Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/87B5i70p6RxsNdhliHTMAZAsaqk.roa
File: 87B5i70p6RxsNdhliHTMAZAsaqk.roa (raw, json)
Hash identifier: J9Y1RRhspozM04lpXPvFHX88IrPTwK4Ni/7tlDES/eI=
Subject key identifier: F3:B0:79:8B:BD:29:E9:1C:6C:35:D8:65:88:74:CC:01:90:2C:6A:A9
Certificate issuer: /CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
Certificate serial: 01C34973
Authority key identifier: B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/87B5i70p6RxsNdhliHTMAZAsaqk.roa
Signing time: Thu 19 May 2022 11:52:00 +0000
ROA not before: Thu 19 May 2022 11:52:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29575539 (0x1c34973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
Validity
Not Before: May 19 11:52:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3b0798bbd29e91c6c35d8658874cc01902c6aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:b9:64:dd:4b:9c:e5:0c:92:7e:fe:d3:51:
58:0d:20:66:7a:01:1a:91:0a:d3:e4:be:b3:f2:16:
10:dd:2c:0c:2b:8a:17:76:eb:a1:3c:9c:89:7c:c4:
1d:4b:aa:f0:9f:f4:5c:a3:23:4a:d8:2e:4c:49:67:
6d:da:fa:e9:7f:33:7d:9d:6e:0c:2a:7e:eb:47:fc:
18:d6:c1:44:d3:84:b6:88:dd:09:68:65:b4:18:33:
e4:7e:2a:60:cf:b4:f2:f2:44:e7:14:49:6e:b9:24:
85:49:ba:c2:6e:43:88:99:c2:ca:ad:83:56:d4:ae:
a7:36:72:ef:5e:a7:a1:78:d7:e6:95:22:b1:d4:49:
b5:62:fc:44:68:f8:d8:5e:50:e7:a3:88:b2:6b:08:
d6:a2:2c:f8:36:b2:86:39:1c:9a:11:54:3d:89:d1:
22:90:6e:77:bd:e5:84:6c:ba:17:dd:34:24:a8:75:
35:7e:33:21:d9:f4:30:e4:9a:d3:54:a1:6f:d9:1c:
cc:4a:84:05:8f:7a:02:14:fa:55:b1:b3:ef:b3:e1:
1c:50:f2:06:03:49:7a:06:44:9f:73:d8:f5:af:60:
52:90:84:b7:6d:af:ef:13:10:74:c7:f8:d9:a1:80:
dd:c7:d8:38:e5:72:f9:b2:8a:7d:0e:fe:13:ef:3a:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:79:8B:BD:29:E9:1C:6C:35:D8:65:88:74:CC:01:90:2C:6A:A9
X509v3 Authority Key Identifier:
keyid:B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/87B5i70p6RxsNdhliHTMAZAsaqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/s-_qOnL68N9DIs2quaE2153oo-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:44:da:76:91:79:1c:46:55:b3:9d:b9:ee:f3:49:bb:c7:78:
30:d0:bd:1b:33:96:09:a1:80:1e:d9:50:c3:b5:41:fd:ba:d9:
6f:65:ed:99:cb:e1:30:07:32:ac:92:f5:68:e1:d0:49:79:52:
a4:4d:eb:c5:88:57:09:56:df:fe:cc:7a:c9:bb:4a:c5:7f:7e:
79:c7:bf:08:52:b1:c4:57:e7:61:4e:ee:6a:e6:48:5c:d0:b4:
4e:51:17:15:b8:fe:42:a1:05:31:70:4e:60:59:57:a8:1e:72:
c1:ac:a4:8c:04:71:07:4d:7a:48:6e:24:1f:f8:ea:39:da:39:
c2:3e:c6:76:c8:5b:eb:7e:5b:db:62:51:bc:1a:55:ed:ed:d6:
e9:15:51:6e:53:cd:f7:bc:70:a6:fa:4c:eb:54:3c:d6:b3:22:
f0:e7:8f:99:9c:01:9e:ff:61:83:4f:f8:33:46:6d:6c:4b:72:
2b:8a:f2:35:42:ce:aa:2d:fb:7d:86:98:ac:24:5a:09:aa:2b:
53:f9:4f:53:45:48:f6:b7:0e:d1:78:a8:b0:0b:e6:08:52:40:
3e:f7:f9:3f:63:1d:74:7b:47:fc:98:09:da:b0:ad:f5:ff:ff:
d2:17:dd:e8:f6:e4:39:67:e2:99:0c:6f:af:9a:7f:cf:f4:ce:
be:f0:75:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAcNJczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
M2VmZWEzYTcyZmFmMGRmNDMyMmNkYWFiOWExMzZkNzlkZThhM2VmMB4XDTIyMDUx
OTExNTIwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjNiMDc5OGJiZDI5
ZTkxYzZjMzVkODY1ODg3NGNjMDE5MDJjNmFhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/DuWTdS5zlDJJ+/tNRWA0gZnoBGpEK0+S+s/IWEN0sDCuK
F3broTyciXzEHUuq8J/0XKMjStguTElnbdr66X8zfZ1uDCp+60f8GNbBRNOEtojd
CWhltBgz5H4qYM+08vJE5xRJbrkkhUm6wm5DiJnCyq2DVtSupzZy716noXjX5pUi
sdRJtWL8RGj42F5Q56OIsmsI1qIs+DayhjkcmhFUPYnRIpBud73lhGy6F900JKh1
NX4zIdn0MOSa01Shb9kczEqEBY96AhT6VbGz77PhHFDyBgNJegZEn3PY9a9gUpCE
t22v7xMQdMf42aGA3cfYOOVy+bKKfQ7+E+867nUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTzsHmLvSnpHGw12GWIdMwBkCxqqTAfBgNVHSMEGDAWgBSz7+o6cvrw30Mi
zaq5oTbXneij7zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3MtX3FPbkw2OE45RElzMnF1YUUyMTUzb28tOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmYvY2Q5NGYyLTNiMTktNDgyNi1hMGViLWJmZTIyMTU1M2YwNy8x
Lzg3QjVpNzBwNlJ4c05kaGxpSFRNQVpBc2Fxay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYv
Y2Q5NGYyLTNiMTktNDgyNi1hMGViLWJmZTIyMTU1M2YwNy8xL3MtX3FPbkw2OE45
RElzMnF1YUUyMTUzb28tOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIa1zANBgkqhkiG9w0BAQsFAAOC
AQEAokTadpF5HEZVs5257vNJu8d4MNC9GzOWCaGAHtlQw7VB/brZb2XtmcvhMAcy
rJL1aOHQSXlSpE3rxYhXCVbf/sx6ybtKxX9+ece/CFKxxFfnYU7uauZIXNC0TlEX
Fbj+QqEFMXBOYFlXqB5ywaykjARxB016SG4kH/jqOdo5wj7Gdshb635b22JRvBpV
7e3W6RVRblPN97xwpvpM61Q81rMi8OePmZwBnv9hg0/4M0ZtbEtyK4ryNULOqi37
fYaYrCRaCaorU/lPU0VI9rcO0XiosAvmCFJAPvf5P2MddHtH/JgJ2rCt9f//0hfd
6PbkOWfimQxvr5p/z/TOvvB1qQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:54 2024 by rpki-client on console-ams.rpki-client.org