Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/sq_n4tBpC5-ZOVljsIRyiUepcJs.roa
File: sq_n4tBpC5-ZOVljsIRyiUepcJs.roa (raw, json)
Hash identifier: lFrSL0d0QiRvDO8G5Nuv/3xIP2/la0XFHktxJgTvg4M=
Subject key identifier: B2:AF:E7:E2:D0:69:0B:9F:99:39:59:63:B0:84:72:89:47:A9:70:9B
Certificate issuer: /CN=57b81833f364bc6425b4255b7ee33de0072200b3
Certificate serial: 01877446C7BA9A97FDB0B749C9C2B5685E8E
Authority key identifier: 57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/sq_n4tBpC5-ZOVljsIRyiUepcJs.roa
Signing time: Wed 12 Apr 2023 07:03:28 +0000
ROA not before: Wed 12 Apr 2023 07:03:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 194.26.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:46:c7:ba:9a:97:fd:b0:b7:49:c9:c2:b5:68:5e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b81833f364bc6425b4255b7ee33de0072200b3
Validity
Not Before: Apr 12 07:03:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2afe7e2d0690b9f99395963b084728947a9709b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:47:4f:c4:d0:11:e0:bb:c5:46:9b:e4:32:
94:9b:a6:1b:bf:9c:cc:e0:1d:81:07:b6:fb:5d:f0:
e7:15:9e:6c:14:3f:b6:8e:99:59:cb:cf:cd:b7:d8:
c2:9b:e8:69:44:4f:f7:3c:ad:6d:18:d3:b9:f0:90:
f7:51:48:f4:43:f2:02:09:04:bc:c0:05:7c:9d:68:
20:00:39:5a:33:17:e8:69:84:7f:ff:9f:f9:a0:18:
56:64:49:af:71:7b:51:b9:0f:ac:bb:5b:db:28:0f:
ac:3d:a7:8d:fe:8b:94:6c:36:04:42:b3:ca:99:a3:
b7:17:13:b0:3f:61:e2:1c:8b:e9:2c:87:dc:37:54:
14:29:26:33:98:c7:3f:41:79:86:0d:a5:e7:b0:25:
8b:e4:27:e8:78:30:e0:35:f3:45:13:53:f8:19:46:
1c:af:93:7a:52:29:15:f9:3a:08:8d:b6:1a:83:a7:
ef:eb:77:2a:12:e2:12:82:07:b3:50:78:da:7a:59:
82:e5:ae:8d:78:84:bc:46:fb:49:90:7d:b8:15:70:
c5:f9:c4:d8:1a:be:e5:7f:c9:46:8e:a6:4e:34:85:
21:40:0e:d4:11:53:da:70:85:82:5f:93:a8:2b:94:
e8:ec:fd:4a:21:5a:2f:56:15:a6:17:ce:d5:1c:a3:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:E7:E2:D0:69:0B:9F:99:39:59:63:B0:84:72:89:47:A9:70:9B
X509v3 Authority Key Identifier:
keyid:57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/sq_n4tBpC5-ZOVljsIRyiUepcJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.142.0/24
Signature Algorithm: sha256WithRSAEncryption
45:57:7b:b8:7d:d8:f2:bd:3b:90:e0:53:f6:b8:4c:64:84:24:
4f:5b:fb:2a:f9:1f:d8:de:ca:13:41:55:9f:5b:f7:4c:cc:90:
d3:64:b8:74:c7:32:47:9c:a8:64:e5:49:eb:d1:b4:7f:29:d3:
44:e5:82:92:3c:c9:c6:61:80:61:f4:e3:84:22:fd:c0:c1:44:
e2:57:19:9d:55:0f:6f:a1:0c:79:6c:30:09:04:85:3e:32:f0:
a7:7b:15:7a:c3:a5:24:ff:03:18:80:8c:44:10:da:65:e6:3d:
f8:2b:21:1a:d2:7b:4a:ea:aa:d6:6d:75:42:15:71:66:ff:f7:
32:e7:29:39:ef:2d:92:c9:aa:73:7f:be:e8:c4:f5:71:0e:3c:
42:cb:d5:9c:38:fe:6a:1d:06:f3:92:07:1c:d1:86:11:df:f4:
52:df:c7:cc:97:cf:34:08:d7:37:82:d0:21:03:95:75:56:8a:
8d:4b:d7:f5:8d:9d:4e:30:60:cb:fc:78:3e:05:50:dc:44:3d:
8d:d4:da:4d:21:64:43:b2:94:98:c5:cc:ad:52:f3:59:86:32:
00:ff:cb:53:23:c0:6a:07:8c:f0:03:1d:9b:08:f0:c1:5a:2f:
39:78:ed:78:dc:1d:f7:53:e4:b9:ec:fe:6f:1c:ce:8a:7e:36:
68:5b:be:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net