Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a5fa7f-0ff3-4d80-b8b2-b08f3d745cc6/1/Ubr4o4LvJp0JbXLfAVuKcJNiRlg.roa
File: Ubr4o4LvJp0JbXLfAVuKcJNiRlg.roa (raw, json)
Hash identifier: m92xwDUOBTEybX+wmMcloyCjlXFaVuRrVmTTkU9/1y4=
Subject key identifier: 51:BA:F8:A3:82:EF:26:9D:09:6D:72:DF:01:5B:8A:70:93:62:46:58
Certificate issuer: /CN=328d2b42f09aa793d16ecec208580dda5f0a402b
Certificate serial: 01857094FD5BA74EE0A38C7A752D2DAE0A06
Authority key identifier: 32:8D:2B:42:F0:9A:A7:93:D1:6E:CE:C2:08:58:0D:DA:5F:0A:40:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo0rQvCap5PRbs7CCFgN2l8KQCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a5fa7f-0ff3-4d80-b8b2-b08f3d745cc6/1/Ubr4o4LvJp0JbXLfAVuKcJNiRlg.roa
Signing time: Mon 02 Jan 2023 03:44:50 +0000
ROA not before: Mon 02 Jan 2023 03:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20526
IP address blocks: 194.242.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:fd:5b:a7:4e:e0:a3:8c:7a:75:2d:2d:ae:0a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d2b42f09aa793d16ecec208580dda5f0a402b
Validity
Not Before: Jan 2 03:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51baf8a382ef269d096d72df015b8a7093624658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:a9:23:4b:73:26:34:1f:db:29:8e:f4:2e:
d6:48:ab:4a:75:17:23:30:b8:a2:84:fa:ab:25:59:
f1:13:25:d6:0f:88:e3:43:b3:fe:df:21:ad:0b:6a:
5f:02:2c:39:5e:cf:6c:d2:a1:a1:d0:7e:f1:b0:79:
47:7b:5e:6e:22:0f:45:d4:72:56:e4:b8:da:9b:71:
1b:8b:1b:5b:11:bd:ad:eb:a3:92:fa:fe:28:23:47:
bc:af:3e:30:6b:14:dc:d8:71:20:60:31:01:3a:70:
e8:a9:99:c7:69:10:7e:d6:16:94:75:25:b2:6b:55:
c0:2a:91:ca:b7:0d:eb:72:aa:67:ea:00:20:c7:65:
70:1f:10:7d:bb:33:2b:48:8d:86:fb:23:4a:f2:bb:
c1:b5:3e:3e:c9:2d:24:69:42:01:9b:67:fe:a8:18:
0f:d8:80:66:d9:67:2d:24:0a:77:a2:3b:8d:99:54:
0c:cd:b0:33:dc:43:02:9f:69:7d:0e:a9:0d:06:dc:
92:dc:0c:73:60:da:12:9a:20:fd:30:96:77:9a:33:
e1:28:e7:61:83:25:3b:51:b6:79:53:a2:d5:d2:29:
38:47:5a:86:2e:56:45:30:60:8a:5a:47:8a:f9:54:
e3:fa:94:ec:68:3c:87:8a:ea:f6:27:fd:ee:91:79:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BA:F8:A3:82:EF:26:9D:09:6D:72:DF:01:5B:8A:70:93:62:46:58
X509v3 Authority Key Identifier:
keyid:32:8D:2B:42:F0:9A:A7:93:D1:6E:CE:C2:08:58:0D:DA:5F:0A:40:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo0rQvCap5PRbs7CCFgN2l8KQCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5fa7f-0ff3-4d80-b8b2-b08f3d745cc6/1/Ubr4o4LvJp0JbXLfAVuKcJNiRlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5fa7f-0ff3-4d80-b8b2-b08f3d745cc6/1/Mo0rQvCap5PRbs7CCFgN2l8KQCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.36.0/24
Signature Algorithm: sha256WithRSAEncryption
97:bb:50:09:dc:42:65:1f:72:8e:6d:1e:55:2a:fa:db:43:b0:
65:9d:f3:e4:01:ae:ed:ed:fd:e7:a1:5c:6a:90:99:87:3e:9a:
40:3d:cb:ea:94:02:ce:19:9b:ab:89:01:89:e5:4d:36:7c:76:
db:93:95:9c:55:c4:c1:95:12:07:73:ca:b4:d8:08:34:da:1f:
81:3d:89:99:55:6b:ba:b8:20:0e:64:b6:79:0c:ce:e5:9e:e0:
21:6a:84:5d:eb:57:5e:07:a1:87:40:22:5a:c7:25:0d:ac:e6:
23:c4:8e:52:52:70:b9:99:ad:f0:92:28:ad:06:05:89:e9:cf:
5c:49:31:41:b6:ed:09:6c:d9:50:04:7d:d8:08:47:9b:33:91:
6f:35:f3:bd:3a:28:5f:87:4e:9c:3b:3f:f7:26:1f:93:6d:21:
68:2f:86:8b:36:74:ef:a5:9c:28:1a:5c:34:3e:67:58:af:ba:
dc:b1:90:dc:9a:05:0e:44:99:87:7d:af:f4:12:c1:31:08:af:
ff:d9:ea:4d:ca:a4:d6:a2:a7:05:46:4e:45:f4:78:12:50:fc:
60:8d:f4:15:be:0b:61:41:32:1c:5c:46:20:36:83:f1:a0:36:
e0:3b:31:9e:8d:81:ce:0a:63:bd:e7:1e:49:3a:86:51:12:17:
90:23:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:19 2024 by rpki-client on console-ams.rpki-client.org