Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/up-d5Ftv0DarKnbt4_HxwyDP7GI.roa
File: up-d5Ftv0DarKnbt4_HxwyDP7GI.roa (raw, json)
Hash identifier: uz175ShziA/gAjYcWXr/a3B+cO8nBWMAgN7ahEstSns=
Subject key identifier: BA:9F:9D:E4:5B:6F:D0:36:AB:2A:76:ED:E3:F1:F1:C3:20:CF:EC:62
Certificate issuer: /CN=7cb4f59b34fe5988cfe8bc3db710a0a05fbef4a9
Certificate serial: DAF041
Authority key identifier: 7C:B4:F5:9B:34:FE:59:88:CF:E8:BC:3D:B7:10:A0:A0:5F:BE:F4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLT1mzT-WYjP6Lw9txCgoF--9Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/up-d5Ftv0DarKnbt4_HxwyDP7GI.roa
Signing time: Sat 01 Jan 2022 07:02:56 +0000
ROA not before: Sat 01 Jan 2022 07:02:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 194.26.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14348353 (0xdaf041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb4f59b34fe5988cfe8bc3db710a0a05fbef4a9
Validity
Not Before: Jan 1 07:02:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba9f9de45b6fd036ab2a76ede3f1f1c320cfec62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:91:3a:2e:c1:49:04:e1:0a:f1:de:04:47:
b9:25:37:15:03:fe:ba:a1:2d:56:79:f7:34:29:e4:
40:c7:8b:f3:63:61:92:41:a9:27:11:bc:2e:45:47:
55:a1:0b:e2:da:62:96:b3:05:2e:56:ea:f9:eb:78:
f7:e7:9e:da:49:b6:41:c4:a8:ac:da:5b:2d:a6:5f:
ec:07:39:c3:cf:49:bc:c2:00:3e:31:e9:df:4a:82:
6a:fc:9d:43:74:75:df:eb:45:5c:ba:c3:cd:16:7b:
1a:33:a7:8e:ae:c7:95:31:fd:79:0c:da:96:f0:84:
16:11:d9:eb:b6:45:5a:16:ca:34:92:9d:f5:61:8d:
41:93:d7:74:1f:98:40:3d:27:55:a5:72:8d:31:69:
2e:2b:dd:7a:fc:bb:58:3d:55:ea:19:21:22:9d:f7:
2c:be:9a:d3:8f:63:bb:32:c6:15:aa:86:f3:7f:5d:
96:70:34:1d:0d:6b:8f:8c:90:71:a4:12:25:23:bf:
af:c5:1d:15:51:c0:e9:d1:0a:f9:eb:c0:0f:5a:2f:
dd:3e:bc:ed:cd:d5:9a:c4:44:b5:62:85:5b:74:51:
63:fe:0a:1b:7d:2a:45:eb:d5:2b:fd:3c:4a:65:a1:
fe:88:85:d0:41:6a:07:69:7b:3a:07:d8:85:56:f6:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:9D:E4:5B:6F:D0:36:AB:2A:76:ED:E3:F1:F1:C3:20:CF:EC:62
X509v3 Authority Key Identifier:
keyid:7C:B4:F5:9B:34:FE:59:88:CF:E8:BC:3D:B7:10:A0:A0:5F:BE:F4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLT1mzT-WYjP6Lw9txCgoF--9Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/up-d5Ftv0DarKnbt4_HxwyDP7GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0c91f8-ebaa-46d9-a32d-655c22684b2f/1/fLT1mzT-WYjP6Lw9txCgoF--9Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.231.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:e3:41:eb:13:67:70:29:d6:15:85:1e:22:19:c8:f9:87:1b:
a5:65:29:69:15:22:e4:d8:6b:f4:db:dc:61:59:a3:d9:85:0e:
a6:0b:47:32:fd:04:a6:9d:2a:96:f5:3c:e9:a3:a1:63:49:c3:
f5:c0:e2:e0:55:e7:20:56:1e:2d:68:5d:ed:50:2d:ae:74:0d:
c4:d8:04:cd:cc:20:02:c3:90:2b:8a:56:31:ff:98:5a:53:70:
c4:94:d5:fd:65:83:83:61:4e:b9:6c:79:fd:e2:e3:20:9c:81:
30:c9:ed:2c:62:a0:01:cd:73:d9:2d:1c:fe:86:ac:ae:41:b7:
d8:36:4d:0c:bd:84:61:d8:32:0f:cb:41:40:74:49:38:0b:60:
05:ea:b5:c2:5b:58:f1:48:54:bc:d8:ac:d7:22:c7:57:52:e3:
cb:df:30:c4:40:6a:9a:93:ac:75:a2:7a:ab:7c:af:77:b9:f0:
5e:b1:28:9c:22:81:e6:71:00:82:4f:fd:f9:5f:eb:4c:ab:46:
c4:77:97:5c:ba:21:56:f2:ec:3b:42:ce:85:8d:92:49:b9:17:
e0:ef:34:bb:24:14:12:3c:3e:7c:51:bf:81:29:e8:7f:b8:61:
ee:a6:4c:be:f8:53:e3:55:33:b3:5d:e6:57:b6:a1:70:e4:14:
13:63:42:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANrwQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Y2I0ZjU5YjM0ZmU1OTg4Y2ZlOGJjM2RiNzEwYTBhMDVmYmVmNGE5MB4XDTIyMDEw
MTA3MDI1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmE5ZjlkZTQ1YjZm
ZDAzNmFiMmE3NmVkZTNmMWYxYzMyMGNmZWM2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcQkTouwUkE4Qrx3gRHuSU3FQP+uqEtVnn3NCnkQMeL82Nh
kkGpJxG8LkVHVaEL4tpilrMFLlbq+et49+ee2km2QcSorNpbLaZf7Ac5w89JvMIA
PjHp30qCavydQ3R13+tFXLrDzRZ7GjOnjq7HlTH9eQzalvCEFhHZ67ZFWhbKNJKd
9WGNQZPXdB+YQD0nVaVyjTFpLivdevy7WD1V6hkhIp33LL6a049juzLGFaqG839d
lnA0HQ1rj4yQcaQSJSO/r8UdFVHA6dEK+evAD1ov3T687c3VmsREtWKFW3RRY/4K
G30qRevVK/08SmWh/oiF0EFqB2l7OgfYhVb2baMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS6n53kW2/QNqsqdu3j8fHDIM/sYjAfBgNVHSMEGDAWgBR8tPWbNP5ZiM/o
vD23EKCgX770qTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZMVDFtelQtV1lqUDZMdzl0eENnb0YtLTlLay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvMGM5MWY4LWViYWEtNDZkOS1hMzJkLTY1NWMyMjY4NGIyZi8x
L3VwLWQ1RnR2MERhcktuYnQ0X0h4d3lEUDdHSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
MGM5MWY4LWViYWEtNDZkOS1hMzJkLTY1NWMyMjY4NGIyZi8xL2ZMVDFtelQtV1lq
UDZMdzl0eENnb0YtLTlLay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIa5zANBgkqhkiG9w0BAQsFAAOC
AQEA1ONB6xNncCnWFYUeIhnI+YcbpWUpaRUi5Nhr9NvcYVmj2YUOpgtHMv0Epp0q
lvU86aOhY0nD9cDi4FXnIFYeLWhd7VAtrnQNxNgEzcwgAsOQK4pWMf+YWlNwxJTV
/WWDg2FOuWx5/eLjIJyBMMntLGKgAc1z2S0c/oasrkG32DZNDL2EYdgyD8tBQHRJ
OAtgBeq1wltY8UhUvNis1yLHV1Ljy98wxEBqmpOsdaJ6q3yvd7nwXrEonCKB5nEA
gk/9+V/rTKtGxHeXXLohVvLsO0LOhY2SSbkX4O80uyQUEjw+fFG/gSnof7hh7qZM
vvhT41Uzs13mV7ahcOQUE2NCgw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:04 2024 by rpki-client on console-fra.rpki-client.org