Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DJSQ6MzjBCuCEI1MtTB-TwjGswY.roa
File: DJSQ6MzjBCuCEI1MtTB-TwjGswY.roa (raw, json)
Hash identifier: XFqD1pJ/mxr1h9mab6umBAeOr84g/a9VdTKdLY9TRio=
Subject key identifier: 0C:94:90:E8:CC:E3:04:2B:82:10:8D:4C:B5:30:7E:4F:08:C6:B3:06
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018384350051424EC1203B4FF71EC3D3081E
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DJSQ6MzjBCuCEI1MtTB-TwjGswY.roa
Signing time: Wed 28 Sep 2022 13:06:49 +0000
ROA not before: Wed 28 Sep 2022 13:06:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 195.206.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:84:35:00:51:42:4e:c1:20:3b:4f:f7:1e:c3:d3:08:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 28 13:06:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c9490e8cce3042b82108d4cb5307e4f08c6b306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:6d:99:cd:04:f6:e9:2a:6c:17:f0:df:e5:
f4:47:cd:e6:65:38:fa:75:ce:27:19:18:4d:a7:b0:
10:24:9f:b1:6a:9c:d1:e7:1c:56:8c:29:0d:39:48:
d3:54:d7:ca:d7:47:55:a6:d6:17:3f:ef:cd:ea:94:
ad:8e:56:64:09:1a:b0:04:35:a5:18:13:f1:fa:33:
b5:1a:d2:42:a2:1e:4d:2d:bc:ae:f9:01:63:de:41:
24:ba:0d:03:9d:be:bd:ba:2b:86:65:d0:23:04:eb:
80:9f:f7:07:0b:90:fa:7e:12:1f:86:50:82:44:be:
61:2f:0b:d1:45:cb:1e:bf:1d:61:2d:8c:4f:fa:47:
97:9e:66:4f:84:62:5b:f6:f8:05:dd:ce:da:e4:88:
5d:cf:45:4a:4a:5c:f7:5f:e3:1a:ee:a1:24:da:f3:
b8:38:f3:7c:fc:42:65:7d:36:f0:6e:7e:2a:10:1d:
b0:ca:bf:26:12:40:07:76:06:43:d3:d4:be:30:b4:
e4:18:41:36:f1:90:ce:31:56:52:2b:df:16:c6:9f:
dd:65:c1:79:f7:0e:9a:31:8b:9a:65:3c:29:bd:6d:
9f:2c:99:3c:43:3c:00:f7:9c:5b:e6:54:f3:07:fc:
ae:03:72:dc:57:78:1c:ba:6d:38:bf:39:c7:61:df:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:90:E8:CC:E3:04:2B:82:10:8D:4C:B5:30:7E:4F:08:C6:B3:06
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DJSQ6MzjBCuCEI1MtTB-TwjGswY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b5:f8:77:fb:f6:1e:2b:ae:34:50:54:e9:b5:04:aa:08:71:
b4:3d:6a:7d:8c:9e:04:f7:db:68:28:d7:2d:25:d1:fe:2b:a7:
a1:b8:b2:a6:72:42:5b:7c:d6:6a:8d:4a:32:e3:fb:f0:70:1e:
25:da:5a:c9:94:6b:17:29:48:ec:30:e4:26:af:f4:88:04:df:
be:44:fd:84:12:5a:06:bd:59:90:a5:34:62:e8:9e:fc:18:57:
56:5f:c4:2c:03:e3:11:57:e3:d8:29:90:54:4d:d4:21:d7:92:
02:fe:73:26:e2:a7:74:77:5b:d9:3c:79:fd:cb:96:c6:c6:3a:
32:10:e1:10:29:b6:85:6f:c3:0a:76:60:a4:15:1b:07:61:cb:
83:01:36:ef:3f:a3:9e:96:8d:2f:a4:52:ce:42:21:fd:53:7b:
36:a9:74:38:17:a4:78:6c:e0:34:4b:03:8f:6b:9b:9b:c4:a6:
09:cf:0f:b4:e3:42:9d:de:d0:21:dc:8f:33:92:94:f8:4e:d1:
3a:20:4c:0f:32:15:08:7f:b9:8d:49:bd:e5:a2:1a:25:20:7c:
dc:43:fa:db:c2:92:de:86:93:5e:46:bb:77:c2:81:a8:a3:d2:
cc:af:56:6f:5b:0f:a9:2c:1c:00:cb:8e:06:a2:1e:02:40:7f:
fa:c5:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org