Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/wJNhNXNaBzDphNyftRgdJDhAuoQ.roa
File: wJNhNXNaBzDphNyftRgdJDhAuoQ.roa (raw, json)
Hash identifier: re8K/Wq4tbN3K5T+uLYuRBBWVl/oqLxaf2tr7lxFkTk=
Subject key identifier: C0:93:61:35:73:5A:07:30:E9:84:DC:9F:B5:18:1D:24:38:40:BA:84
Certificate issuer: /CN=f34ea42e1bc7580d44ae2b19ca8be723b6f90b25
Certificate serial: 018570B98F8F72CD44687976EE33BA5FC18C
Authority key identifier: F3:4E:A4:2E:1B:C7:58:0D:44:AE:2B:19:CA:8B:E7:23:B6:F9:0B:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/806kLhvHWA1ErisZyovnI7b5CyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/wJNhNXNaBzDphNyftRgdJDhAuoQ.roa
Signing time: Mon 02 Jan 2023 04:24:47 +0000
ROA not before: Mon 02 Jan 2023 04:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:8f:8f:72:cd:44:68:79:76:ee:33:ba:5f:c1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f34ea42e1bc7580d44ae2b19ca8be723b6f90b25
Validity
Not Before: Jan 2 04:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0936135735a0730e984dc9fb5181d243840ba84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:4c:29:d8:c0:75:a8:d7:82:37:b5:2e:da:
3c:f2:31:10:ae:f4:11:1e:d0:1d:82:96:fb:ee:57:
41:3d:b8:09:a5:c9:d9:1b:da:4e:9c:7e:2a:eb:cf:
76:24:95:ab:98:cd:7d:69:04:a2:66:aa:ac:e2:cb:
a3:c2:2b:97:fb:8f:b6:b6:60:1e:3a:80:5b:93:a7:
9d:e6:69:e3:ad:b1:59:10:88:22:40:0e:14:c3:56:
1b:bd:f7:85:11:29:c0:ef:95:c9:49:bb:17:e8:61:
27:bc:92:87:cb:0e:fd:c9:47:0c:17:88:11:7d:7f:
45:86:6f:e4:cc:1e:fd:04:f0:b6:8b:a9:57:fe:ed:
7a:6c:8d:0f:57:e2:67:7d:29:a1:8a:c0:2f:e2:56:
14:74:6f:87:93:82:34:1e:93:cb:71:6a:ee:60:2b:
2a:84:f8:6a:d4:7e:be:40:91:2d:4f:af:dc:fd:60:
7c:ee:ee:6d:2a:f4:5e:76:7a:4f:52:f0:c2:67:b7:
0c:15:6a:cc:5d:5a:63:8c:a9:df:b2:31:8a:d1:5f:
a7:9b:50:88:cf:a0:cf:d2:2f:f3:b6:0b:80:fe:5d:
01:57:cd:e5:77:ed:93:4a:c9:55:c9:33:ab:e9:4e:
d8:a7:1d:2d:32:42:a5:83:7c:f2:5e:43:93:37:65:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:61:35:73:5A:07:30:E9:84:DC:9F:B5:18:1D:24:38:40:BA:84
X509v3 Authority Key Identifier:
keyid:F3:4E:A4:2E:1B:C7:58:0D:44:AE:2B:19:CA:8B:E7:23:B6:F9:0B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/806kLhvHWA1ErisZyovnI7b5CyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/wJNhNXNaBzDphNyftRgdJDhAuoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/806kLhvHWA1ErisZyovnI7b5CyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.127.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b9:f0:61:63:7e:bc:85:2c:06:c4:83:1b:cb:05:6d:ac:70:
b4:82:6c:46:55:e9:33:29:6f:91:8b:60:b2:c1:00:6d:47:46:
58:0a:a9:ae:c7:56:4a:76:55:2e:3f:b5:cc:82:56:61:89:d7:
fa:c6:9c:67:f6:f9:d4:7c:94:0d:e8:9c:c9:c6:18:86:a1:2b:
be:eb:66:8a:86:70:d1:29:ef:9e:5e:21:9c:e8:fd:68:07:30:
bf:4b:c3:85:3e:3d:1a:78:ca:13:f7:ce:ee:ee:5b:7b:cb:0c:
9c:12:84:eb:97:2c:d4:c1:24:e3:cc:ce:bf:c8:18:0d:15:f5:
9f:f3:e9:5e:79:83:58:2b:e8:9a:0c:c7:80:c3:b9:19:a8:34:
86:09:f7:a0:49:82:21:d4:67:1a:b8:92:d8:c2:28:41:b5:ad:
c6:85:5d:95:12:b1:2c:c1:6a:7f:21:8b:33:87:52:5b:ef:77:
a0:ba:29:11:67:10:e7:92:68:2a:50:9f:46:be:08:f0:0d:9e:
20:ab:98:79:7a:f2:44:60:1f:47:01:3b:c1:5b:4a:89:3d:56:
f7:d8:7f:4d:f5:07:5c:93:10:ec:8a:8a:1b:92:1b:d8:67:24:
13:b9:34:7e:df:59:3a:3d:a0:52:24:77:89:e6:51:7f:6e:42:
e9:e4:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:00 2024 by rpki-client on console-fra.rpki-client.org