Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/JqYhg6tYLfQ10264E3daU5B8FLQ.roa
File: JqYhg6tYLfQ10264E3daU5B8FLQ.roa (raw, json)
Hash identifier: sdHcPr9XxB1oDI95HkG+VO8g0f5tlhFePovJoEDn46o=
Subject key identifier: 26:A6:21:83:AB:58:2D:F4:35:D3:6E:B8:13:77:5A:53:90:7C:14:B4
Certificate issuer: /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial: 01837E75BC651C56FC2D3A80E22E7D85F472
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/JqYhg6tYLfQ10264E3daU5B8FLQ.roa
Signing time: Tue 27 Sep 2022 10:19:48 +0000
ROA not before: Tue 27 Sep 2022 10:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 194.15.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:75:bc:65:1c:56:fc:2d:3a:80:e2:2e:7d:85:f4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Validity
Not Before: Sep 27 10:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26a62183ab582df435d36eb813775a53907c14b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:2b:5d:a4:0e:55:c9:2a:ef:33:46:70:7e:
58:f2:49:a6:37:b4:cf:4e:b3:9e:c1:d6:0b:4e:8d:
6a:bf:c4:50:10:61:75:fa:3b:8d:f9:65:38:81:d5:
05:36:86:5b:26:81:73:bb:fd:7f:ce:86:e7:9c:4b:
69:d0:cf:6e:bf:c4:0a:c9:17:44:b5:cd:91:a0:83:
8e:5b:07:b8:f5:1b:60:30:19:df:c6:2d:d5:eb:b0:
c8:b9:e1:fb:58:c3:32:55:d3:e5:03:a3:b1:2f:98:
4d:9a:84:58:82:83:c6:65:b7:6d:a4:c9:d9:85:6e:
bc:2d:7f:42:2e:37:0e:4f:e8:7b:02:63:bb:b4:45:
ce:d0:74:7c:bc:ff:a0:7d:e9:c5:59:7a:7f:84:01:
45:4f:dd:d4:67:d6:de:3d:3d:78:43:9c:fa:ab:d8:
d0:d6:22:d8:f4:0b:af:5a:c4:fc:b9:97:73:60:af:
bf:eb:10:0c:ca:e4:4d:89:3c:67:0b:dd:f7:36:63:
a5:d1:8c:15:76:32:f5:ff:f3:3a:fd:03:16:cc:e1:
8d:32:57:0f:95:48:73:a9:a0:64:fe:61:34:ee:fb:
49:ff:f0:3f:90:d2:c5:6e:a4:95:e3:94:6c:24:99:
d8:3d:59:f7:49:54:55:4c:80:25:1b:55:f2:dd:13:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:21:83:AB:58:2D:F4:35:D3:6E:B8:13:77:5A:53:90:7C:14:B4
X509v3 Authority Key Identifier:
keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/JqYhg6tYLfQ10264E3daU5B8FLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:23:ec:27:e0:19:38:14:51:b3:2e:d6:4f:87:b2:17:d7:cb:
0b:85:36:87:e7:19:9f:b3:4a:d0:a1:f9:40:9b:76:d9:c0:24:
ca:59:5e:5b:53:fd:64:b9:0c:c0:3c:f2:c3:50:da:46:c2:5a:
b8:18:d9:e0:b4:21:1f:8b:2c:4f:3b:c9:0d:b0:95:85:5f:34:
4f:f2:fd:0d:d5:b5:dc:b4:1a:15:13:19:f2:e4:43:16:41:80:
fc:cc:b0:f7:78:58:a2:96:75:20:f8:4f:d4:7b:f3:57:e1:c2:
09:37:d3:44:e5:f1:61:e3:0d:22:ef:fe:98:b8:bb:29:2c:19:
0f:35:1c:23:7d:71:76:80:f8:ac:b9:31:46:fd:3e:96:2f:2b:
d1:06:80:cb:87:0b:aa:82:f8:1d:88:03:4b:ae:01:49:8b:1c:
c9:6f:28:93:0b:7d:83:b5:aa:30:26:ba:6a:3e:5c:65:70:9f:
73:5c:4e:f7:a0:b9:f8:6e:ef:2c:c8:e1:0d:6f:fc:da:ce:b8:
74:d1:0b:ce:aa:b1:83:3e:e1:5e:1a:fb:4d:bd:5f:ba:d9:6c:
92:f3:9b:eb:7b:14:e2:c9:0a:76:dd:39:4c:06:7d:be:7f:9f:
fe:01:8c:c9:32:e0:e6:c0:18:89:e8:c9:8d:d4:81:9b:70:88:
d3:46:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-fra.rpki-client.org