Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/ptzy-laO6LsCk2nVChzwI3ZC4ys.roa
File: ptzy-laO6LsCk2nVChzwI3ZC4ys.roa (raw, json)
Hash identifier: nr5pgi+6DdAsEh9ZkOmDvvSSp0ykiWYgJ+ddXC0YW2I=
Subject key identifier: A6:DC:F2:FA:56:8E:E8:BB:02:93:69:D5:0A:1C:F0:23:76:42:E3:2B
Certificate issuer: /CN=f34ea42e1bc7580d44ae2b19ca8be723b6f90b25
Certificate serial: 018CCA2A3511E452AEB692FD4CB57FC63AAB
Authority key identifier: F3:4E:A4:2E:1B:C7:58:0D:44:AE:2B:19:CA:8B:E7:23:B6:F9:0B:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/806kLhvHWA1ErisZyovnI7b5CyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/ptzy-laO6LsCk2nVChzwI3ZC4ys.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:35:11:e4:52:ae:b6:92:fd:4c:b5:7f:c6:3a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f34ea42e1bc7580d44ae2b19ca8be723b6f90b25
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6dcf2fa568ee8bb029369d50a1cf0237642e32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:d7:fe:ec:4d:90:d0:fb:67:0e:78:79:36:
26:72:b5:9b:09:e7:c2:e0:b7:d8:b0:05:24:8c:da:
b4:db:05:41:26:0b:bf:bf:19:c4:2f:84:de:c5:63:
66:6a:74:72:0b:12:3a:05:2b:2e:dc:ba:83:fd:94:
9b:73:af:4e:f2:68:92:4e:4a:2c:3c:6a:58:71:e6:
9b:d4:92:fe:99:5f:a5:e6:8e:43:c7:5c:86:22:e7:
ff:e9:cb:e6:ff:9e:ce:9f:2f:05:50:5f:ca:29:69:
4e:c6:9e:1d:73:ea:af:df:f0:a4:bc:d0:d1:e5:78:
df:dc:f6:48:6c:63:e7:03:9c:a4:81:46:8f:97:d2:
c7:da:00:c6:4b:a9:a7:57:61:17:3a:41:32:8f:7c:
bf:c1:c2:e0:24:3e:56:08:13:3e:68:1c:c1:41:a8:
ab:a1:5d:b7:9b:23:08:28:37:f2:35:ea:3d:4c:d7:
75:3e:1e:ba:be:02:3d:74:54:9d:c6:39:61:d1:5d:
98:24:0b:69:4a:1f:4d:bc:7a:64:79:3c:05:76:09:
35:ac:1f:1c:6a:fb:29:19:dd:ea:4d:14:85:cd:f4:
21:c7:b1:f2:93:01:ff:c1:b9:06:d1:19:be:89:b8:
73:50:21:a9:db:0e:6e:60:6c:14:48:73:06:f1:9a:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DC:F2:FA:56:8E:E8:BB:02:93:69:D5:0A:1C:F0:23:76:42:E3:2B
X509v3 Authority Key Identifier:
keyid:F3:4E:A4:2E:1B:C7:58:0D:44:AE:2B:19:CA:8B:E7:23:B6:F9:0B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/806kLhvHWA1ErisZyovnI7b5CyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/ptzy-laO6LsCk2nVChzwI3ZC4ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/806kLhvHWA1ErisZyovnI7b5CyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.127.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2e:3b:b9:59:11:ba:1a:b8:2b:34:95:f8:b7:15:c7:c7:b2:
6d:8d:b8:08:db:5b:3f:db:89:28:6e:ce:50:2d:92:1b:49:53:
0e:4e:83:ab:dc:6f:6a:1b:b6:28:d5:83:0d:39:c3:43:df:66:
2d:3d:45:7b:8e:d6:de:69:fd:99:22:9b:a9:51:2e:d7:11:b0:
78:a3:3a:5d:16:0b:6e:ed:a5:ef:69:00:95:37:97:22:a8:f2:
28:2e:83:09:04:42:cc:00:85:09:94:98:e8:f4:c2:57:86:57:
70:22:f1:f3:51:73:9e:af:b5:e8:83:95:60:10:61:53:5a:23:
20:0c:8c:e7:42:74:d2:14:ab:c1:ac:55:c8:6c:7f:a9:c7:d9:
4a:10:0d:c9:f8:15:b7:ff:f5:cc:ad:a4:a8:36:d2:6b:2c:55:
01:cf:7a:9e:94:39:30:00:0c:03:1a:7b:c8:89:e4:ab:d8:b2:
68:30:54:80:25:b8:6c:6b:6a:1b:fa:f5:16:72:f7:96:1a:97:
18:ad:78:d1:21:7d:13:9c:7d:f0:7b:45:33:0d:56:d7:d1:5c:
a1:dd:85:cc:fb:76:7e:ef:fc:37:d8:aa:00:3e:16:5b:3f:aa:
77:56:cf:96:a5:7c:49:e7:13:56:04:ab:d4:6d:6c:54:e1:55:
47:94:b4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:00 2024 by rpki-client on console-fra.rpki-client.org