Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/89rIzarby5hAD7eBEkrKETevDIA.roa
File: 89rIzarby5hAD7eBEkrKETevDIA.roa (raw, json)
Hash identifier: ToODIL0I0AX2hC21gV9ghQSnWJfhrHcsLxmEbU5Bq00=
Subject key identifier: F3:DA:C8:CD:AA:DB:CB:98:40:0F:B7:81:12:4A:CA:11:37:AF:0C:80
Certificate issuer: /CN=19fec662638dbe92e580135140a6b2f0e93677ce
Certificate serial: 018570796E1B8689DC47CB07081854A4931B
Authority key identifier: 19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/89rIzarby5hAD7eBEkrKETevDIA.roa
Signing time: Mon 02 Jan 2023 03:14:44 +0000
ROA not before: Mon 02 Jan 2023 03:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 194.26.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:6e:1b:86:89:dc:47:cb:07:08:18:54:a4:93:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fec662638dbe92e580135140a6b2f0e93677ce
Validity
Not Before: Jan 2 03:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3dac8cdaadbcb98400fb781124aca1137af0c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:d3:d7:4a:dd:a3:9f:af:1c:7e:39:04:2c:
4d:4b:43:24:c9:17:d0:9c:a0:1c:bc:55:06:6e:5b:
9b:32:43:52:b3:0a:2e:ac:ff:69:0a:41:8c:17:49:
44:4f:91:cb:c0:73:b3:b4:7c:7f:c8:db:18:d6:c3:
8c:a8:80:75:5b:87:ba:1b:5a:a5:ee:0d:43:94:bd:
b6:f4:08:9c:fe:ef:0e:5f:a2:28:13:1b:cf:28:41:
cf:f1:cb:b7:c5:1c:b1:d7:3d:bf:2f:af:4f:16:83:
75:b3:dc:bb:df:6d:61:90:c5:91:9d:98:14:7b:74:
46:eb:fb:95:da:5d:b9:6c:00:d0:76:f1:ac:62:f8:
3d:ff:43:23:ec:52:70:d6:a3:a2:ff:d2:73:b5:f7:
4b:af:58:72:0d:69:2c:a3:ce:d0:99:5c:4f:97:d1:
9a:13:eb:3e:16:2e:e8:d1:e1:d4:a2:99:3a:dc:7f:
ca:8b:3f:cd:50:d5:7a:ab:a4:c2:05:cd:6b:db:85:
e6:fa:ef:d3:28:ad:f5:ac:c0:83:7b:d7:ec:45:65:
58:6c:57:e5:1a:ef:38:5e:25:89:50:0f:ee:39:02:
26:a4:34:ec:98:bc:3f:bf:5a:3d:ff:41:71:01:aa:
ed:44:7d:2d:26:b3:6a:2b:b8:bc:86:33:45:07:82:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DA:C8:CD:AA:DB:CB:98:40:0F:B7:81:12:4A:CA:11:37:AF:0C:80
X509v3 Authority Key Identifier:
keyid:19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/89rIzarby5hAD7eBEkrKETevDIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:48:ca:da:05:b5:d2:54:06:eb:fe:be:20:17:85:20:cc:9f:
0c:70:7b:a1:ec:db:1c:28:9d:6f:6b:16:49:e7:6e:6b:22:0f:
40:ad:20:60:93:4d:e1:06:a5:cd:34:25:8a:03:37:12:10:b3:
8b:2b:ea:f5:64:38:b6:81:52:57:67:51:b9:0d:04:b1:d4:12:
8e:ae:3f:e2:e6:88:b0:24:da:f9:ad:21:40:d0:cb:94:a7:7e:
4a:34:17:52:e5:f8:f8:fb:32:57:f9:b7:ce:c5:07:fe:4b:a8:
e4:77:e0:56:48:82:d9:9f:91:80:91:da:8f:59:8b:60:2c:1d:
e1:29:26:e5:12:cf:92:26:20:6d:55:4c:76:e1:9c:6a:c6:9c:
e0:02:80:64:b4:e6:2d:72:16:d8:9b:05:b3:de:4a:42:cb:dd:
4a:07:b4:04:54:2c:e3:1f:47:98:25:e5:69:19:1e:54:70:ff:
e3:9e:e1:7e:96:44:49:80:00:c2:d5:32:d3:08:76:af:e8:54:
40:63:65:40:4d:aa:14:cd:40:82:65:88:39:8b:a8:c3:21:3b:
53:2c:9f:19:c1:e1:db:c6:fd:5e:a7:66:49:20:35:e5:ae:06:
14:dc:18:0f:e2:97:f7:db:d5:f5:55:d3:ca:dc:11:1b:36:fc:
34:1b:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:40 2024 by rpki-client on console-ams.rpki-client.org