Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/OfW717pQi6Mj224hknosijM3Djk.roa
File: OfW717pQi6Mj224hknosijM3Djk.roa (raw, json)
Hash identifier: IZwnXBc6MjV11bAQUZYgRtWW9eHwIrONfEx7E1FNNvw=
Subject key identifier: 39:F5:BB:D7:BA:50:8B:A3:23:DB:6E:21:92:7A:2C:8A:33:37:0E:39
Certificate issuer: /CN=73380b5e0c8945ba384d29cd7a7f3624bc5cbab7
Certificate serial: 01856CB86372CAD31A2B340839C46F8BAAD4
Authority key identifier: 73:38:0B:5E:0C:89:45:BA:38:4D:29:CD:7A:7F:36:24:BC:5C:BA:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czgLXgyJRbo4TSnNen82JLxcurc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/OfW717pQi6Mj224hknosijM3Djk.roa
Signing time: Sun 01 Jan 2023 09:45:01 +0000
ROA not before: Sun 01 Jan 2023 09:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56655
IP address blocks: 195.16.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:63:72:ca:d3:1a:2b:34:08:39:c4:6f:8b:aa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73380b5e0c8945ba384d29cd7a7f3624bc5cbab7
Validity
Not Before: Jan 1 09:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f5bbd7ba508ba323db6e21927a2c8a33370e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:09:62:43:d2:79:15:fa:c6:90:98:3d:a9:
2c:ce:ad:fd:c0:3a:07:ed:8b:94:bb:0d:54:46:4a:
8b:3c:59:27:8c:6a:23:8b:5c:5a:c4:07:b1:57:81:
ff:b6:a4:cc:14:42:c5:7b:73:e4:61:b5:92:38:55:
55:58:8f:16:69:bf:14:db:58:a9:67:ec:4d:0a:64:
4f:fd:ea:7b:6f:04:17:7a:8b:d0:db:82:cd:51:ca:
3d:de:48:ee:54:38:92:bc:1e:cb:73:28:cd:84:8b:
bf:79:f3:4b:80:47:45:c1:2a:83:62:1f:f0:2c:87:
c0:a5:79:8e:bb:ea:5b:0e:1a:92:93:53:14:1d:4d:
a4:9e:bc:b7:6e:34:0f:e1:8c:b5:f1:bf:8e:83:30:
f8:da:88:8b:d7:dc:c1:94:38:7e:c6:cc:6f:1b:b7:
c1:35:ba:0b:ba:05:5a:47:1b:80:1c:d4:81:21:fa:
1b:2e:59:36:d1:84:4e:46:3b:23:39:ed:ef:eb:f9:
76:6c:5d:97:ea:f5:bc:3f:4e:e5:d0:d6:7a:f8:b2:
98:de:fb:17:21:b3:29:14:f9:b4:60:8a:dc:a3:37:
7b:40:2d:ab:51:15:a9:72:5a:ac:5a:40:dd:11:11:
68:0e:18:17:33:c6:39:54:61:84:33:fc:b3:1f:e0:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:BB:D7:BA:50:8B:A3:23:DB:6E:21:92:7A:2C:8A:33:37:0E:39
X509v3 Authority Key Identifier:
keyid:73:38:0B:5E:0C:89:45:BA:38:4D:29:CD:7A:7F:36:24:BC:5C:BA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czgLXgyJRbo4TSnNen82JLxcurc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/OfW717pQi6Mj224hknosijM3Djk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/czgLXgyJRbo4TSnNen82JLxcurc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.73.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6a:7b:5b:e2:70:21:22:ab:e0:68:05:50:67:e6:4c:04:82:
30:5c:72:44:a2:3a:8a:2b:72:a5:eb:94:19:33:08:30:ea:9a:
a5:36:50:f9:32:71:65:cf:29:4b:8d:b1:b7:52:b6:0f:87:a5:
63:49:e6:8b:56:17:10:71:bb:1e:0f:03:02:b5:46:eb:1d:46:
09:f3:1a:ec:bf:f5:4a:eb:77:a1:f9:d5:fa:11:ca:83:50:97:
3e:06:a7:aa:63:7f:ae:34:2f:b1:88:8c:3e:af:12:a8:3b:b5:
19:9c:7a:e0:d4:49:7e:0a:fe:3d:34:8e:ba:79:03:c1:86:b3:
0a:2c:4a:ab:62:ae:ac:f0:aa:8c:fc:61:79:34:5e:12:9b:31:
48:1e:6f:98:a2:1f:fc:8f:ce:d6:39:d8:a4:bc:9d:41:21:78:
d9:ea:b4:03:f8:d8:3a:c6:70:cf:d4:ad:40:42:9e:4d:df:01:
f5:e2:c5:cf:ed:84:7b:61:b5:7d:22:8c:cf:e0:41:7e:1c:8c:
85:2a:f2:0c:6a:16:3d:6e:4a:29:9b:b4:9b:c5:34:dc:9a:76:
de:82:f6:c8:6b:7a:db:6c:4d:f3:8e:83:1a:3c:e0:df:c6:ae:
77:54:06:62:b7:ec:60:2e:66:ce:25:4d:fe:b4:1f:61:4c:eb:
bf:ee:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org