Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fa8ef-845f-42e8-8c3a-84c85a9009ed/1/36CUyzJHYXBvVW6Dy3lB4CETHEE.roa
File: 36CUyzJHYXBvVW6Dy3lB4CETHEE.roa (raw, json)
Hash identifier: dV/IbdPbw97TjhtDSKOiw2SS/BNehtL9XzVl6SCeh7Q=
Subject key identifier: DF:A0:94:CB:32:47:61:70:6F:55:6E:83:CB:79:41:E0:21:13:1C:41
Certificate issuer: /CN=789517258236a022582f346e88152075840617cd
Certificate serial: F1949F
Authority key identifier: 78:95:17:25:82:36:A0:22:58:2F:34:6E:88:15:20:75:84:06:17:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJUXJYI2oCJYLzRuiBUgdYQGF80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fa8ef-845f-42e8-8c3a-84c85a9009ed/1/36CUyzJHYXBvVW6Dy3lB4CETHEE.roa
Signing time: Mon 10 Jan 2022 23:01:25 +0000
ROA not before: Mon 10 Jan 2022 23:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56655
IP address blocks: 193.243.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15832223 (0xf1949f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=789517258236a022582f346e88152075840617cd
Validity
Not Before: Jan 10 23:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfa094cb324761706f556e83cb7941e021131c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6f:45:9c:40:c4:d9:b8:1e:f0:59:3a:14:b7:
d6:57:28:0e:45:7a:34:ae:85:f2:6b:a8:76:6e:f5:
e4:c1:d4:7b:5e:51:8f:83:6b:04:df:e8:5c:3c:76:
8e:e1:ff:40:4d:66:0c:fd:71:68:1b:a9:67:08:51:
43:bd:2d:de:37:36:cf:b5:6b:aa:7d:e8:51:5d:09:
e1:37:47:fe:d5:ee:70:3f:91:cc:c8:94:d0:0a:99:
23:4d:98:65:a7:8f:fb:3a:8f:bf:69:d4:64:e2:c7:
67:4f:b9:dd:17:65:e3:f1:ea:23:f2:ff:ef:b3:af:
a3:89:34:f9:82:d8:3d:f3:aa:0b:00:29:25:67:41:
54:13:2a:64:69:6d:3f:da:a3:cb:02:2d:dc:37:ca:
03:95:67:b8:73:15:5e:2a:9a:a4:d8:d2:c4:09:8f:
1d:2b:ed:dd:5c:df:b6:77:f9:a3:0d:04:93:a8:28:
77:91:bf:0e:a6:fa:b2:9f:d2:32:4e:38:27:6f:a5:
bd:3f:c7:5e:21:cd:2e:6a:9b:31:a7:43:97:e1:12:
db:9a:8d:9d:f8:0b:ca:2b:03:64:10:c8:50:f2:ae:
c9:70:49:08:e0:df:8c:9b:f2:77:f0:01:4e:58:0d:
8d:fa:75:d4:7e:56:af:23:8d:e8:66:66:8f:3c:72:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A0:94:CB:32:47:61:70:6F:55:6E:83:CB:79:41:E0:21:13:1C:41
X509v3 Authority Key Identifier:
keyid:78:95:17:25:82:36:A0:22:58:2F:34:6E:88:15:20:75:84:06:17:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJUXJYI2oCJYLzRuiBUgdYQGF80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fa8ef-845f-42e8-8c3a-84c85a9009ed/1/36CUyzJHYXBvVW6Dy3lB4CETHEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fa8ef-845f-42e8-8c3a-84c85a9009ed/1/eJUXJYI2oCJYLzRuiBUgdYQGF80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e3:04:06:b1:a8:8a:5a:23:11:bb:e7:3b:f3:82:b5:7e:ae:
26:6b:7f:67:4a:de:7e:43:6f:d0:c9:45:2e:9f:84:88:0c:cd:
8c:57:f2:a7:be:f5:2d:30:82:b3:0a:85:5e:b1:c9:b8:3a:27:
c2:33:3b:42:24:47:7f:ed:a1:f7:bd:04:d1:59:c7:80:e3:b6:
ac:a3:f1:43:24:fe:b8:aa:71:6a:6f:e0:d3:3a:ce:96:7e:8c:
af:26:99:5d:ec:81:1a:d8:85:95:db:6c:31:85:43:55:79:58:
a7:65:c7:64:1b:3e:0b:5f:92:0d:67:87:d1:75:31:5c:ae:2c:
aa:8d:3e:fa:7e:d4:b0:82:94:d1:c6:c0:cf:d2:9b:ad:ed:d3:
93:cc:38:0a:38:3e:68:5d:c1:be:66:0b:27:7a:8f:53:16:f9:
a7:72:fb:6e:d9:ba:c6:b9:f5:10:5d:6c:f8:19:75:0a:14:86:
0b:7d:77:44:5e:57:5b:84:03:d8:7e:19:3c:21:76:ff:d2:64:
7b:2a:05:65:9a:07:be:d5:8f:c8:31:1e:6d:51:c4:1f:44:e3:
a5:6f:6f:23:df:da:3d:c1:98:eb:d8:23:bb:43:a1:46:b3:b6:
ad:83:fb:28:42:1f:e7:38:b2:de:40:52:aa:a9:c1:e1:e9:19:
6a:3f:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org