Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/8J_ZiF7BcVezf_ReP2p4zm1OCiM.roa
File: 8J_ZiF7BcVezf_ReP2p4zm1OCiM.roa (raw, json)
Hash identifier: /K+MCIN6rUECUw7OpADfXogVjZeovyNxPsv4mFTQ6oc=
Subject key identifier: F0:9F:D9:88:5E:C1:71:57:B3:7F:F4:5E:3F:6A:78:CE:6D:4E:0A:23
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0189C6AC7443CF1B34744A6D14B03662D819
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/8J_ZiF7BcVezf_ReP2p4zm1OCiM.roa
Signing time: Sat 05 Aug 2023 17:08:58 +0000
ROA not before: Sat 05 Aug 2023 17:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 194.147.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:ac:74:43:cf:1b:34:74:4a:6d:14:b0:36:62:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Aug 5 17:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09fd9885ec17157b37ff45e3f6a78ce6d4e0a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:ac:85:ea:c2:39:a0:1f:43:ff:27:de:bc:
97:a2:ce:c8:cb:26:63:3f:d7:f3:ce:13:b4:77:29:
dc:65:b6:4b:df:b6:04:e6:ce:2f:3a:08:4c:92:c6:
0c:9b:55:43:fe:66:37:32:ad:05:84:dc:56:93:83:
ee:70:78:db:2a:f4:89:9f:d6:02:e1:cb:88:10:ef:
87:e3:1b:86:f3:96:da:88:bb:f2:45:4d:4a:3d:ff:
c5:7f:f7:1d:97:13:eb:c9:68:6e:d8:39:00:7e:63:
69:89:d4:cc:ab:96:72:c3:47:cf:8f:e4:31:03:82:
8a:cc:27:9e:1b:0c:f4:bb:d1:ed:7d:92:f6:c9:e9:
55:8d:d4:09:fa:d8:94:43:c0:40:77:d6:c8:70:37:
f7:7e:9d:c9:a0:29:3b:b3:86:24:93:42:10:61:09:
ec:83:85:fb:cd:c9:2d:40:b0:19:27:32:f4:34:66:
dc:11:f8:ca:25:02:a0:a3:a6:4d:ee:e0:03:df:37:
a2:34:06:b2:ff:b0:2e:99:77:07:59:ea:1b:a2:99:
2d:4c:e6:31:32:06:6c:f7:76:7f:86:37:8b:a0:b9:
b2:6b:81:da:1f:a2:16:7d:8a:21:72:4a:19:b8:34:
5a:d4:c6:fa:7a:9c:17:33:61:15:91:33:e9:ab:7f:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:D9:88:5E:C1:71:57:B3:7F:F4:5E:3F:6A:78:CE:6D:4E:0A:23
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/8J_ZiF7BcVezf_ReP2p4zm1OCiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cb:e1:40:77:b8:54:ed:ff:71:82:49:db:bc:b5:28:c2:1f:
e5:11:84:04:87:13:d0:62:4e:a1:f6:bc:e9:c3:2d:f1:6d:a2:
ff:52:c7:e8:1a:69:11:2a:66:b3:bb:fe:0e:3d:30:19:1e:37:
37:07:7e:d3:fb:64:8f:14:4d:f0:71:f4:55:d5:23:1f:c1:a2:
62:43:be:95:38:6a:71:4e:23:84:1f:9c:55:4b:12:d1:9f:1b:
f9:17:eb:35:f7:db:83:b9:d9:49:78:4b:20:b2:6b:e3:f2:6a:
7f:b6:7d:8f:57:b7:41:9d:03:21:3a:5e:02:c6:8a:60:e8:fa:
3a:24:df:8d:e2:f4:42:1a:1f:4e:f1:7d:0b:b4:e8:56:6a:68:
f0:68:77:41:d9:d3:71:90:98:68:b2:b7:c8:6e:5f:38:4e:24:
66:4f:e6:e4:25:07:a0:db:92:34:a5:d0:0e:c1:d5:f5:63:b3:
1b:f0:f0:5b:07:f6:88:1d:15:5c:fd:42:12:5b:2f:6b:0a:ac:
9d:14:99:33:68:f6:c6:46:b3:22:fb:32:48:85:e8:53:34:6d:
53:04:d4:ba:cc:84:84:14:e1:45:cd:62:24:d9:b4:e9:cd:fe:
d7:5e:5f:db:d9:ca:74:fe:2e:76:14:7d:e8:0c:fb:95:72:f5:
49:14:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 12:40:57 2023 by rpki-client on console-fra.rpki-client.org