Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/Kg3qrV7-O5U-cxbKFSWW6Bivh2o.roa
File: Kg3qrV7-O5U-cxbKFSWW6Bivh2o.roa (raw, json)
Hash identifier: 3JcaNRK3eLRLAnnFk1jvY/n2ILzY1Qv9vGnDgEluplg=
Subject key identifier: 2A:0D:EA:AD:5E:FE:3B:95:3E:73:16:CA:15:25:96:E8:18:AF:87:6A
Certificate issuer: /CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Certificate serial: E5D240
Authority key identifier: 07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/Kg3qrV7-O5U-cxbKFSWW6Bivh2o.roa
Signing time: Sat 01 Jan 2022 06:56:08 +0000
ROA not before: Sat 01 Jan 2022 06:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.26.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15061568 (0xe5d240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Validity
Not Before: Jan 1 06:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a0deaad5efe3b953e7316ca152596e818af876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:6c:ab:63:7f:1d:b2:eb:43:04:2b:2b:5e:
7a:a1:0c:61:1a:4b:8d:f2:74:48:85:09:0d:e6:07:
85:cc:20:fe:3d:21:f3:ba:a1:7f:cb:95:6f:ea:33:
fd:5b:74:0d:84:e7:4a:41:ad:26:8a:ec:c4:5a:05:
f5:0a:03:5d:23:50:e4:af:5e:75:37:b1:4e:d0:7e:
91:97:63:2f:f8:77:15:b4:38:b6:f8:7e:5e:ac:53:
f9:3f:ab:b6:0b:7d:a9:07:d0:79:ed:38:b5:4e:89:
13:22:42:15:45:74:2a:1c:51:61:61:e8:3a:e7:4f:
b1:98:d6:f0:1e:0a:b5:92:8c:ce:7d:e5:40:0e:83:
af:a6:00:79:81:d7:d3:f9:a5:5d:b4:98:d8:59:d6:
1c:6e:bc:30:9b:c3:af:ab:27:74:42:97:3f:7f:08:
1c:14:5d:bf:20:49:8a:74:7f:d3:1d:70:19:ce:43:
ff:19:06:d6:e5:83:d1:8e:6e:6b:45:74:9c:31:de:
55:87:4e:d0:5a:63:6c:03:f8:98:dc:17:bd:1a:b6:
5b:e0:60:f1:71:2a:48:79:13:0e:08:6c:7c:94:0e:
52:fb:0f:e6:27:45:f5:c1:16:65:1a:6b:43:3e:8e:
6d:79:99:08:7a:26:42:a7:ce:0b:4a:ff:4f:ca:ef:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0D:EA:AD:5E:FE:3B:95:3E:73:16:CA:15:25:96:E8:18:AF:87:6A
X509v3 Authority Key Identifier:
keyid:07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/Kg3qrV7-O5U-cxbKFSWW6Bivh2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/B59bfv7VHdZQu-c-0rBAorNAlX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:64:5a:ba:b4:3e:83:4e:f1:43:58:fd:a8:0c:fc:2d:a9:70:
c1:c3:4e:8e:78:63:3e:b6:01:b1:bc:d9:ff:ea:3b:b9:0c:73:
2a:4a:5a:ae:b6:99:d8:00:ba:00:62:6d:05:22:6b:16:46:fa:
47:99:43:35:18:b1:01:07:63:43:42:1e:70:5e:8d:07:69:dd:
6c:e0:0e:c9:0b:a8:25:81:3b:21:0c:06:45:43:0c:2e:69:c9:
d7:de:c8:be:34:20:fb:45:9b:1c:a7:a2:7c:0f:b8:bc:50:0d:
a8:d7:28:88:75:34:95:68:44:ba:72:30:34:8c:ec:c5:52:24:
fc:87:b9:e1:d8:86:83:3a:e1:91:60:f3:33:78:22:f8:1a:fb:
5b:a1:8c:f9:fc:1a:c1:d2:a3:8d:26:f0:cd:95:bf:fd:b4:0f:
fd:cd:d9:f3:53:37:8a:35:15:fd:60:6f:10:37:0d:48:7f:5d:
f1:00:8d:ff:77:7d:7f:2c:f9:77:a4:d6:c4:1e:a4:f9:93:6b:
e0:13:a6:cd:07:3d:66:e2:ae:f9:af:2f:b2:ec:50:28:e2:d1:
07:06:67:af:37:e5:0e:00:5f:c1:ee:a8:16:79:7c:12:93:0d:
15:b6:ca:2a:22:0a:82:f2:38:46:f7:df:4d:ce:06:ac:24:94:
80:f9:78:af
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOXSQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzlmNWI3ZWZlZDUxZGQ2NTBiYmU3M2VkMmIwNDBhMmIzNDA5NTdmMB4XDTIyMDEw
MTA2NTYwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmEwZGVhYWQ1ZWZl
M2I5NTNlNzMxNmNhMTUyNTk2ZTgxOGFmODc2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJJZbKtjfx2y60MEKyteeqEMYRpLjfJ0SIUJDeYHhcwg/j0h
87qhf8uVb+oz/Vt0DYTnSkGtJorsxFoF9QoDXSNQ5K9edTexTtB+kZdjL/h3FbQ4
tvh+XqxT+T+rtgt9qQfQee04tU6JEyJCFUV0KhxRYWHoOudPsZjW8B4KtZKMzn3l
QA6Dr6YAeYHX0/mlXbSY2FnWHG68MJvDr6sndEKXP38IHBRdvyBJinR/0x1wGc5D
/xkG1uWD0Y5ua0V0nDHeVYdO0FpjbAP4mNwXvRq2W+Bg8XEqSHkTDghsfJQOUvsP
5idF9cEWZRprQz6ObXmZCHomQqfOC0r/T8rvw0cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQqDeqtXv47lT5zFsoVJZboGK+HajAfBgNVHSMEGDAWgBQHn1t+/tUd1lC7
5z7SsECis0CVfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0I1OWJmdjdWSGRaUXUtYy0wckJBb3JOQWxYOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvM2E1Zjk3LWUyM2QtNDY2Ny1hYTNhLTRjY2E5MmFhOTU2OS8x
L0tnM3FyVjctTzVVLWN4YktGU1dXNkJpdmgyby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
M2E1Zjk3LWUyM2QtNDY2Ny1hYTNhLTRjY2E5MmFhOTU2OS8xL0I1OWJmdjdWSGRa
UXUtYy0wckJBb3JOQWxYOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIa6zANBgkqhkiG9w0BAQsFAAOC
AQEAPWRaurQ+g07xQ1j9qAz8LalwwcNOjnhjPrYBsbzZ/+o7uQxzKkparraZ2AC6
AGJtBSJrFkb6R5lDNRixAQdjQ0IecF6NB2ndbOAOyQuoJYE7IQwGRUMMLmnJ197I
vjQg+0WbHKeifA+4vFANqNcoiHU0lWhEunIwNIzsxVIk/Ie54diGgzrhkWDzM3gi
+Br7W6GM+fwawdKjjSbwzZW//bQP/c3Z81M3ijUV/WBvEDcNSH9d8QCN/3d9fyz5
d6TWxB6k+ZNr4BOmzQc9ZuKu+a8vsuxQKOLRBwZnrzflDgBfwe6oFnl8EpMNFbbK
KiIKgvI4RvffTc4GrCSUgPl4rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:07 2024 by rpki-client on console-fra.rpki-client.org