Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/3yYNDtbGQGH6rWsW6ywHe_qT08E.roa
File: 3yYNDtbGQGH6rWsW6ywHe_qT08E.roa (raw, json)
Hash identifier: 3YIAgbmt0g4MqMfzt5pSsujgSYmJz7hFkcj5tadnnOo=
Subject key identifier: DF:26:0D:0E:D6:C6:40:61:FA:AD:6B:16:EB:2C:07:7B:FA:93:D3:C1
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 01856D53FDA5B2A9E19D8672995C1D314B29
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/3yYNDtbGQGH6rWsW6ywHe_qT08E.roa
Signing time: Sun 01 Jan 2023 12:34:59 +0000
ROA not before: Sun 01 Jan 2023 12:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:fd:a5:b2:a9:e1:9d:86:72:99:5c:1d:31:4b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: Jan 1 12:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df260d0ed6c64061faad6b16eb2c077bfa93d3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:0b:05:65:6e:f4:02:e6:3f:7e:69:8a:2d:
18:0d:4d:ee:2f:40:18:cf:50:c7:ef:7f:cf:aa:78:
24:27:fe:9c:13:89:1c:08:6e:de:e4:03:4e:ce:91:
f1:72:cb:76:d1:f3:3a:d3:f4:19:31:59:c1:58:ae:
9c:5b:b0:3c:d9:ec:3c:8c:1c:59:48:fe:66:90:68:
99:d7:71:77:50:a3:63:d6:93:52:cf:0e:4f:be:c7:
e0:12:51:64:f3:fa:ab:e5:d0:08:79:f0:86:cb:80:
b7:f4:96:21:48:55:54:ab:61:6a:d0:f0:85:0c:d1:
52:a7:85:f7:c7:b5:58:ee:de:69:0b:32:e2:7a:a9:
78:84:1f:50:1d:e0:78:e9:4c:2c:71:b0:08:8f:e4:
1d:d2:51:73:db:53:ec:68:b7:9c:ff:8b:4d:76:04:
64:1f:9b:f5:d8:27:0e:0f:90:81:19:e5:dd:c0:12:
ae:21:0b:6c:e4:8f:4c:a7:72:d9:48:d5:2a:a1:c2:
f5:7d:bd:03:2f:6b:9f:fb:00:05:f0:88:0e:2e:dc:
f7:8b:9f:34:eb:04:5b:68:ef:9e:16:1d:4d:af:e9:
ca:15:c3:b3:d8:78:59:2d:3b:55:37:4d:4c:c9:35:
44:c8:75:ef:c8:9f:5c:27:df:e9:7b:51:bd:57:e1:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:0D:0E:D6:C6:40:61:FA:AD:6B:16:EB:2C:07:7B:FA:93:D3:C1
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/3yYNDtbGQGH6rWsW6ywHe_qT08E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3a:51:e2:6f:18:24:48:13:ac:10:b9:18:cd:40:f5:b3:93:
21:38:fc:23:18:f4:33:29:4e:2b:22:1e:3f:31:4d:ef:77:fa:
32:e1:45:2d:0d:22:8e:c5:f5:ad:82:1c:2e:7c:83:9b:af:28:
8a:f2:5f:f1:31:3a:14:04:99:85:19:5f:69:19:88:92:2a:e2:
cc:b5:b9:ed:08:ea:f6:3b:7f:a3:52:a4:96:55:27:86:ec:ca:
e9:d8:20:02:65:74:4b:59:4c:56:6c:1a:e2:9b:71:8a:ea:75:
2a:aa:ce:64:0c:f1:c9:01:86:ec:73:44:29:8b:df:a8:a3:ab:
01:6f:e6:18:f7:cc:93:b9:9a:cc:4c:82:bc:a7:f1:40:d6:15:
a1:3e:c4:6b:a3:6d:ae:0e:7b:36:52:9d:6c:6e:58:64:da:1a:
52:26:b2:90:47:f0:70:db:10:16:82:72:33:d8:cf:74:55:ce:
c6:d5:1f:dd:aa:3c:6a:b9:e0:bd:26:8d:4a:5b:b6:01:1d:fd:
b8:39:a6:ed:bd:0f:fb:01:69:23:38:92:3f:05:22:2c:26:d6:
6e:55:4a:26:fe:73:c3:e8:3a:4c:23:c4:41:dd:a4:ed:8e:40:
ac:e2:9b:1b:dd:13:07:b0:7a:3d:ec:27:87:c5:aa:5f:6b:39:
33:0f:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org