Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/3B2IRKPiEA9Itk4WBy7zWpccwRg.roa
File: 3B2IRKPiEA9Itk4WBy7zWpccwRg.roa (raw, json)
Hash identifier: oM9+UGZmtSbEHUOrEhwK4d+lZPuq9jzm+pv66/sux8k=
Subject key identifier: DC:1D:88:44:A3:E2:10:0F:48:B6:4E:16:07:2E:F3:5A:97:1C:C1:18
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 018CC94ABFECBB805A0A95AC9E0DAFC40082
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/3B2IRKPiEA9Itk4WBy7zWpccwRg.roa
Signing time: Tue 02 Jan 2024 08:29:28 +0000
ROA not before: Tue 02 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 194.59.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:bf:ec:bb:80:5a:0a:95:ac:9e:0d:af:c4:00:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: Jan 2 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc1d8844a3e2100f48b64e16072ef35a971cc118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:7a:b6:ef:af:4f:3e:84:00:5d:74:46:ec:
d9:9e:b5:1a:53:91:3b:c6:51:e8:62:33:da:31:b9:
66:85:f6:b3:15:22:a5:1f:78:41:b5:3e:e8:4e:cf:
af:2e:da:db:96:f2:87:ca:20:26:c9:4a:15:8d:31:
84:61:05:13:b3:4b:a3:10:61:ec:a1:36:34:1c:c9:
98:7f:a6:38:c5:ca:33:94:6f:d0:8b:56:9f:ad:ea:
c6:97:db:ae:4b:30:9a:e0:6f:f6:81:01:d3:af:b6:
d4:cb:bb:5f:0d:c8:cd:80:16:74:ee:60:0b:75:c4:
0d:d2:23:7d:09:1c:77:63:a7:67:6d:6f:76:65:8e:
c4:33:a6:8b:51:0e:64:4e:32:8e:0e:c5:f4:67:f1:
e4:5f:42:b3:da:34:45:62:53:07:f3:26:a9:9b:0e:
0b:bb:7d:18:25:c1:12:f6:fd:35:88:ff:ac:93:9a:
f7:be:8c:b4:45:00:d5:05:1f:2f:51:3c:7b:9f:04:
f4:d8:e6:9e:eb:8f:ea:d2:a9:f3:c8:46:ca:3c:d2:
5a:6c:1b:73:ed:a6:8a:02:f2:68:0b:87:ea:5c:da:
6b:e7:f4:8f:42:71:8c:56:0f:af:fd:3b:a5:e0:b5:
a7:f9:61:5f:29:f6:c4:42:a0:8c:f6:b2:1e:77:a1:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:88:44:A3:E2:10:0F:48:B6:4E:16:07:2E:F3:5A:97:1C:C1:18
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/3B2IRKPiEA9Itk4WBy7zWpccwRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.7.0/24
Signature Algorithm: sha256WithRSAEncryption
87:67:bc:4b:be:85:a6:43:10:e4:99:77:9e:80:8f:f9:c8:2b:
c8:38:bd:e2:73:3d:8d:b0:9d:5e:71:dd:33:1d:80:4a:73:28:
b6:da:dc:5e:90:23:6f:f3:8e:f4:29:e1:54:e8:e9:86:b6:74:
b3:31:86:24:b8:1f:a1:5a:62:44:e2:82:50:14:e8:f2:ec:35:
18:58:8b:dd:93:a7:09:2f:da:8c:06:d1:25:3b:45:89:22:26:
47:9d:25:85:81:4f:cd:c7:9e:64:58:ab:bd:24:13:fd:8b:03:
a8:97:29:cb:a0:d1:fa:b3:ae:be:6d:f1:19:15:9f:77:7e:15:
d8:81:f8:73:25:25:73:a8:24:c6:77:59:bc:17:70:b7:7a:af:
3a:a9:be:a2:61:e8:bc:a4:28:96:a8:8e:55:ed:11:a4:df:17:
23:9d:ab:21:ed:f3:b5:a3:e7:f6:b0:8e:0a:2c:1f:76:ac:fd:
9b:a1:2c:94:62:be:84:c5:64:45:51:52:47:5a:d1:bd:78:73:
13:d3:70:53:b2:15:cc:87:b0:62:50:e9:94:19:6d:b1:d1:34:
4b:c2:f7:e1:87:72:62:45:78:02:1d:65:70:70:78:32:15:c3:
a6:42:58:c6:0c:ad:01:42:b1:61:0f:c2:e5:ad:ac:ca:db:cd:
59:7a:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org