Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/1BAZD8d7MXHqZRTUncRjhWfsmEE.roa
File: 1BAZD8d7MXHqZRTUncRjhWfsmEE.roa (raw, json)
Hash identifier: 4H8tcAvNDVehe024Lc/8wcUkjiN9L+nDgnjkA4amoIg=
Subject key identifier: D4:10:19:0F:C7:7B:31:71:EA:65:14:D4:9D:C4:63:85:67:EC:98:41
Certificate issuer: /CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Certificate serial: 0136CAA2
Authority key identifier: 07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/1BAZD8d7MXHqZRTUncRjhWfsmEE.roa
Signing time: Wed 02 Feb 2022 18:34:26 +0000
ROA not before: Wed 02 Feb 2022 18:34:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.26.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20368034 (0x136caa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Validity
Not Before: Feb 2 18:34:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d410190fc77b3171ea6514d49dc4638567ec9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:57:2f:00:b4:c6:1f:25:0c:19:a9:d0:00:
01:52:01:7b:ff:ad:4c:1d:bc:64:62:76:1e:14:84:
80:20:70:e5:8e:1a:fc:36:35:07:d6:a2:6b:37:9b:
29:b5:4a:e4:60:41:eb:35:0e:49:67:62:10:36:99:
7b:ef:2a:ad:22:a9:10:45:07:e7:2d:7a:22:6a:d9:
bf:7d:a2:84:29:58:cf:04:5b:c3:94:bf:99:a2:c1:
86:5c:0e:38:36:c5:c4:c9:f4:15:b2:cd:83:f6:cd:
3c:93:db:5e:de:d0:8c:64:21:dd:19:4f:af:2c:55:
4e:23:d0:41:c3:e0:5c:83:12:bd:c6:4d:4b:ea:26:
77:21:52:e5:31:e6:0a:c0:3e:39:02:bf:20:fb:44:
db:55:40:4d:52:21:a5:8c:32:87:98:71:2f:ec:91:
86:e9:ff:bf:df:59:6f:5a:51:c5:21:13:ef:cf:6c:
6f:4b:72:d9:92:ea:5f:f9:5f:cb:d3:c7:d0:6f:5b:
d8:11:92:82:7c:a7:77:36:a0:ee:76:d0:3c:62:20:
90:be:b5:23:07:9a:c4:09:e8:8f:93:36:24:95:97:
03:24:6c:b9:33:2a:8d:82:98:89:33:fe:98:54:7d:
6d:44:7b:fb:e8:33:3a:ed:6b:30:bf:d9:7c:8c:cc:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:19:0F:C7:7B:31:71:EA:65:14:D4:9D:C4:63:85:67:EC:98:41
X509v3 Authority Key Identifier:
keyid:07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/1BAZD8d7MXHqZRTUncRjhWfsmEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/B59bfv7VHdZQu-c-0rBAorNAlX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.235.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b3:90:f4:92:3c:b7:0e:36:06:36:ee:ea:0e:1c:cd:c3:ef:
29:62:e9:fe:38:66:13:f1:51:52:d3:8b:d2:90:d6:d8:e3:aa:
9a:ca:11:f2:71:6e:01:0b:46:0d:eb:da:9e:c3:f2:65:9d:e3:
fd:7c:1a:94:11:08:e6:20:3a:e2:c3:fd:ad:f8:ca:78:43:c7:
7e:4a:4c:41:fd:1b:c3:40:f6:70:c2:37:b2:15:55:f0:84:41:
23:f2:d7:84:d3:16:c9:45:4f:4a:91:7b:0c:3b:2e:21:1e:f6:
6e:cd:61:f1:d5:71:31:cb:c7:c8:66:20:db:90:1b:98:af:ea:
4c:00:60:db:d7:5c:0b:a8:f4:ef:b0:11:b8:2a:66:04:77:3f:
11:ac:8f:6f:40:80:c2:41:52:7b:f0:32:f2:bd:59:e5:f1:63:
ac:d7:ea:68:1c:d4:0e:32:d2:e1:ce:bc:47:9e:6e:cf:50:06:
6b:c0:f5:8d:0a:33:a2:51:76:bf:e3:1b:0b:79:35:b2:e9:d8:
3c:2c:b3:c3:1b:52:fa:58:c0:f9:71:ff:a8:c3:d4:0e:34:5c:
64:4c:8d:29:6f:43:f7:60:ae:7a:ee:fe:e7:9e:5d:f9:40:ee:
c3:49:cf:5d:6f:ce:f2:99:49:85:66:8f:cd:49:3a:d5:a0:a1:
7f:e0:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:03 2024 by rpki-client on console-ams.rpki-client.org