Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/hdJQcd79BM8YAxHUKMjXJTwrJGE.roa
File: hdJQcd79BM8YAxHUKMjXJTwrJGE.roa (raw, json)
Hash identifier: bwbw+XMnl0vtLkay1GHH6lLxWZJpD0pPSWWhFdByHns=
Subject key identifier: 85:D2:50:71:DE:FD:04:CF:18:03:11:D4:28:C8:D7:25:3C:2B:24:61
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 018CC94AC0DEE0D00C309F91BDE532D48B32
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/hdJQcd79BM8YAxHUKMjXJTwrJGE.roa
Signing time: Tue 02 Jan 2024 08:29:28 +0000
ROA not before: Tue 02 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 194.59.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c0:de:e0:d0:0c:30:9f:91:bd:e5:32:d4:8b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: Jan 2 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85d25071defd04cf180311d428c8d7253c2b2461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:68:fa:22:34:73:a1:62:6b:b7:cf:09:76:
59:b8:37:69:1d:6f:bf:cc:1b:16:fb:2b:96:fd:98:
9e:65:a6:c4:6b:56:a0:1e:3d:3e:b7:77:b0:7a:fc:
21:a0:f3:b3:41:6b:12:7a:87:1f:f9:86:24:f4:df:
f9:e8:86:ce:d7:02:12:3e:40:26:be:53:1e:28:a8:
42:de:51:9f:b3:36:d2:c2:08:de:2a:37:65:1d:47:
b2:07:0b:6d:a2:4e:57:e5:e0:ed:ea:75:5c:07:75:
2d:44:45:dd:71:83:eb:0f:b6:68:e9:a2:53:b2:4a:
93:a4:ce:a5:35:db:8f:b2:a1:3a:31:e1:92:46:e2:
04:3c:fd:4a:92:9b:15:74:7e:78:17:96:f8:b4:a9:
97:e7:44:6a:9f:3c:98:04:15:9a:9e:3d:8b:54:28:
fb:40:22:4f:e3:3f:47:15:88:27:1a:3d:b4:7a:ee:
eb:5c:a0:2e:95:28:f9:0d:23:6c:f9:1c:e3:6a:42:
f0:5a:e7:10:1c:0a:6a:7c:ba:3a:0f:76:a0:1e:4f:
ec:c7:bb:76:72:d3:ee:89:f0:f0:6e:37:30:e0:fd:
a7:f8:71:82:63:f6:57:44:c7:46:4d:10:4e:9d:eb:
e6:1e:89:10:6f:04:13:23:a1:24:14:92:e9:cc:f7:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:50:71:DE:FD:04:CF:18:03:11:D4:28:C8:D7:25:3C:2B:24:61
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/hdJQcd79BM8YAxHUKMjXJTwrJGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.9.0/24
Signature Algorithm: sha256WithRSAEncryption
54:89:f4:31:88:11:22:47:55:8c:82:b3:2d:d2:b4:5c:69:ac:
36:ec:96:75:00:63:48:d1:d5:3d:ee:7c:97:d1:46:bf:e4:81:
46:1b:f7:8c:34:63:32:87:ec:19:9d:42:bd:ba:e0:73:d7:65:
00:02:52:e5:82:ab:10:0b:7a:ec:a5:26:bd:e4:16:65:ae:18:
d4:cb:8a:a7:10:41:db:d8:8f:2b:6e:eb:08:86:7a:25:8f:10:
b3:14:21:c8:ac:fb:ed:de:b3:6d:63:c2:cf:3c:26:6d:92:82:
5c:3b:a2:af:3f:06:be:ae:ce:1c:d1:9c:16:d8:ce:4c:7a:f2:
b8:dd:e2:ca:7d:df:de:9d:38:d9:e5:7d:0b:be:78:52:28:28:
66:de:f7:7c:68:b6:25:b0:43:fe:53:78:26:8f:24:a0:b2:b6:
96:69:03:5b:44:17:f3:65:42:52:6d:7f:41:fd:c0:ab:0b:c5:
d6:c8:81:42:f9:c6:be:62:f0:d8:b3:03:62:c9:1f:ea:dc:92:
19:20:0d:c6:e2:5e:55:59:62:58:64:c6:86:fb:a8:f8:7c:82:
1b:66:ae:79:6c:96:4c:83:29:d7:0b:e4:c7:4d:a9:e0:e8:22:
6c:0b:07:5a:1b:ae:66:1c:58:50:8b:5f:5b:fd:25:c1:9f:be:
3f:e8:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org