Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/Jzx4JiFCRpSphgjowHTSzjvpf7w.roa
File: Jzx4JiFCRpSphgjowHTSzjvpf7w.roa (raw, json)
Hash identifier: 03j7XK/gdUzpf5nBoTsfTI0sUndiZe7qfvXyWEZuDaI=
Subject key identifier: 27:3C:78:26:21:42:46:94:A9:86:08:E8:C0:74:D2:CE:3B:E9:7F:BC
Certificate issuer: /CN=318fd676ed1e2dd58fbb75967bd9e91189f8aaf0
Certificate serial: CFBD6D
Authority key identifier: 31:8F:D6:76:ED:1E:2D:D5:8F:BB:75:96:7B:D9:E9:11:89:F8:AA:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY_Wdu0eLdWPu3WWe9npEYn4qvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/Jzx4JiFCRpSphgjowHTSzjvpf7w.roa
Signing time: Sat 01 Jan 2022 11:04:41 +0000
ROA not before: Sat 01 Jan 2022 11:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 194.104.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13614445 (0xcfbd6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318fd676ed1e2dd58fbb75967bd9e91189f8aaf0
Validity
Not Before: Jan 1 11:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=273c782621424694a98608e8c074d2ce3be97fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:0c:9c:a2:73:59:6a:45:c6:ee:54:8b:8c:
cc:52:8a:26:64:12:1c:72:a8:79:b0:d5:10:7e:36:
3c:85:22:53:2b:8f:b0:d3:2f:ec:a0:8b:a2:bc:87:
2e:18:0f:22:9a:d2:2b:f0:92:ba:9b:29:e4:00:e4:
1a:06:4d:41:2c:35:ba:d4:2d:da:c8:a4:52:4c:49:
5c:bb:29:35:89:c0:21:b3:00:db:95:31:74:9d:60:
99:52:c8:b0:e5:79:86:09:c7:c0:7a:26:66:2a:30:
89:0f:ca:96:65:c2:71:83:fc:c9:ef:2f:c4:4f:48:
e6:d6:c5:c9:d5:0c:97:d5:75:c7:0a:e7:49:59:45:
5d:6a:53:e7:c9:12:42:64:86:3c:43:ac:15:3a:8a:
10:c7:4b:6c:55:e0:e0:e3:f0:b1:99:f4:8e:59:bd:
f0:94:39:ad:36:3e:2a:9d:86:d0:64:5b:3a:e5:94:
ae:6c:64:fd:57:f6:72:a6:91:6c:66:dc:05:69:d3:
27:97:66:59:8c:5b:17:32:90:6a:a0:0a:bf:a4:b5:
ed:f9:d3:ae:d6:88:dc:a8:38:79:23:4e:a6:f5:fe:
7f:bd:65:38:dc:1f:12:13:14:14:dc:98:88:07:df:
22:33:e9:b4:01:d7:57:ea:a3:f5:e5:3f:e4:bf:ba:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:78:26:21:42:46:94:A9:86:08:E8:C0:74:D2:CE:3B:E9:7F:BC
X509v3 Authority Key Identifier:
keyid:31:8F:D6:76:ED:1E:2D:D5:8F:BB:75:96:7B:D9:E9:11:89:F8:AA:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY_Wdu0eLdWPu3WWe9npEYn4qvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/Jzx4JiFCRpSphgjowHTSzjvpf7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/MY_Wdu0eLdWPu3WWe9npEYn4qvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6a:0f:4b:62:be:5e:db:09:58:4a:80:e7:e7:63:ca:e4:96:
bc:34:9c:e9:03:2f:10:42:b9:ad:55:fc:72:13:56:a6:90:af:
5e:b3:d0:5e:fd:d0:af:fa:4d:ab:42:35:eb:fb:d4:96:7f:20:
47:b6:fa:99:ac:62:af:66:64:ad:e7:59:25:c6:a2:2d:da:88:
30:24:06:52:04:74:1c:99:7e:af:4d:bb:83:fc:98:76:8b:e8:
f5:2e:86:48:c3:bf:53:0e:ed:e4:06:33:48:fb:16:8f:99:03:
33:5d:2c:cc:7e:e9:c4:57:a1:98:92:bc:80:4c:4d:77:be:c7:
9c:21:25:d9:33:c0:0b:b9:cf:3b:44:a2:b0:44:0d:a8:40:a2:
9e:f2:f3:9c:af:dc:79:1b:29:aa:9a:f7:a6:e6:71:f7:0b:53:
4c:d6:93:88:72:81:12:f7:d2:29:be:44:93:f2:b6:ce:09:84:
89:1a:ff:88:a7:b2:07:ad:e0:4a:3c:45:f8:5f:a1:b5:c6:5c:
cd:0d:62:47:b6:05:eb:65:79:f8:0c:0e:df:c6:ea:43:16:b0:
4d:9c:b1:f2:29:c7:ef:de:b6:c5:ff:83:0e:10:d0:db:00:db:
19:2f:f4:b8:bd:55:a4:56:4e:fb:75:44:63:38:10:71:3e:1e:
3d:d2:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org