Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/ldLW4x4cdT0U5k16SWZozT26-Vc.roa
File: ldLW4x4cdT0U5k16SWZozT26-Vc.roa (raw, json)
Hash identifier: k0Tnd7Hz2/I+mJ+pOWYxCgUxwBlo49EIMPJgIvz5Zhw=
Subject key identifier: 95:D2:D6:E3:1E:1C:75:3D:14:E6:4D:7A:49:66:68:CD:3D:BA:F9:57
Certificate issuer: /CN=7cb4f59b34fe5988cfe8bc3db710a0a05fbef4a9
Certificate serial: 01856F70032CDAF9DECC6119060AB1627E62
Authority key identifier: 7C:B4:F5:9B:34:FE:59:88:CF:E8:BC:3D:B7:10:A0:A0:5F:BE:F4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLT1mzT-WYjP6Lw9txCgoF--9Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/ldLW4x4cdT0U5k16SWZozT26-Vc.roa
Signing time: Sun 01 Jan 2023 22:24:49 +0000
ROA not before: Sun 01 Jan 2023 22:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 194.26.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:03:2c:da:f9:de:cc:61:19:06:0a:b1:62:7e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb4f59b34fe5988cfe8bc3db710a0a05fbef4a9
Validity
Not Before: Jan 1 22:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95d2d6e31e1c753d14e64d7a496668cd3dbaf957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:bb:59:9c:e1:13:ef:cc:00:63:3d:f7:19:
92:df:c8:54:0c:8b:ed:2c:a3:96:cd:28:c0:f5:20:
36:3f:ac:f9:8c:8d:57:3a:fb:a7:7a:e2:05:9d:ac:
5a:78:b3:d4:4a:3a:05:d8:01:23:5d:26:be:a0:f5:
8e:8a:ea:10:73:2b:ac:b0:c5:ec:70:78:a6:21:43:
07:90:f5:a1:e5:21:12:03:32:3b:85:54:2d:18:bb:
e8:14:ad:d8:2f:09:41:65:5d:d9:2c:82:10:fb:9f:
64:94:a9:60:d9:ac:75:25:ea:d5:c8:b8:2d:a5:6f:
e1:78:db:12:9c:c6:7d:2d:bc:56:dd:13:a6:df:2a:
6a:37:2c:22:b6:8d:58:81:38:ce:50:45:96:5b:33:
a9:d7:de:50:b6:52:59:dc:13:f2:9b:cf:f8:70:72:
85:9a:b3:af:b9:1a:25:41:73:3f:06:28:ce:9c:cb:
d4:df:79:a8:3c:67:77:ac:29:ef:a3:aa:94:1f:34:
32:92:f4:ca:fb:3e:76:b2:d7:1c:86:cc:f3:28:74:
4a:9d:35:6a:e2:af:12:3e:cf:95:9a:10:b9:83:74:
fc:cf:b9:e6:bf:27:f9:a7:54:c2:27:04:7a:51:34:
69:d0:a6:e7:4c:f0:71:4a:af:6b:ad:f4:0f:93:7b:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:D6:E3:1E:1C:75:3D:14:E6:4D:7A:49:66:68:CD:3D:BA:F9:57
X509v3 Authority Key Identifier:
keyid:7C:B4:F5:9B:34:FE:59:88:CF:E8:BC:3D:B7:10:A0:A0:5F:BE:F4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLT1mzT-WYjP6Lw9txCgoF--9Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/ldLW4x4cdT0U5k16SWZozT26-Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/fLT1mzT-WYjP6Lw9txCgoF--9Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.231.0/24
Signature Algorithm: sha256WithRSAEncryption
23:61:ae:6b:fb:10:8a:24:2b:84:b3:a8:2d:94:c1:28:f7:5d:
9a:da:1d:50:7d:a9:23:1c:a9:e0:85:4d:c2:de:b3:d9:26:d0:
12:50:c7:52:f4:93:a0:c2:8e:93:ea:ef:0e:94:b9:e6:97:c8:
f9:a0:5a:ec:50:86:34:2d:e2:40:14:63:2d:c4:30:fe:c7:85:
96:c9:5d:ee:d1:ce:94:e8:bd:f4:46:6c:27:c7:d4:4a:66:39:
65:9f:62:9d:18:b8:df:a8:b6:d1:03:df:c8:38:7b:0a:03:73:
a3:48:e5:00:ce:b8:6a:3c:60:88:b3:d0:7c:76:2c:c6:52:a4:
7e:11:b6:6f:25:f4:ae:5c:f5:19:c3:f1:40:9d:30:e8:8b:35:
62:62:0a:c6:24:92:37:6b:c7:52:21:65:f1:ce:54:6c:30:4c:
cd:38:c3:cc:ee:96:1a:22:8a:2d:ce:96:02:af:9e:b5:24:9d:
4f:dc:22:a9:93:bb:83:8b:53:0d:81:b0:54:7a:c3:d0:23:4e:
da:ac:7e:fb:11:7b:d7:df:74:22:c9:41:60:4e:34:4b:de:6c:
db:6d:c9:ac:50:b8:27:47:ee:e6:3e:a3:fa:80:e9:0d:a0:29:
cf:78:db:ff:35:c1:b7:d5:d9:aa:12:ae:2c:bc:ea:16:9a:80:
11:cd:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:04 2024 by rpki-client on console-fra.rpki-client.org