Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/AU4n66H_ZS2mnIKVpFybtdWCVaA.roa
File: AU4n66H_ZS2mnIKVpFybtdWCVaA.roa (raw, json)
Hash identifier: mifKdj2ej0Yvqe1Uq+NZWsJ1kW4Ui1TZEyR32eTd874=
Subject key identifier: 01:4E:27:EB:A1:FF:65:2D:A6:9C:82:95:A4:5C:9B:B5:D5:82:55:A0
Certificate issuer: /CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Certificate serial: 0190EF55A0918EC2D4D9054E0A67213ECC4E
Authority key identifier: F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/AU4n66H_ZS2mnIKVpFybtdWCVaA.roa
Signing time: Fri 26 Jul 2024 13:58:04 +0000
ROA not before: Fri 26 Jul 2024 13:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5482
IP address blocks: 141.195.128.0/19 maxlen: 24
141.195.136.0/21 maxlen: 24
141.195.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:55:a0:91:8e:c2:d4:d9:05:4e:0a:67:21:3e:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Validity
Not Before: Jul 26 13:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=014e27eba1ff652da69c8295a45c9bb5d58255a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:f6:86:57:aa:5f:0d:c9:46:4c:ad:53:d9:
c0:c6:9f:a6:2a:5f:74:10:70:d7:80:a5:ac:d8:d2:
03:e5:e7:79:a3:ba:ab:7a:b9:58:90:41:16:36:b9:
b9:bb:85:83:54:0b:c8:0f:88:2f:7d:f4:cd:ad:10:
0e:0b:50:a2:1e:69:cb:e8:86:b3:a5:2d:39:37:dc:
06:fc:e9:b3:d1:f1:3e:ad:50:87:0c:4f:fe:8c:87:
11:a7:1e:04:c6:fa:ab:55:22:cc:4b:0b:69:e5:8f:
98:3f:02:f9:f5:54:57:9d:18:e3:d4:5c:f8:72:d5:
92:d5:36:48:af:c1:9d:c0:58:4d:0b:b8:72:da:03:
f6:88:03:72:ac:bc:30:81:dc:71:e5:5d:9e:75:32:
f0:65:69:a8:28:7c:d2:9f:2e:ab:18:92:41:5a:ab:
ee:94:1e:31:fd:07:c0:f0:f1:53:bf:df:98:e3:d0:
8e:4e:70:d0:08:69:55:56:21:4f:bc:48:ea:ba:a9:
c4:eb:da:70:cd:28:b4:df:7d:9d:22:b0:da:a4:bb:
c9:68:ce:f3:8e:88:1f:70:53:c4:08:46:83:9c:58:
3c:bd:1d:ef:7f:c4:6b:57:35:fc:86:a3:f9:26:e0:
ff:a8:81:98:a2:09:9f:c2:2f:55:e5:e1:fd:a8:aa:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4E:27:EB:A1:FF:65:2D:A6:9C:82:95:A4:5C:9B:B5:D5:82:55:A0
X509v3 Authority Key Identifier:
keyid:F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/AU4n66H_ZS2mnIKVpFybtdWCVaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/8mI53KnekLP_m9jCPv38Ep9t7Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.195.128.0/19
Signature Algorithm: sha256WithRSAEncryption
68:d0:1f:42:b4:be:0c:92:81:ba:95:0c:c6:cf:14:8c:33:90:
0b:7e:2c:e2:1c:58:ae:0c:49:3b:ff:40:e9:d2:ca:35:f5:09:
bd:9b:82:86:c0:07:18:42:05:14:df:be:6a:e4:b3:7a:5d:95:
01:1c:e2:23:05:e3:f5:7a:8d:a2:0d:6d:ec:8a:3f:86:9d:b1:
d3:38:da:af:8b:92:7d:bd:37:c2:39:11:14:ec:2b:d0:ec:83:
6e:50:a4:cb:7e:68:97:a0:ef:b0:ac:b1:4a:58:13:4d:69:37:
57:4e:81:ea:ee:da:b3:0f:09:5d:5c:5f:91:1f:f6:17:b6:ae:
87:9b:ed:88:08:35:f0:ac:8d:b2:5f:9a:09:c5:db:c8:6c:ac:
6d:6d:c9:7f:fd:3f:70:82:87:07:0f:1d:57:b1:bf:9f:87:59:
81:62:96:40:41:13:16:90:bc:5b:65:0f:43:d2:38:90:b7:44:
8d:c0:b0:70:d0:72:4a:9d:c2:7f:51:ff:6b:02:57:c9:1c:d8:
c4:df:4c:27:39:df:20:cc:c1:97:64:33:b7:17:90:c5:ad:60:
b3:1b:72:66:ff:3b:5b:8c:ce:2c:8d:f6:f3:46:df:43:b7:cb:
74:96:d9:d4:1e:11:3f:1d:0f:77:d7:6d:3f:92:4a:e7:f0:e0:
a8:ad:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 17:04:57 2024 by rpki-client on console-ams.rpki-client.org