Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/cg2ISDy1qCgiTBsFnvd9JZvGFWY.roa
File: cg2ISDy1qCgiTBsFnvd9JZvGFWY.roa (raw, json)
Hash identifier: mhhOx8yQzYoyt9B6ZZG46kkPhXxc9HCluxsx4oOjexE=
Subject key identifier: 72:0D:88:48:3C:B5:A8:28:22:4C:1B:05:9E:F7:7D:25:9B:C6:15:66
Certificate issuer: /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial: 01839A363A17CDB6B2BD1F9C63F6C261E46A
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/cg2ISDy1qCgiTBsFnvd9JZvGFWY.roa
Signing time: Sun 02 Oct 2022 19:39:48 +0000
ROA not before: Sun 02 Oct 2022 19:39:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 194.26.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9a:36:3a:17:cd:b6:b2:bd:1f:9c:63:f6:c2:61:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
Validity
Not Before: Oct 2 19:39:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=720d88483cb5a828224c1b059ef77d259bc61566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:58:06:66:ee:a5:77:a0:81:ef:88:39:7b:
66:cd:c5:eb:70:db:c0:46:b9:27:cd:f6:50:75:cd:
f6:18:1e:30:4d:09:e0:b1:cd:d5:19:c1:45:11:90:
9d:b4:07:fb:91:28:c0:21:c5:ac:a1:d0:cd:0b:2d:
7f:24:99:4d:24:2f:64:cc:d9:f1:63:af:9e:5e:00:
3c:d2:60:fb:a2:53:f2:f8:c2:72:6e:bb:65:3a:be:
0a:a9:58:d0:c1:27:90:90:e7:ef:32:f2:2f:61:9f:
63:f8:da:b7:0f:57:ce:f2:83:39:35:3f:21:67:60:
c9:ef:80:29:f9:81:37:2e:17:e2:8e:ef:49:ee:15:
20:b3:b8:a2:29:1f:91:8e:a8:da:ff:23:be:3a:6a:
32:18:a9:32:18:80:ac:a0:1e:1b:b9:fa:62:7a:16:
a6:f9:d3:76:37:d4:bb:4d:83:54:52:bd:98:1d:26:
df:e4:d0:22:46:1c:b8:57:fc:12:69:4a:81:13:6d:
7e:50:33:f5:70:4e:d2:ac:ed:73:e2:4e:8f:e5:f9:
c6:d2:51:3f:3a:9d:e2:a7:d7:17:f8:fd:ea:84:1d:
c9:b2:5b:f9:07:95:ce:3f:ff:4a:29:f2:bb:ba:5d:
47:0d:f6:a1:b8:b8:ba:7e:55:72:c0:03:01:49:da:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0D:88:48:3C:B5:A8:28:22:4C:1B:05:9E:F7:7D:25:9B:C6:15:66
X509v3 Authority Key Identifier:
keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/cg2ISDy1qCgiTBsFnvd9JZvGFWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
90:32:bd:cc:3e:ca:19:cb:bd:da:16:a0:de:65:55:96:e0:3b:
a7:e9:13:94:e5:39:7c:85:3b:0b:1e:ca:7b:e0:fd:58:4b:f7:
49:9b:2c:5a:e1:3a:12:6d:d8:be:d6:12:ad:73:10:65:f5:c0:
a3:c6:7e:8c:0f:81:85:f7:b4:aa:5f:b1:3d:00:6a:3f:e0:44:
d8:46:84:d6:7f:6d:5c:f3:05:13:b8:eb:d1:a6:d4:b2:d4:06:
24:f3:5b:e3:73:80:cd:f8:48:fb:68:e5:50:5d:fc:9f:0c:ce:
ef:b0:c1:59:14:e4:9a:39:ee:9e:92:54:fa:e4:f5:79:17:83:
6a:af:2d:0d:c5:2c:dc:a8:e9:e2:b7:3e:a6:14:a1:a8:f8:c9:
64:ce:16:d6:11:36:73:dd:f8:e1:13:84:c0:9e:41:44:f9:6c:
5f:8a:dd:2f:f4:0a:2c:23:b4:07:5e:da:df:e0:69:db:22:ab:
9e:05:61:07:eb:a5:37:fc:c8:b8:53:b1:45:9d:90:86:d9:fe:
64:ca:33:f1:2c:b3:49:86:ea:82:94:de:8f:be:4d:a3:f0:58:
56:4a:1e:1f:e7:68:d3:30:85:96:31:7e:cc:b8:0d:ca:04:2e:
8f:f9:1b:c6:d7:cf:49:8a:43:33:e8:8f:5f:95:cc:1b:10:5c:
1b:7a:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:32 2024 by rpki-client on console-ams.rpki-client.org