Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/5PdEjuBYuvjnltrrZZVneHTvXm8.roa
File: 5PdEjuBYuvjnltrrZZVneHTvXm8.roa (raw, json)
Hash identifier: yRHeGGiTMWe/77q+nIZ4DFklTi3O1P/Dht/HB5OyZ0M=
Subject key identifier: E4:F7:44:8E:E0:58:BA:F8:E7:96:DA:EB:65:95:67:78:74:EF:5E:6F
Certificate issuer: /CN=0aa4667fc501352fbed17e47168c4687d775623f
Certificate serial: 01856CAF10455A95D522B13AD885E788DA66
Authority key identifier: 0A:A4:66:7F:C5:01:35:2F:BE:D1:7E:47:16:8C:46:87:D7:75:62:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqRmf8UBNS--0X5HFoxGh9d1Yj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/5PdEjuBYuvjnltrrZZVneHTvXm8.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.26.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:10:45:5a:95:d5:22:b1:3a:d8:85:e7:88:da:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa4667fc501352fbed17e47168c4687d775623f
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4f7448ee058baf8e796daeb6595677874ef5e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:2a:f1:50:1a:3f:18:7d:63:dc:aa:78:e2:
06:70:fb:2e:50:48:82:e4:1e:b0:14:cd:aa:b4:19:
f2:9d:ed:ee:b6:a3:14:95:3c:9b:7b:63:28:d6:f5:
48:17:20:84:9a:03:bc:92:71:eb:a1:a3:e3:6b:00:
fe:d5:fe:db:7c:75:53:6a:a0:bc:c1:7f:f3:47:61:
56:01:fc:0f:94:e4:cd:78:56:74:d3:06:48:35:f1:
24:92:09:09:88:82:ba:45:4f:01:cd:34:87:77:9a:
4c:74:04:16:48:c7:65:fa:bf:f6:67:5b:56:8f:7e:
a9:94:4d:81:ee:d1:79:aa:7a:b0:bb:ee:a4:c0:e3:
90:4f:f9:21:1c:8b:93:89:22:6a:42:20:69:84:ce:
7d:36:57:54:85:9a:f1:12:da:ce:59:4e:a3:b4:71:
62:d1:84:a8:2b:29:90:3b:f7:c4:bd:12:63:e1:32:
99:37:9c:e8:e8:3f:e8:00:95:bd:84:85:89:6b:25:
b5:d5:65:a9:57:fc:80:07:6c:fd:f5:87:e8:93:25:
91:91:4f:72:aa:0d:a1:90:52:67:71:dc:c4:06:ab:
84:33:f6:25:3d:bc:7a:3b:9b:76:53:71:45:71:ca:
cd:5a:7c:61:8b:4e:ea:ad:97:e2:d7:a9:be:62:d9:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:44:8E:E0:58:BA:F8:E7:96:DA:EB:65:95:67:78:74:EF:5E:6F
X509v3 Authority Key Identifier:
keyid:0A:A4:66:7F:C5:01:35:2F:BE:D1:7E:47:16:8C:46:87:D7:75:62:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqRmf8UBNS--0X5HFoxGh9d1Yj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/5PdEjuBYuvjnltrrZZVneHTvXm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/CqRmf8UBNS--0X5HFoxGh9d1Yj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:59:cf:41:40:e6:1a:24:cf:df:43:2b:99:05:96:05:bf:9b:
53:9e:a5:56:af:26:d2:97:b2:11:04:af:90:17:a7:d2:87:8a:
a4:fc:a9:5c:30:69:65:f5:83:c1:28:8f:ec:fa:6b:71:61:8e:
ea:bd:f0:ef:53:b7:5f:39:35:d6:81:1d:15:bf:10:87:de:a4:
69:b6:75:42:e0:0e:23:c0:28:e3:e3:1f:6c:e9:fe:e7:41:e1:
56:75:4e:ea:92:78:b6:11:a2:36:a8:54:ed:a9:f2:fb:70:67:
42:a9:13:68:64:05:32:2a:a3:ed:75:30:12:ff:24:24:78:c1:
8c:0c:d8:12:cd:66:7f:80:b1:9f:ce:e8:21:fe:5c:00:bf:1b:
f1:17:97:62:87:c1:b5:2b:fe:f7:d6:cb:9d:04:f0:22:00:89:
74:8e:22:c9:c3:a3:22:fa:fa:68:23:3a:8e:5d:70:1a:70:8f:
91:93:6c:a3:f1:25:40:d6:b1:8e:0e:e4:04:31:25:c7:6f:8c:
44:08:bb:4b:07:9b:b3:71:02:23:06:9e:df:57:20:0f:9c:b8:
3e:78:9a:d4:0c:0f:7d:f2:fe:38:bc:08:c6:f3:db:3b:37:d8:
c5:0d:cc:37:81:86:25:c9:32:35:9b:1b:da:e1:e2:17:a3:27:
22:37:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:27 2024 by rpki-client on console-ams.rpki-client.org