Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/7pSHZbYz7gDvdIwPC8jscShYmag.roa
File: 7pSHZbYz7gDvdIwPC8jscShYmag.roa (raw, json)
Hash identifier: x+q1Q6k9PYMBpQbeAtRfPv1cSpRhcOS2BnAeUAfsJqY=
Subject key identifier: EE:94:87:65:B6:33:EE:00:EF:74:8C:0F:0B:C8:EC:71:28:58:99:A8
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 0164DADE
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/7pSHZbYz7gDvdIwPC8jscShYmag.roa
Signing time: Tue 08 Mar 2022 06:51:07 +0000
ROA not before: Tue 08 Mar 2022 06:51:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23386846 (0x164dade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: Mar 8 06:51:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee948765b633ee00ef748c0f0bc8ec71285899a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:19:ca:2f:a5:a8:72:c3:f6:98:4e:e3:72:
a6:fa:72:9c:1b:bd:b7:6e:bc:9d:13:d3:47:c4:82:
93:0c:f7:d9:56:da:f0:f2:03:cb:f9:45:1d:e2:67:
d5:b7:05:0b:6f:4e:53:45:48:ea:01:48:71:81:8a:
42:9a:12:db:f1:1a:d9:00:92:49:18:a4:66:c5:c8:
2c:6b:c9:58:f1:1b:1a:e0:da:ee:a9:08:3a:66:37:
00:03:c2:d5:42:13:27:eb:b2:94:1e:4a:f5:76:63:
d3:5e:6a:11:04:60:d1:ce:74:c5:92:2d:3d:5e:27:
27:13:87:e1:75:c1:ae:23:9d:15:a7:18:d2:3c:a7:
fe:6e:9e:2a:a2:e2:95:f6:84:da:db:a3:a6:e2:ca:
b6:b1:29:bd:ba:4a:53:72:bd:1e:b0:c6:32:b4:36:
01:d8:14:33:8c:b8:a0:5d:2f:8c:7a:4b:c3:7f:e4:
01:5f:c6:31:fd:10:6b:e9:37:10:b5:0e:4f:93:ae:
a3:65:86:94:49:ee:86:d7:cb:e9:a0:18:40:99:41:
39:29:a3:f0:30:a8:3d:76:e0:1d:2a:50:8f:93:57:
71:e3:4a:03:90:ea:62:63:41:d5:2b:27:2d:a2:5a:
1f:a3:48:6a:0f:aa:43:47:45:e6:75:f7:cc:fc:92:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:87:65:B6:33:EE:00:EF:74:8C:0F:0B:C8:EC:71:28:58:99:A8
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/7pSHZbYz7gDvdIwPC8jscShYmag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ca:f1:41:a3:cf:5d:74:e6:be:37:6e:67:6e:57:f4:3e:1d:
12:25:96:0a:8a:0d:ca:7d:1a:f0:0f:b1:5f:07:c2:30:5a:d8:
cb:70:7f:00:a7:12:61:93:d8:b4:03:9d:f8:38:f4:43:9a:bd:
10:84:26:91:54:18:88:6c:32:c9:65:b5:8c:f9:2e:75:55:8e:
00:34:4d:27:9d:c1:2f:e6:da:39:b6:c3:5d:b0:7d:e1:28:cb:
0b:a3:ee:ff:1c:cd:e3:cc:ee:d3:d9:9f:12:29:be:5e:ac:4f:
f6:f5:4f:7f:28:ee:e2:6c:6f:be:24:e0:2a:8c:63:18:0f:f2:
5d:bc:ba:2f:c7:61:e1:a6:41:0a:4f:2f:1c:f2:8b:8e:82:62:
d1:9c:26:71:00:da:c2:04:fe:3a:c6:d3:0c:1b:cc:ae:72:7b:
b2:36:f8:8d:b9:3a:0b:9d:d6:6f:e9:4e:a6:de:5e:86:4b:cf:
df:ce:48:eb:b0:ae:2f:da:c6:f2:e0:02:e9:04:29:f3:7b:c6:
b5:64:cb:8d:0e:87:e8:ac:7d:08:2d:0a:65:5d:09:5b:cf:e4:
45:f9:41:bb:fb:57:9e:4e:9e:81:01:76:02:1b:6a:a9:25:a8:
f0:cc:85:64:43:59:df:95:07:a4:48:30:c3:4b:dc:64:f2:b0:
7a:09:d1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org