Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/g0tcl9gdnXQUN7DERhAjstNyRNY.roa
File: g0tcl9gdnXQUN7DERhAjstNyRNY.roa (raw, json)
Hash identifier: Lv3OnJr+dyvsQiuKg7te6wY0EjmtsU+1gjNxm8zzOxA=
Subject key identifier: 83:4B:5C:97:D8:1D:9D:74:14:37:B0:C4:46:10:23:B2:D3:72:44:D6
Certificate issuer: /CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
Certificate serial: 018571B0DEB117A6633CA28E43684788A585
Authority key identifier: B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/g0tcl9gdnXQUN7DERhAjstNyRNY.roa
Signing time: Mon 02 Jan 2023 08:54:54 +0000
ROA not before: Mon 02 Jan 2023 08:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:de:b1:17:a6:63:3c:a2:8e:43:68:47:88:a5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
Validity
Not Before: Jan 2 08:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=834b5c97d81d9d741437b0c4461023b2d37244d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b2:43:19:c3:33:54:68:35:b6:19:38:0e:98:
c6:2a:8d:b6:43:b2:01:15:d5:2b:e5:ec:13:ba:0a:
48:75:61:1a:c7:eb:b7:80:b0:98:68:e1:35:25:58:
69:42:1c:d9:04:3c:f4:fa:66:29:85:3a:d5:c1:97:
6c:0d:ea:b9:45:17:8b:36:fe:d0:0b:af:27:2c:65:
93:bb:89:f4:c1:4e:9f:f6:b7:41:a6:a7:49:92:1b:
3e:de:c2:ea:d6:62:bb:d0:cf:0a:70:7d:52:e1:54:
20:00:27:bb:b6:38:c0:5a:3c:3c:13:1c:e6:48:a1:
14:8c:d1:e4:b6:dd:3f:16:5e:b0:c8:91:32:b5:30:
09:0f:25:2b:aa:ac:c4:46:ee:d7:6d:c9:52:99:14:
ea:f2:2f:91:73:b7:56:76:6e:f1:26:b4:99:39:c0:
e8:d0:f8:d7:3b:19:4f:52:7d:16:df:2b:94:91:fd:
a5:43:80:1d:01:8b:fc:10:a7:2d:7f:c6:67:48:da:
83:46:26:f5:88:ae:e5:a1:13:5a:71:5c:9f:01:d8:
e8:62:56:32:8a:b5:04:9a:c2:cf:90:87:fd:f9:bf:
1c:fd:14:b5:94:3b:14:26:21:8d:3d:b8:b9:ae:08:
eb:00:31:bb:32:4c:b9:38:c9:61:dd:ff:16:18:1d:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:5C:97:D8:1D:9D:74:14:37:B0:C4:46:10:23:B2:D3:72:44:D6
X509v3 Authority Key Identifier:
keyid:B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/g0tcl9gdnXQUN7DERhAjstNyRNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/s-_qOnL68N9DIs2quaE2153oo-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f3:15:53:d2:f8:15:e3:ee:23:3c:81:84:4d:c5:ff:3f:98:
e4:49:39:97:c9:76:5a:67:72:46:d4:1f:e6:c2:f8:2c:4d:b3:
cf:79:fc:62:7d:b5:fa:10:21:af:05:05:9d:03:7a:d8:0b:c2:
b5:44:5b:4e:c5:c2:29:55:cd:62:5a:65:ea:74:17:8f:59:85:
35:07:bc:7d:3b:7e:8a:4a:5d:fb:0b:3d:ac:ce:b6:8d:b0:5a:
67:37:d0:99:78:8a:48:e8:c6:2f:54:8a:22:46:4b:de:07:05:
7d:c1:f1:83:8d:ec:c5:c5:d0:54:70:6f:3f:2f:51:5a:01:84:
19:fa:3b:2b:7b:27:b5:58:76:64:85:86:99:d1:d3:c8:95:64:
cb:19:39:de:45:b0:8d:2b:09:31:9e:cd:bf:b6:e0:e8:79:97:
40:f0:49:ea:b7:d6:75:de:11:8e:39:28:5c:85:3c:00:ba:79:
5e:ed:d8:5d:ab:6c:c1:20:f6:b0:a8:50:dd:32:ed:a3:39:e2:
9d:6e:40:09:ce:7d:5c:97:b8:63:80:54:d6:f9:b5:ea:8d:ff:
78:9a:b1:e5:e8:27:8d:69:10:d6:9b:07:2f:e0:ac:6b:5a:d1:
4a:a5:04:e4:97:d7:bf:8a:4f:cf:7c:a6:3b:cc:3c:e7:dd:c7:
83:a5:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:54 2024 by rpki-client on console-ams.rpki-client.org