Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/1-TM71eHmg2q0T6grZNNIch3XGtM.roa
File: 1-TM71eHmg2q0T6grZNNIch3XGtM.roa (raw, json)
Hash identifier: koEAYUg5fam8qeUScN5r6G+v+rJYNHeVgoOj9O9cSmY=
Subject key identifier: F9:33:3B:D5:E1:E6:83:6A:B4:4F:A8:2B:64:D3:48:72:1D:D7:1A:D3
Certificate issuer: /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial: 018234038F21E92ACDAC85F641A05D6D519E
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/1-TM71eHmg2q0T6grZNNIch3XGtM.roa
Signing time: Mon 25 Jul 2022 06:20:24 +0000
ROA not before: Mon 25 Jul 2022 06:20:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47689
IP address blocks: 64.187.208.0/23 maxlen: 24
2a06:a340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:03:8f:21:e9:2a:cd:ac:85:f6:41:a0:5d:6d:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
Validity
Not Before: Jul 25 06:20:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9333bd5e1e6836ab44fa82b64d348721dd71ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:9f:94:13:4a:53:5a:6f:ef:15:b8:82:da:
09:f3:0a:9f:a3:f2:6c:f7:8f:75:0e:a9:ff:ec:c8:
34:98:7f:73:d3:e1:89:01:c4:48:b5:5d:25:32:1b:
15:49:e3:4f:97:8b:02:09:46:75:1e:aa:5a:d6:ca:
5c:05:fb:90:77:aa:25:c4:12:8b:52:13:71:d2:69:
bd:08:5d:79:5b:35:e9:5a:ee:7e:f4:f5:1e:95:31:
91:b4:04:5c:1d:db:8b:4c:45:b7:92:bc:27:6c:78:
06:c9:0a:41:b3:13:fe:0e:5f:7c:5a:26:94:23:97:
6b:c6:d3:40:fe:1e:0a:c7:a1:45:a2:6c:de:24:48:
0f:8c:98:f4:fc:b7:c8:85:7f:09:2c:44:8d:b6:f7:
ed:06:ef:d5:c6:b5:a3:81:f1:ce:c0:50:1c:dd:eb:
81:44:04:a7:4d:67:94:09:fc:3f:8c:45:a7:38:5f:
c6:08:cb:1b:d8:49:b4:71:aa:11:a8:3b:55:0a:7a:
97:89:b8:72:86:98:ae:c2:97:5e:ea:6e:f7:1f:42:
68:23:7d:75:b9:e1:25:2f:50:60:43:8f:c4:e2:e5:
0f:09:47:5e:c1:63:24:50:41:0a:fd:f2:52:5f:74:
d6:95:34:75:ba:9e:c5:d0:14:2e:ba:f4:ac:0d:56:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:33:3B:D5:E1:E6:83:6A:B4:4F:A8:2B:64:D3:48:72:1D:D7:1A:D3
X509v3 Authority Key Identifier:
keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/1-TM71eHmg2q0T6grZNNIch3XGtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
5a:25:90:f2:b3:7d:02:68:89:b0:40:fd:ee:9c:40:c5:79:07:
83:f5:6d:57:8b:a1:08:ca:49:90:fb:2a:de:66:df:8c:89:2e:
29:5c:bb:a6:fb:f7:f5:7a:f9:1b:19:a0:13:1f:82:a4:6f:f3:
da:0f:f3:5d:78:76:09:f6:c4:fb:f1:04:5e:9a:77:75:96:c0:
61:11:8d:e9:7c:42:04:1c:a0:b8:ea:56:cf:15:b4:86:32:50:
d2:10:d2:cb:89:80:e3:68:27:c1:b1:e8:98:7c:c0:1e:b7:9d:
7b:3b:2c:4d:0d:b6:1c:dd:d8:db:2a:7e:76:8b:bf:2b:a5:25:
0e:92:b7:b5:2e:4d:b9:aa:df:c4:76:37:20:0c:26:06:ca:86:
4e:6b:e7:9c:57:26:bd:94:7c:37:4d:da:f8:5b:70:81:39:5a:
68:38:b7:b8:a5:5e:f8:df:98:27:f9:b5:20:83:c8:7b:6b:b2:
35:52:ea:af:ab:b9:cf:63:39:6c:d5:09:f6:f1:52:5b:e6:7c:
9c:55:83:4b:ec:22:a3:6f:36:3b:2d:a4:d5:05:af:7d:f2:eb:
df:57:35:af:6a:96:ee:33:8a:ee:d6:15:f8:7f:72:fe:c3:03:
5a:b5:4b:e4:f3:45:75:24:22:fd:03:1b:34:b8:e5:b2:a9:70:
7d:52:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org