Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/dGc4lWsqp7gZSYN4rVRWTmFSat8.roa
File: dGc4lWsqp7gZSYN4rVRWTmFSat8.roa (raw, json)
Hash identifier: niVPYNmUinbUXrR+Vx/cRX2jSGuJl2bHVnZlPEiTqtI=
Subject key identifier: 74:67:38:95:6B:2A:A7:B8:19:49:83:78:AD:54:56:4E:61:52:6A:DF
Certificate issuer: /CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Certificate serial: 01857230E4332DD2CF331FFBC9B5EA4D758D
Authority key identifier: 07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/dGc4lWsqp7gZSYN4rVRWTmFSat8.roa
Signing time: Mon 02 Jan 2023 11:14:44 +0000
ROA not before: Mon 02 Jan 2023 11:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.26.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:e4:33:2d:d2:cf:33:1f:fb:c9:b5:ea:4d:75:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Validity
Not Before: Jan 2 11:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=746738956b2aa7b819498378ad54564e61526adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:b0:fc:8a:e1:79:89:e6:9a:75:c6:3b:99:
b2:c9:e3:76:2b:62:ae:47:b9:57:13:ba:bf:eb:25:
ca:24:68:b5:c3:ed:54:6b:7b:2e:0b:b0:f3:1d:88:
65:5f:3e:0d:c3:54:03:68:b2:04:13:de:42:9d:ab:
0c:42:87:91:17:83:5e:7f:ec:57:ef:89:4c:00:19:
19:5c:5c:d3:a8:8e:47:4d:40:da:c9:7f:12:a0:1a:
fb:b8:90:84:a6:4e:7b:d4:30:b8:8a:87:3d:c2:50:
b2:eb:d9:26:4b:ca:6f:33:0e:b6:36:a4:bc:12:9b:
1e:40:ec:04:29:09:87:c1:c4:01:83:66:43:30:8c:
3a:ff:4d:c1:ee:41:2b:b5:56:a8:f9:c8:09:32:db:
26:18:d4:4f:e1:0c:e2:33:2e:64:23:59:40:cb:46:
11:55:a3:b5:43:7d:95:9f:cb:86:45:ee:c9:7d:9f:
46:16:70:41:ed:fa:30:95:68:f9:0b:d0:e2:ad:fd:
c6:e8:0f:65:cc:78:42:2e:20:41:8b:21:c8:2b:c4:
89:18:df:08:59:36:48:f3:99:2a:f2:19:b4:4e:7b:
33:78:49:1a:f9:86:78:08:96:d6:f0:52:c5:af:b7:
df:84:b5:aa:15:2c:7b:c7:d2:a9:73:bd:75:58:31:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:38:95:6B:2A:A7:B8:19:49:83:78:AD:54:56:4E:61:52:6A:DF
X509v3 Authority Key Identifier:
keyid:07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/dGc4lWsqp7gZSYN4rVRWTmFSat8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/B59bfv7VHdZQu-c-0rBAorNAlX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.235.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b4:25:72:87:f6:7a:3e:d2:7c:23:42:38:0c:dd:25:3f:10:
60:5f:fa:9a:6c:c1:01:65:5a:1f:44:5a:9d:40:f5:ff:07:9b:
d9:6b:fb:81:8e:99:34:85:85:51:43:01:72:f5:fa:a7:87:80:
85:85:be:1b:4b:b4:66:71:a9:f6:0b:2a:91:db:4d:24:f5:fa:
76:61:4c:fa:02:7b:9d:d2:15:04:b3:87:f0:e0:9c:2e:b4:c3:
8c:75:bc:36:10:91:e6:b0:d5:ee:a6:3b:2c:a4:3e:75:68:e6:
80:7a:46:49:a8:e7:98:d3:87:c7:dd:dc:30:a7:e0:6b:4d:b2:
9d:4f:cb:06:ff:8f:f7:b9:5a:b2:2f:78:3c:be:cc:9c:09:ff:
64:cd:d5:a6:76:97:4b:de:8a:6f:bd:22:38:12:63:2b:04:a8:
5e:39:f8:89:88:16:1f:20:58:5c:8d:85:da:0e:22:33:e0:61:
ff:47:5b:51:8e:08:15:15:63:c9:4e:ae:7a:3a:06:13:a1:00:
ac:4f:08:7f:f7:2f:a8:3a:39:67:34:d7:d8:c7:63:b2:c4:d5:
81:6f:e6:93:9d:b7:66:a7:5f:9e:f4:72:ac:65:83:1c:bb:29:
e4:e1:23:83:20:29:6f:ae:17:4f:09:58:98:e7:af:dd:a9:be:
5b:55:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:03 2024 by rpki-client on console-ams.rpki-client.org