Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/grEaOB8sK_HOeFsshBjbhHi7NgI.roa
File: grEaOB8sK_HOeFsshBjbhHi7NgI.roa (raw, json)
Hash identifier: L5O7fzeoomgxw1YX1CQRrUFLHN+yowOfzHnc13bTmnY=
Subject key identifier: 82:B1:1A:38:1F:2C:2B:F1:CE:78:5B:2C:84:18:DB:84:78:BB:36:02
Certificate issuer: /CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
Certificate serial: 0185711555E43E184423D4CE9435EC419AEF
Authority key identifier: 21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/grEaOB8sK_HOeFsshBjbhHi7NgI.roa
Signing time: Mon 02 Jan 2023 06:05:01 +0000
ROA not before: Mon 02 Jan 2023 06:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 194.26.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:55:e4:3e:18:44:23:d4:ce:94:35:ec:41:9a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
Validity
Not Before: Jan 2 06:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82b11a381f2c2bf1ce785b2c8418db8478bb3602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:9e:3c:14:c6:8d:9e:8d:39:90:76:2a:fc:
26:b3:fe:94:97:96:38:32:d0:37:8d:06:8f:83:8c:
cd:9d:4f:a4:83:44:cd:b5:fc:e8:54:65:18:4d:ce:
00:f9:c7:1d:32:26:36:38:e1:33:48:81:d9:06:0d:
eb:ae:10:3a:41:88:de:32:1b:12:6a:de:c3:04:43:
33:85:14:d3:28:de:a2:ee:80:1f:44:f3:bb:85:39:
f0:43:42:68:e1:c8:60:82:71:0c:06:72:ab:1f:b4:
3d:07:0e:1e:88:d1:28:0f:4c:5b:dc:c5:85:c7:ff:
45:65:5e:40:e9:09:e6:8f:c0:cb:c5:5e:26:2d:2c:
33:a4:0b:18:ef:84:7e:ab:af:79:29:7b:b8:64:28:
40:5c:d8:22:ad:ac:41:cf:b1:3d:64:03:47:2c:f9:
7b:23:1f:8f:7d:a6:7c:77:7d:ae:e9:4a:4f:e8:4d:
7f:cf:1c:d0:31:c2:0d:19:02:be:be:48:23:26:9d:
60:bc:b3:bd:3e:ca:8a:07:33:88:ff:4e:95:0f:53:
44:ad:8f:ba:4d:8e:1b:2a:25:38:f8:c9:50:4b:66:
59:fc:08:31:2b:f0:82:a0:94:a2:2f:4f:55:43:bc:
20:3e:25:83:c0:17:0b:c4:97:b0:ca:04:8c:10:b0:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B1:1A:38:1F:2C:2B:F1:CE:78:5B:2C:84:18:DB:84:78:BB:36:02
X509v3 Authority Key Identifier:
keyid:21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/grEaOB8sK_HOeFsshBjbhHi7NgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.230.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fb:94:d6:77:a2:99:71:9c:27:9a:b6:2d:32:8f:80:a2:22:
e8:91:66:55:2e:c7:b9:f8:19:f2:0f:36:f0:81:3b:1e:62:0c:
1a:c8:7e:7b:ac:ce:28:40:f2:fe:e6:75:a7:0d:d6:cb:b6:2c:
c2:16:e3:a3:0c:60:d3:fe:bc:cb:78:0c:97:60:4b:86:71:e8:
99:32:41:a3:8a:88:eb:e7:79:f4:63:00:2b:9d:e8:d6:35:70:
df:64:8a:1b:d8:51:16:5e:a8:3d:a7:1e:c8:c9:a0:76:ee:aa:
74:19:0c:03:2a:06:be:4c:0c:b9:d1:9a:b4:a2:08:2e:36:02:
a0:8c:89:6c:64:10:08:8c:ff:cb:21:89:b9:dd:d9:c8:6b:fd:
fb:7e:14:be:d7:a4:31:24:f5:ce:81:6d:2f:8c:4c:0f:12:4a:
9e:07:3e:4c:a5:50:ed:ce:57:68:9c:03:7e:12:59:f4:96:bd:
d4:0d:0a:2d:28:91:83:e8:b1:e9:d2:e8:3a:c9:ab:1b:ae:28:
3b:b6:c6:30:73:21:f5:11:87:ba:73:20:10:c4:ae:24:e6:10:
45:05:51:68:ad:f4:6d:dd:f9:e3:70:af:13:b0:c4:3c:96:aa:
8e:d7:ca:a9:d4:76:b8:69:e3:17:4d:e1:ee:c6:f4:37:f4:18:
6e:94:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:52 2024 by rpki-client on console-ams.rpki-client.org