Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/oESCFP7GtzqAoAugcjPeovXPW4o.roa
File: oESCFP7GtzqAoAugcjPeovXPW4o.roa (raw, json)
Hash identifier: mEs5ji20P3HJ5AjQw+ODPnLr0mywuyGpsRgC7f6SVfg=
Subject key identifier: A0:44:82:14:FE:C6:B7:3A:80:A0:0B:A0:72:33:DE:A2:F5:CF:5B:8A
Certificate issuer: /CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Certificate serial: 018462CC8AB2AB03B312E035EA2E43454A9F
Authority key identifier: 07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/oESCFP7GtzqAoAugcjPeovXPW4o.roa
Signing time: Thu 10 Nov 2022 18:28:02 +0000
ROA not before: Thu 10 Nov 2022 18:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 194.26.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:cc:8a:b2:ab:03:b3:12:e0:35:ea:2e:43:45:4a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Validity
Not Before: Nov 10 18:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0448214fec6b73a80a00ba07233dea2f5cf5b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:6f:00:5d:57:0f:8e:04:8a:7f:e4:e2:cc:
96:00:4b:16:e5:c0:3b:6d:ae:f0:e8:33:7f:5a:3b:
a4:e0:28:33:dc:86:f3:91:a2:53:13:be:62:3d:50:
75:98:d6:ae:4d:0c:3a:ca:6d:22:22:ba:0f:5b:6b:
3a:bf:cf:ec:5f:71:44:9c:03:fc:2a:2c:49:b0:98:
ec:84:60:a6:d0:78:ac:0c:0d:a3:bd:1c:c2:0d:72:
cf:1d:2f:07:59:23:03:a1:36:d9:d0:4e:23:3e:1f:
1e:3f:a6:de:0f:e3:0d:4d:85:21:e9:81:df:76:c6:
44:63:ef:34:42:03:87:90:ba:84:18:af:a9:0a:f7:
08:8f:d1:17:4c:21:fb:b2:dd:d9:36:76:bd:16:ff:
77:fd:ee:7b:e3:46:59:6e:2a:e8:22:70:c6:4e:31:
30:77:bf:3f:cc:61:c0:9f:69:33:ff:cf:18:48:9f:
70:77:45:f4:f8:71:6b:54:39:53:d7:c3:70:3d:52:
2d:c0:af:48:6f:12:fe:b0:b1:c3:f5:fb:49:6a:b0:
01:f8:b8:84:40:ac:e1:5f:a4:8d:4e:ca:92:3a:3b:
13:78:06:81:41:a2:b6:1e:bf:aa:8c:7e:94:9f:a9:
44:82:f4:39:f5:f1:8b:88:d5:78:33:18:7d:d7:d4:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:82:14:FE:C6:B7:3A:80:A0:0B:A0:72:33:DE:A2:F5:CF:5B:8A
X509v3 Authority Key Identifier:
keyid:07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/oESCFP7GtzqAoAugcjPeovXPW4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/B59bfv7VHdZQu-c-0rBAorNAlX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.235.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f9:9e:4e:44:be:35:39:89:76:eb:6e:38:b0:e0:2f:5f:d8:
48:44:a9:76:5a:d8:b8:9b:f7:90:f8:60:84:85:b4:4e:b2:df:
53:94:45:84:27:76:4f:0e:33:68:fd:03:90:1b:9e:3e:e1:61:
55:00:51:88:25:2e:34:2f:96:f7:b4:df:9f:e9:11:1e:80:65:
a8:b2:81:14:a2:8e:6b:a4:4a:8a:07:37:cb:2a:97:a1:77:d5:
79:86:5f:8f:19:1f:45:a6:d5:99:55:7a:25:65:de:2e:51:e4:
74:a0:d6:38:ab:68:2e:1b:0b:f5:bd:a0:03:80:01:1b:7f:aa:
dc:10:ba:cf:58:56:0e:b8:2b:03:7f:09:4c:9b:1e:6f:43:87:
d8:52:a7:5d:f5:56:bc:da:6e:3f:45:38:fe:ce:f3:4b:0e:4f:
6b:ca:a8:53:47:33:c3:97:72:19:96:50:1b:a7:88:cf:5b:93:
8b:6b:1f:87:d1:fb:8b:e2:94:10:79:d2:72:a9:01:98:c5:dc:
f0:d6:08:aa:23:7b:23:36:09:d5:b9:06:be:43:d2:19:fd:52:
8d:79:5f:88:e4:55:d4:4d:c2:f4:3a:ab:b2:8d:72:59:3a:3f:
49:27:2f:d5:bf:0b:d1:d4:f9:2f:36:5a:dd:17:ac:e9:77:92:
a1:67:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org