Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/sEb10DbxbxR1XPUJXp7zX326LJE.roa
File: sEb10DbxbxR1XPUJXp7zX326LJE.roa (raw, json)
Hash identifier: U+cYshzsRnj/wQTLDHdJnwOsSG5IOc7y0gwJgFs6hgI=
Subject key identifier: B0:46:F5:D0:36:F1:6F:14:75:5C:F5:09:5E:9E:F3:5F:7D:BA:2C:91
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 018A3F87325B863A1F09F98C2C5921DD9E68
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/sEb10DbxbxR1XPUJXp7zX326LJE.roa
Signing time: Tue 29 Aug 2023 04:22:19 +0000
ROA not before: Tue 29 Aug 2023 04:22:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:87:32:5b:86:3a:1f:09:f9:8c:2c:59:21:dd:9e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Aug 29 04:22:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b046f5d036f16f14755cf5095e9ef35f7dba2c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:e3:3c:2e:dd:af:84:9f:1b:b0:49:49:ed:
83:cd:be:58:24:7c:0a:a0:63:0f:0e:c4:b1:14:9a:
24:45:5c:81:7b:53:ec:e4:90:f4:6f:3a:2e:9b:2b:
59:a5:6b:51:e4:5b:55:0f:04:e7:79:a9:47:4d:9c:
ab:de:3f:a6:77:d1:9f:5a:a7:db:3f:79:b2:d3:53:
9c:48:94:fc:60:02:8e:13:80:7d:22:c2:00:a4:62:
60:ef:03:21:53:04:bf:73:ca:79:d8:26:aa:ab:b0:
f7:bc:e1:ba:7d:41:77:6b:76:8f:9e:80:a3:89:05:
ae:48:d7:24:9b:fd:92:e3:f5:be:85:95:d1:91:c6:
83:1e:3b:10:7f:f5:0d:bd:cb:d3:18:da:52:f6:8a:
33:88:e5:d2:09:f1:18:88:05:75:56:08:f4:b9:83:
e2:f1:a9:1e:07:de:41:54:01:2d:23:3d:dd:69:a4:
18:d8:d3:dc:97:f6:3d:bc:47:d8:3c:54:35:37:0e:
02:ff:6d:3f:39:99:84:ea:d2:4f:10:a5:13:b1:e9:
39:18:40:c3:25:39:47:46:51:a3:79:e1:24:ff:a7:
54:fd:2d:92:0b:30:38:2f:70:7a:62:fb:cb:b5:37:
27:69:45:44:73:23:26:94:e9:7e:e9:9d:16:4a:e4:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:F5:D0:36:F1:6F:14:75:5C:F5:09:5E:9E:F3:5F:7D:BA:2C:91
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/sEb10DbxbxR1XPUJXp7zX326LJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
66:92:11:87:d8:f3:1a:45:ec:bc:08:fa:78:f0:db:d3:b5:76:
7a:d5:9f:e3:f8:a9:f5:a7:79:2a:1e:0b:27:5e:09:10:5f:72:
36:5c:37:ae:7e:44:19:6c:1b:7c:d9:69:39:a9:14:9c:29:6a:
dc:29:7d:8e:9d:a7:bd:41:cd:a6:75:b9:b3:b1:03:26:cf:55:
18:e2:bb:95:46:3f:2c:0f:8b:b9:42:d6:3e:59:73:36:47:b1:
a9:db:a3:23:19:a6:f4:aa:f1:c7:9c:48:80:ff:47:64:86:ba:
66:24:47:06:71:aa:0b:a6:89:79:8c:c2:87:a6:4a:10:d6:52:
c9:a9:cf:57:f0:db:ab:f8:5e:c8:b0:2d:f3:23:59:d3:0f:fb:
87:d0:3c:da:bd:40:65:dc:01:13:f3:ca:43:f6:26:19:17:fb:
cf:53:c1:8c:e1:84:50:16:ff:ac:1c:1b:b6:24:d6:12:57:df:
21:58:53:3f:00:e4:15:67:f8:b1:e0:73:1a:5a:eb:d9:09:a8:
d0:99:9e:7f:01:89:e9:d9:7d:a6:24:9a:e0:1c:37:1b:3a:6a:
2c:c4:fa:61:78:51:4b:2a:74:8c:c3:d5:e1:a9:97:b4:e1:36:
f3:68:dd:4d:27:e6:5b:76:8d:57:b4:4c:04:7a:40:d7:c1:0b:
b2:9c:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:26 2024 by rpki-client on console-ams.rpki-client.org