Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/z48rxjF_5pUVWUBpFDmae0MLB18.roa
File: z48rxjF_5pUVWUBpFDmae0MLB18.roa (raw, json)
Hash identifier: +4bkbmr9RlPji3HdI41WzTFqyZJK5/RWG+u2wPs8MGM=
Subject key identifier: CF:8F:2B:C6:31:7F:E6:95:15:59:40:69:14:39:9A:7B:43:0B:07:5F
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: 0189547BC3DBF8E6CCCF7CF05C8BCA2906A5
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/z48rxjF_5pUVWUBpFDmae0MLB18.roa
Signing time: Fri 14 Jul 2023 12:59:04 +0000
ROA not before: Fri 14 Jul 2023 12:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:7b:c3:db:f8:e6:cc:cf:7c:f0:5c:8b:ca:29:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Jul 14 12:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf8f2bc6317fe6951559406914399a7b430b075f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:21:40:bc:7e:73:07:1a:98:3c:65:0c:aa:
b2:31:54:6e:50:94:10:9c:eb:1d:23:c9:30:25:db:
5e:3c:d6:6d:47:c2:e1:52:93:7d:22:02:05:05:96:
59:27:53:fd:b6:4f:f4:98:e5:12:35:ef:d1:da:6a:
e2:fe:27:d5:33:b9:95:49:60:67:b0:cd:6d:55:89:
e1:2a:7f:70:0f:be:21:1e:48:81:5d:d7:45:fe:7d:
10:76:7c:84:a3:40:49:ba:65:c4:c9:98:01:ad:0d:
cd:a0:99:32:e5:99:3a:63:bc:6f:dd:e6:49:d5:6f:
6c:a1:16:a5:22:18:7c:90:ea:15:0c:c0:b9:6b:ba:
22:4f:0d:38:26:d7:86:94:b7:75:cc:83:5c:e3:ba:
8c:e3:1c:4c:03:68:8f:3a:5e:91:df:32:4a:3c:cc:
f4:82:7c:2b:78:bd:18:88:60:45:f2:c9:39:4b:31:
1e:5b:c6:66:26:18:be:5b:b4:1e:91:a8:80:74:2b:
46:f2:bb:c8:4d:34:f7:3a:74:61:44:68:d3:05:de:
43:93:a1:b4:40:8f:55:25:ef:f9:2d:38:11:da:87:
cc:40:eb:9c:35:86:df:b1:38:46:c7:62:24:65:29:
c0:19:c7:4b:f6:0e:85:bc:51:f5:1f:34:9a:42:59:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:2B:C6:31:7F:E6:95:15:59:40:69:14:39:9A:7B:43:0B:07:5F
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/z48rxjF_5pUVWUBpFDmae0MLB18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:57:fe:a8:2a:37:91:32:d9:ee:9f:79:02:f3:ea:99:b2:62:
89:78:b1:4b:c6:7f:1d:f9:84:77:76:8e:eb:b1:62:e7:ee:09:
4e:89:0d:28:61:b2:2f:bc:b9:ac:d1:64:e8:65:62:39:b0:00:
e6:ee:35:95:20:05:e3:65:de:20:97:8c:25:ae:20:de:f3:d6:
f8:4f:3d:e9:fb:57:76:23:de:d0:b9:fd:48:7a:f0:b3:91:08:
78:6d:f9:dd:cc:74:57:3f:4d:8a:bb:67:97:13:93:4c:1b:ee:
42:3e:f4:2f:de:e7:37:71:d4:a3:65:23:37:4d:ad:a3:9a:4f:
db:0a:d1:26:ce:fb:68:33:dc:c0:3a:69:63:e9:79:fe:b8:9f:
91:82:aa:18:13:dd:47:a8:4f:d2:d8:60:d8:57:5c:90:d0:73:
2e:6d:d0:9b:05:73:90:b7:a0:ac:bd:24:07:27:36:9f:0e:4e:
5d:0b:92:39:23:72:3e:6c:b0:3c:48:70:79:be:81:c4:b0:28:
08:86:7a:78:31:e9:d6:87:33:25:0b:e2:51:f3:e2:2c:35:89:
b8:ed:bd:a3:03:3d:0a:ae:a2:d5:a2:33:b5:9a:d9:c4:ac:b1:
f1:d3:87:bb:ec:55:2a:17:2e:38:42:70:b3:cb:1b:96:9b:4a:
cc:9c:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org