Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/bvuWEcT07zvDDBeha69Me5I0afE.roa
File: bvuWEcT07zvDDBeha69Me5I0afE.roa (raw, json)
Hash identifier: zqAyhD11AOMfQ57ikXCw87Aupri7wA8n2sSBudLYt8E=
Subject key identifier: 6E:FB:96:11:C4:F4:EF:3B:C3:0C:17:A1:6B:AF:4C:7B:92:34:69:F1
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 01856D53FEA37F955891C4F32AAC751D1F1E
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/bvuWEcT07zvDDBeha69Me5I0afE.roa
Signing time: Sun 01 Jan 2023 12:34:59 +0000
ROA not before: Sun 01 Jan 2023 12:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:fe:a3:7f:95:58:91:c4:f3:2a:ac:75:1d:1f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: Jan 1 12:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6efb9611c4f4ef3bc30c17a16baf4c7b923469f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:43:79:4d:5a:c4:ac:0a:58:f8:49:e2:cc:
c6:c2:3f:46:01:dd:24:56:46:93:03:34:53:d0:6c:
3b:cc:41:81:26:b6:e2:12:38:90:e2:82:7c:5f:6b:
c4:b2:b1:06:50:30:3c:f1:8e:65:4a:58:ad:30:6f:
bc:e0:ac:ba:fd:cb:34:f6:08:b7:af:3f:68:97:17:
57:6f:ec:5e:48:9e:d8:66:69:27:f1:3b:d5:00:f4:
de:e4:03:00:d6:82:b9:7c:51:e0:c3:0f:29:79:6e:
a0:a0:1f:eb:b8:96:02:f9:58:02:a8:b6:ae:bb:61:
f8:22:70:d3:71:67:55:32:71:3c:d5:d3:bf:6d:45:
24:d7:a9:43:b1:d1:3a:89:8f:31:8b:af:54:7e:99:
bc:68:15:b2:c1:68:7f:5d:13:54:4c:57:5a:b0:05:
b5:4a:e6:61:b8:a4:0d:8a:77:a5:44:be:bf:c7:b8:
ee:69:36:9b:b9:d8:5d:f2:6a:8b:65:b1:96:c9:31:
20:56:ce:d1:d7:67:4d:3f:db:b1:1c:d7:91:39:44:
9a:98:0d:fc:74:13:9f:10:8e:40:d1:03:09:ef:9f:
12:c1:30:2a:db:9f:3e:74:a0:34:d8:33:44:ba:df:
69:0b:ad:48:78:ec:b3:14:d6:0c:18:da:a7:39:5a:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FB:96:11:C4:F4:EF:3B:C3:0C:17:A1:6B:AF:4C:7B:92:34:69:F1
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/bvuWEcT07zvDDBeha69Me5I0afE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:69:f5:a8:a0:1f:1f:ab:3c:4e:9e:25:7f:f9:f6:ab:ac:f0:
aa:4b:80:ac:0b:b8:7d:54:8a:39:a2:dd:6f:f5:78:ab:8c:ac:
56:f2:c5:62:77:06:c3:57:e2:e6:65:5b:11:82:c0:63:3c:9a:
2f:19:d9:18:46:d0:78:d2:b0:2c:d5:ef:04:cc:8c:98:89:53:
9e:a2:c7:40:2b:ef:1c:ad:e3:0b:f7:66:88:f3:48:e8:69:6e:
e1:49:07:b2:21:e2:e3:31:0e:71:fe:2d:e0:b8:32:a2:26:13:
46:96:f9:af:63:63:58:b1:a0:19:fc:31:41:0f:87:02:c3:4b:
eb:97:52:92:7e:3c:e7:c9:7f:59:d9:c9:c0:1f:2f:d7:6c:2f:
32:d4:3b:f5:39:cf:04:f7:9f:6d:4f:de:05:6c:ea:5f:17:78:
b3:8a:44:e1:04:94:76:c5:a9:a9:60:3a:00:58:b2:19:1c:c2:
51:f2:95:3e:da:56:12:c9:e1:31:d9:9c:01:db:2d:d6:92:4e:
2b:3a:01:cf:23:ac:72:32:16:dc:6b:fb:5e:c0:7e:70:ec:4f:
16:46:d3:02:02:3b:6a:2f:68:22:86:2d:4d:80:ec:7f:f3:60:
59:b1:6a:dc:17:54:7e:08:0d:84:10:9f:dc:96:59:0e:e9:47:
ad:de:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org