Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/DOEdcIsg2818SaPCqh6zTA3N8yk.roa
File: DOEdcIsg2818SaPCqh6zTA3N8yk.roa (raw, json)
Hash identifier: SoAdU3PxMbWwaPy+diC5Al8kl4zLa8p7VBBlab5IqrM=
Subject key identifier: 0C:E1:1D:70:8B:20:DB:CD:7C:49:A3:C2:AA:1E:B3:4C:0D:CD:F3:29
Certificate issuer: /CN=73380b5e0c8945ba384d29cd7a7f3624bc5cbab7
Certificate serial: D77329
Authority key identifier: 73:38:0B:5E:0C:89:45:BA:38:4D:29:CD:7A:7F:36:24:BC:5C:BA:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czgLXgyJRbo4TSnNen82JLxcurc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/DOEdcIsg2818SaPCqh6zTA3N8yk.roa
Signing time: Sat 01 Jan 2022 12:56:23 +0000
ROA not before: Sat 01 Jan 2022 12:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56655
IP address blocks: 195.16.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14119721 (0xd77329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73380b5e0c8945ba384d29cd7a7f3624bc5cbab7
Validity
Not Before: Jan 1 12:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ce11d708b20dbcd7c49a3c2aa1eb34c0dcdf329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:a9:30:4d:9e:57:bb:bf:c3:ff:54:eb:86:
a4:16:29:38:cb:e8:70:2b:60:a2:ea:22:3a:b8:bb:
e8:8e:01:cc:17:80:c1:b9:74:8e:23:08:d6:16:3b:
70:24:2a:2d:c7:9a:84:ba:5c:13:a0:21:77:c0:32:
29:1c:53:94:20:d4:e7:9c:a5:10:8c:52:55:94:d7:
37:5e:aa:17:ef:8d:9f:8b:a1:18:3f:94:c6:8f:17:
25:a3:1b:34:e9:b5:e8:a7:9f:bb:03:cd:b7:4f:77:
fb:c7:bb:eb:ae:10:59:48:f9:a9:da:00:b7:fd:75:
fb:2b:74:f0:c9:ab:4c:c2:d0:99:40:f2:c1:d1:4a:
90:71:80:a7:c1:52:18:ef:8c:f8:79:6d:0d:ad:06:
33:d6:8d:87:17:2e:dc:87:2f:c7:34:cb:1e:09:28:
94:44:02:9d:24:48:6f:47:21:cc:3d:55:55:4c:a4:
f0:ff:b2:a5:28:d0:77:70:04:0f:0c:ca:59:04:be:
55:dc:d2:af:f7:f5:b3:ce:fa:8f:3d:fa:de:75:44:
4c:f6:2f:5e:e8:e5:14:2c:9d:1c:1b:df:8f:b4:38:
72:56:2a:b9:7a:c9:3c:85:4c:e9:d7:59:7e:b9:fb:
30:82:24:db:b6:ce:5c:d0:79:c2:a0:3a:92:74:7b:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E1:1D:70:8B:20:DB:CD:7C:49:A3:C2:AA:1E:B3:4C:0D:CD:F3:29
X509v3 Authority Key Identifier:
keyid:73:38:0B:5E:0C:89:45:BA:38:4D:29:CD:7A:7F:36:24:BC:5C:BA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czgLXgyJRbo4TSnNen82JLxcurc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/DOEdcIsg2818SaPCqh6zTA3N8yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/czgLXgyJRbo4TSnNen82JLxcurc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.73.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4a:e7:0a:87:40:d6:b9:2f:ba:a9:f0:af:5b:70:90:48:4f:
ad:9b:f5:02:c7:f9:1f:a3:74:55:c0:1d:b2:cc:4a:67:d5:51:
50:fa:0c:a7:0e:01:00:9f:b0:3c:5c:31:ab:22:11:e7:16:db:
41:7f:74:46:1b:cc:8b:95:ac:ec:62:37:a5:21:84:af:66:b5:
90:e1:92:be:5c:ad:76:59:f1:2a:86:6b:93:c9:db:76:ce:af:
0f:3b:e1:0e:51:6c:25:a4:ba:48:2b:ef:9d:bd:dd:57:6b:ae:
47:bb:2d:75:d5:dc:30:9b:7e:51:8d:c4:05:74:17:64:63:28:
12:d5:35:2d:65:fc:ad:da:95:30:56:6d:df:91:af:ee:b1:59:
fa:59:8a:1d:f9:8e:50:62:32:40:03:e5:66:42:34:38:d1:d0:
71:6e:43:51:0c:51:1c:7b:c7:73:09:78:80:15:a1:0c:e3:dd:
89:27:f1:22:b1:2b:27:7a:14:3c:e8:3c:14:01:ed:f4:c9:2d:
81:e4:c9:fc:7e:f6:d7:ad:68:6d:28:68:56:05:8a:0b:30:75:
82:6b:92:4b:be:c1:7e:22:a6:26:de:4f:3d:f3:a8:81:75:f2:
ce:a7:f4:95:71:f2:8b:1c:7f:2f:9a:1c:f6:00:a4:9c:2d:fb:
f4:7f:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org