Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/z3H4uLx9HDo_SEQ0zXpO0B6SNbY.roa
File: z3H4uLx9HDo_SEQ0zXpO0B6SNbY.roa (raw, json)
Hash identifier: kecLc/Lu/F+WBHz71ej1FtGtFUbu0UvAfFNJzP+lH4g=
Subject key identifier: CF:71:F8:B8:BC:7D:1C:3A:3F:48:44:34:CD:7A:4E:D0:1E:92:35:B6
Certificate issuer: /CN=1da3393991409489ef9fd7460a75a370cae9dca7
Certificate serial: A2C0C0
Authority key identifier: 1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/z3H4uLx9HDo_SEQ0zXpO0B6SNbY.roa
Signing time: Mon 24 Jan 2022 21:53:28 +0000
ROA not before: Mon 24 Jan 2022 21:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.45.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10666176 (0xa2c0c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da3393991409489ef9fd7460a75a370cae9dca7
Validity
Not Before: Jan 24 21:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf71f8b8bc7d1c3a3f484434cd7a4ed01e9235b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:d3:24:8c:4b:d4:e7:cd:78:10:e1:26:7a:
16:66:c3:7b:7a:45:b2:aa:2f:88:e4:0d:63:31:6d:
71:e7:02:8c:10:a8:7d:c5:a7:62:a4:e1:e3:d3:e1:
52:d3:4f:68:bc:24:bf:f8:68:fe:50:f2:e4:4b:bc:
86:c5:eb:04:32:a3:4e:39:44:32:86:d2:84:97:d8:
05:73:ad:6b:18:7b:7e:d0:f9:98:7f:4c:2a:32:f1:
a4:89:cf:e2:02:73:73:16:11:e6:9d:c3:ab:d3:58:
44:4b:6c:b5:e8:39:d5:45:e5:c0:6a:4f:1e:f0:fb:
a5:3f:9d:06:21:b3:ae:6c:68:30:d5:a3:1b:2c:be:
ff:2c:c6:be:55:44:c0:e0:02:51:23:21:9d:89:6c:
ad:60:a0:92:e2:42:6c:de:76:a3:ea:45:13:31:c1:
10:56:7d:3f:3c:29:e9:bb:e0:9e:14:3a:15:3f:c6:
5f:1d:ba:8c:e1:eb:c7:f8:a4:76:48:91:70:d3:a4:
0b:5b:3d:82:13:7e:f7:fb:4b:3d:f9:e7:0a:40:c5:
75:d4:ac:31:b0:e2:5a:4e:52:43:ee:74:89:e5:05:
22:cf:52:df:8f:93:b7:30:f9:12:65:33:22:0d:1c:
d1:fb:d6:77:aa:a0:8d:6e:9f:57:2b:ec:cb:36:c2:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:71:F8:B8:BC:7D:1C:3A:3F:48:44:34:CD:7A:4E:D0:1E:92:35:B6
X509v3 Authority Key Identifier:
keyid:1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/z3H4uLx9HDo_SEQ0zXpO0B6SNbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.100.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:9a:96:69:fe:18:11:a4:3e:ad:ad:f5:b4:6e:81:47:e4:ab:
8e:c5:ec:19:cb:46:d1:a3:5a:72:7a:2f:a5:97:1a:81:44:a7:
e7:ab:81:7e:54:93:01:e4:47:1a:48:55:c6:72:00:a2:7f:cc:
2c:f4:bb:76:78:e8:ea:37:b1:f9:61:75:1a:31:1f:44:fd:3f:
f2:6d:74:5e:a2:5d:04:96:4b:7d:3f:8e:59:50:13:23:e9:76:
64:d4:dc:d0:7e:af:fd:39:7e:1b:3d:2e:a1:7e:bc:71:95:a1:
06:28:2e:49:ef:ed:f3:a0:36:6f:53:1e:45:72:07:d9:54:e8:
6a:a3:c4:2f:0b:64:f1:c9:9a:08:36:72:ce:16:51:c8:d0:d6:
da:67:b0:4c:43:5f:59:87:e1:59:0d:9a:84:58:94:70:ee:fd:
dd:07:8f:bc:0b:3b:84:de:f2:3f:e9:86:29:69:01:02:e2:ab:
0e:02:19:a8:d6:d3:bd:10:bb:f0:67:64:01:8b:0a:12:08:ce:
05:21:95:75:72:32:17:28:ad:7b:a7:ef:85:d5:0e:a9:73:ea:
a7:a5:d6:4c:cd:23:0b:dc:25:1b:55:0e:ca:25:50:ef:95:70:
9c:e9:55:97:60:90:d5:0b:b0:99:6a:cc:69:0d:82:cb:cd:42:
ec:3f:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org