Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d1f188-3a84-4f55-9aad-22af495544c9/1/TApWtseDKRyoNggArJd5RHjCqAg.roa
File: TApWtseDKRyoNggArJd5RHjCqAg.roa (raw, json)
Hash identifier: kYvr7xhxnwK5rbmTnK2YdQFHf6rjeX5Cu0nJwETTLPA=
Subject key identifier: 4C:0A:56:B6:C7:83:29:1C:A8:36:08:00:AC:97:79:44:78:C2:A8:08
Certificate issuer: /CN=9fd1a9a22085e7e7e4613c195fb6409af301de81
Certificate serial: 022D4128
Authority key identifier: 9F:D1:A9:A2:20:85:E7:E7:E4:61:3C:19:5F:B6:40:9A:F3:01:DE:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9GpoiCF5-fkYTwZX7ZAmvMB3oE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d1f188-3a84-4f55-9aad-22af495544c9/1/TApWtseDKRyoNggArJd5RHjCqAg.roa
Signing time: Sat 01 Jan 2022 07:52:28 +0000
ROA not before: Sat 01 Jan 2022 07:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208715
IP address blocks: 194.61.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36520232 (0x22d4128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd1a9a22085e7e7e4613c195fb6409af301de81
Validity
Not Before: Jan 1 07:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c0a56b6c783291ca8360800ac97794478c2a808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:59:ff:b2:e3:47:86:e9:6d:a4:9e:3a:88:da:
b0:03:74:b3:85:9b:c7:46:d1:f2:cd:16:fd:4f:30:
b0:57:f1:5e:3b:27:c2:82:b6:40:d6:b7:5e:43:22:
5c:12:e6:72:eb:c9:37:b7:8d:b5:4e:a9:6b:e0:dc:
d9:56:de:45:6c:2e:4b:95:17:b1:0d:da:dc:aa:d0:
7c:02:91:12:e0:52:f7:8e:b4:36:a8:18:c1:89:2a:
70:c2:e0:f5:7e:e3:95:3f:20:97:bc:80:71:b6:6a:
43:ba:05:84:5a:5a:93:24:ac:a4:93:ec:98:d7:14:
93:27:ae:37:77:89:81:9b:91:78:4a:97:f9:a9:31:
99:a2:4d:bf:33:4f:0c:40:23:cf:e1:84:ab:10:18:
0d:eb:7d:36:75:e6:66:6b:ec:c1:8f:a0:3c:57:4b:
62:24:a7:83:bf:a4:c2:50:42:90:71:5f:c9:6a:9d:
25:fe:95:23:ff:1c:5f:e3:c6:54:fb:8a:5a:85:d4:
8d:22:d2:e9:06:40:9e:31:e0:03:74:32:ae:d8:16:
16:29:8b:2c:8c:1c:02:f9:3e:58:4e:2f:03:ef:b4:
a7:84:0a:6b:db:5a:ed:0c:e1:d6:bf:71:73:3a:49:
8a:c3:6f:d0:ad:1e:8e:a3:d4:97:b3:fd:f4:ad:7e:
de:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:56:B6:C7:83:29:1C:A8:36:08:00:AC:97:79:44:78:C2:A8:08
X509v3 Authority Key Identifier:
keyid:9F:D1:A9:A2:20:85:E7:E7:E4:61:3C:19:5F:B6:40:9A:F3:01:DE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9GpoiCF5-fkYTwZX7ZAmvMB3oE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d1f188-3a84-4f55-9aad-22af495544c9/1/TApWtseDKRyoNggArJd5RHjCqAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d1f188-3a84-4f55-9aad-22af495544c9/1/n9GpoiCF5-fkYTwZX7ZAmvMB3oE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.128.0/23
Signature Algorithm: sha256WithRSAEncryption
53:72:a3:b3:29:38:c8:2a:0a:6e:75:9e:98:ef:e5:05:8c:56:
fc:63:7a:be:c6:3a:85:8a:14:85:29:c6:27:a4:cf:5b:73:04:
ee:22:4d:f1:f6:1d:0d:5c:4e:f0:34:2e:74:47:48:18:76:6a:
54:16:97:21:1b:3e:01:4d:76:25:5d:39:ec:60:45:5c:26:20:
f3:2b:93:df:d0:91:05:2e:03:11:03:6f:7a:ec:2b:96:da:43:
36:b4:50:bd:f5:73:d8:15:66:92:3e:2c:52:c2:64:1c:38:0f:
ee:97:21:2a:63:ee:97:7b:22:9a:cc:c9:1c:ce:6e:2d:10:19:
40:b2:98:62:37:c8:e8:b2:36:15:43:da:ff:da:02:d1:d4:87:
e4:e3:a3:89:4c:ad:c5:06:90:df:c9:9e:e4:e9:c7:b5:29:69:
52:36:67:f2:ed:1c:e1:cb:9b:64:a5:35:76:6d:7c:13:cd:49:
db:53:ad:f9:02:58:2f:f7:6d:28:c0:b3:d1:3c:04:30:d6:12:
c3:09:46:2e:1b:b0:1c:c2:ce:90:5c:c1:db:72:12:26:95:3c:
5f:ef:7c:35:bd:5d:75:23:9d:3d:e2:ec:53:4e:c6:41:54:3d:
5e:30:ba:f4:ba:51:3a:62:12:cd:72:1e:7e:45:b0:77:c2:00:
3b:7d:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:34 2024 by rpki-client on console-ams.rpki-client.org