Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/8U57jlEVwxYc_xQ6lgsRAOuuzdc.roa
File: 8U57jlEVwxYc_xQ6lgsRAOuuzdc.roa (raw, json)
Hash identifier: nVuNMB5Ncrfq6CXZqq89YwGtpha5pCSpAcYlAQ4Rh4I=
Subject key identifier: F1:4E:7B:8E:51:15:C3:16:1C:FF:14:3A:96:0B:11:00:EB:AE:CD:D7
Certificate issuer: /CN=ae17695dca8f28d07b08ebf5c5589f8129e5ca94
Certificate serial: 018CC7277300C61C6E13688CC6D901056054
Authority key identifier: AE:17:69:5D:CA:8F:28:D0:7B:08:EB:F5:C5:58:9F:81:29:E5:CA:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhdpXcqPKNB7COv1xVifgSnlypQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/8U57jlEVwxYc_xQ6lgsRAOuuzdc.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 194.29.74.0/23 maxlen: 24
194.26.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:73:00:c6:1c:6e:13:68:8c:c6:d9:01:05:60:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17695dca8f28d07b08ebf5c5589f8129e5ca94
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f14e7b8e5115c3161cff143a960b1100ebaecdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c8:34:e7:f4:e5:51:62:ad:af:8a:70:ef:c7:
b5:fb:47:86:dd:c1:6d:f5:1b:4a:67:7f:95:98:1c:
b2:34:51:60:1a:43:6e:c5:8a:88:ba:52:73:34:67:
c6:d2:4c:a0:35:86:25:5d:2a:8a:84:43:b9:f1:47:
3b:7f:da:42:71:5a:85:2c:45:c3:60:9b:98:c8:d5:
a3:91:06:1a:ba:17:ed:19:e2:16:2f:dc:bb:a3:92:
29:70:83:62:18:08:c0:2b:9c:58:47:ca:1b:fb:cc:
5e:c1:95:1d:55:a9:2c:fe:83:86:1c:18:29:67:6b:
75:7d:ff:2c:b8:ad:fe:ca:40:d9:4c:57:08:e4:eb:
6e:04:c9:30:6a:7c:f0:1c:9d:e6:9e:a8:fc:da:19:
b2:aa:9c:5a:8f:1a:9f:ae:d4:6d:70:ec:27:04:80:
e2:7a:66:75:90:c6:1a:c0:3a:0b:1f:4d:4e:4a:b9:
87:00:34:de:89:44:24:25:d0:f7:f8:da:7c:5a:69:
30:d8:54:d3:b0:ee:34:2a:18:f2:16:f2:ea:e2:c9:
e2:5e:8c:63:5b:5f:d0:af:f7:a1:2f:71:d7:b5:ef:
40:68:68:14:40:4f:09:08:7b:97:c1:46:6a:44:50:
5a:78:57:40:0e:7e:36:a4:11:8d:d3:55:83:07:52:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4E:7B:8E:51:15:C3:16:1C:FF:14:3A:96:0B:11:00:EB:AE:CD:D7
X509v3 Authority Key Identifier:
keyid:AE:17:69:5D:CA:8F:28:D0:7B:08:EB:F5:C5:58:9F:81:29:E5:CA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhdpXcqPKNB7COv1xVifgSnlypQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/8U57jlEVwxYc_xQ6lgsRAOuuzdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rhdpXcqPKNB7COv1xVifgSnlypQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.150.0/23
194.29.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:1c:79:13:27:67:ef:44:51:38:f0:49:2d:c4:b1:f8:91:35:
89:87:e5:4d:be:11:66:55:37:fa:1c:f5:99:38:5a:4f:7b:16:
83:91:13:ee:3b:a7:d0:24:4b:ee:ae:0a:83:93:ab:db:69:c1:
81:17:b5:19:42:aa:3b:ae:0e:20:5f:60:b4:2e:81:88:53:a4:
28:1d:1d:c5:47:dd:c0:b5:e2:21:99:20:ca:5c:cc:bf:9d:f4:
bc:5a:ec:db:68:4d:ce:1a:b1:3c:0e:9e:79:e9:0f:7b:2f:83:
d4:53:2e:ab:74:d6:21:0e:d9:f8:e7:1e:0d:40:3e:73:75:3b:
28:d5:cd:06:51:e0:b9:3f:bd:bb:75:a9:7c:36:79:fa:96:36:
c4:cd:b9:25:b9:fc:ca:40:1a:c4:2b:e2:d6:0f:08:70:bf:1c:
18:18:1a:f6:ef:63:ad:eb:20:ba:f2:6a:19:18:02:fb:d6:d1:
bd:eb:f6:ec:fc:61:3d:38:59:1f:44:2b:a9:45:e4:bd:68:b1:
22:50:58:6b:5d:27:44:42:18:48:7b:64:24:5f:96:c4:4d:f2:
35:87:28:76:30:c3:76:79:94:26:bb:9b:0f:4b:b8:d4:04:58:
12:12:0b:54:3f:4b:d4:8f:e0:89:a4:ce:a3:a8:3c:83:dd:95:
6b:66:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 17:21:26 2024 by rpki-client on console-ams.rpki-client.org