity
Not Before: Jan 26 19:38:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=279ad914acfcfe7ef36343ebd12b1531fbc58203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:bb:53:2d:66:e9:8c:6b:5b:f6:94:e5:1f:
63:3f:31:34:04:50:71:c3:28:8f:d6:5b:fe:3d:f7:
2f:d7:53:f8:bf:00:01:df:03:2b:70:46:b8:a4:b8:
e7:01:2c:ee:ed:33:c6:99:15:c7:c3:82:fb:90:f1:
bf:8c:d5:af:30:5b:0e:b5:16:19:35:cb:95:0e:ef:
de:85:43:10:4b:c8:e3:ec:a7:f1:f7:ba:1c:e5:26:
26:d5:ff:47:b4:6b:da:cf:dc:2f:7f:df:e3:02:07:
65:aa:be:26:c5:ee:40:3f:85:b7:f4:c4:42:d6:c9:
5c:62:32:b4:b5:05:16:13:6e:ec:18:52:dd:5b:11:
de:d2:ce:5a:cb:98:90:a5:18:cc:0b:71:24:6e:46:
8b:db:9e:7c:a1:68:72:aa:e0:82:53:1b:db:41:87:
38:c1:33:08:17:44:40:ac:08:c2:2b:e2:1e:ea:90:
57:d5:8a:98:a8:65:59:d6:c7:50:a7:03:c5:06:d7:
d6:ce:95:35:52:b7:b1:c8:c5:70:91:e9:7e:7f:74:
d6:5d:55:41:89:dc:dd:5b:65:64:ba:56:f5:90:47:
47:a9:e7:89:b6:ab:79:ca:62:33:97:b7:cd:e3:a3:
41:92:82:d8:6c:60:4d:b8:78:15:92:53:3a:f5:6c:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:D9:14:AC:FC:FE:7E:F3:63:43:EB:D1:2B:15:31:FB:C5:82:03
X509v3 Authority Key Identifier:
keyid:2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/J5rZFKz8_n7zY0Pr0SsVMfvFggM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/KqaU9ED7dgISuSBW4OtbMdUVD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.14.0/24
193.26.21.0-193.26.22.255
193.26.121.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8a:cb:b3:27:0f:0c:49:e6:90:9f:4b:e5:81:0a:83:5d:d9:
19:b0:1e:56:58:20:22:df:e2:f6:95:9a:9e:c1:ee:ba:31:3a:
06:44:d9:08:9c:e2:2e:9a:43:51:33:a7:d4:36:f5:5a:6a:c3:
b4:03:18:87:9a:b1:09:e6:dc:eb:c5:7b:93:5d:64:51:10:3b:
6c:31:0d:1c:77:fe:fe:98:81:c2:91:40:73:aa:1e:ff:53:d5:
5d:cf:85:10:da:00:9d:4e:26:2d:a8:a8:19:cd:51:70:23:3d:
85:90:b8:92:7e:a9:95:fe:6c:39:07:dd:2f:4f:7a:7f:d5:b7:
a4:5d:81:49:07:30:ab:5c:8a:45:11:94:f2:14:82:5a:6b:7c:
34:4c:6d:ec:68:8a:06:35:bd:07:b7:89:20:01:cb:6e:53:ad:
36:23:36:80:38:58:75:14:3a:37:70:74:46:81:55:8c:9e:18:
07:af:ff:1c:79:e4:3a:96:fe:19:cc:6a:10:e2:ad:ad:ca:42:
1e:b7:bc:d0:ba:c8:d9:41:07:f2:23:32:c5:0b:08:4b:13:a2:
fa:e4:c8:5f:91:73:47:cc:37:49:f2:86:61:05:7c:5e:f5:83:
39:33:1a:49:3f:4f:6b:90:eb:47:fc:7b:44:25:36:c6:d2:a1:
05:5d:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org