Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/Exj1ZMbH4xBs4IwnxzbcfwkSWxE.roa
File: Exj1ZMbH4xBs4IwnxzbcfwkSWxE.roa (raw, json)
Hash identifier: R+r3pK62nm+HxsjwlbvUUEzZDsz0FbxJgoL4TUN/PZo=
Subject key identifier: 13:18:F5:64:C6:C7:E3:10:6C:E0:8C:27:C7:36:DC:7F:09:12:5B:11
Certificate issuer: /CN=6c86838aae16bc368182714fcb4f8eaf87c80fcf
Certificate serial: 01856C25DCF4F2830A30FC600B356E16206D
Authority key identifier: 6C:86:83:8A:AE:16:BC:36:81:82:71:4F:CB:4F:8E:AF:87:C8:0F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIaDiq4WvDaBgnFPy0-Or4fID88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/Exj1ZMbH4xBs4IwnxzbcfwkSWxE.roa
Signing time: Sun 01 Jan 2023 07:04:58 +0000
ROA not before: Sun 01 Jan 2023 07:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 195.60.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:dc:f4:f2:83:0a:30:fc:60:0b:35:6e:16:20:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86838aae16bc368182714fcb4f8eaf87c80fcf
Validity
Not Before: Jan 1 07:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1318f564c6c7e3106ce08c27c736dc7f09125b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:f3:50:f0:e7:f2:78:d7:33:f6:59:11:ee:
f3:46:7f:a1:cd:d9:16:02:f8:2b:1f:54:07:2a:2d:
1f:d7:d6:94:43:3e:5a:e4:ea:ea:20:e3:90:48:9c:
41:cb:6a:94:5e:d5:df:69:9b:9a:93:28:7c:33:2b:
3f:e0:45:f4:e9:a1:71:f5:10:ef:fd:ca:51:2d:7b:
c9:94:05:cf:39:6f:4a:f9:d8:ad:1b:22:ba:30:77:
a6:34:d3:b2:a5:4b:b4:03:cc:32:10:5d:65:46:99:
d1:cf:64:29:c7:65:55:02:62:ee:29:f7:bb:d7:8d:
f5:4a:34:7c:9d:6e:74:db:74:aa:d4:1e:2d:8e:66:
d3:6a:5d:5c:4c:fa:20:84:6b:71:c8:6a:7a:68:8a:
7f:a8:82:41:56:47:64:89:ca:9b:1c:4d:a0:be:77:
e2:02:04:17:1f:a9:9f:da:3a:a9:72:f5:ad:6c:10:
43:bb:8e:a2:2b:eb:45:2b:98:82:90:78:6b:08:3d:
65:ef:0f:4c:ea:2b:64:a2:dd:16:af:59:46:6b:0f:
e0:d6:00:f4:7d:13:3d:98:92:64:19:92:02:a0:24:
1b:09:fd:7e:63:97:1d:82:b7:2f:fe:4f:21:7d:e8:
19:4f:7b:ae:b8:6d:62:e3:b3:a9:31:7b:8b:f2:6a:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:F5:64:C6:C7:E3:10:6C:E0:8C:27:C7:36:DC:7F:09:12:5B:11
X509v3 Authority Key Identifier:
keyid:6C:86:83:8A:AE:16:BC:36:81:82:71:4F:CB:4F:8E:AF:87:C8:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIaDiq4WvDaBgnFPy0-Or4fID88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/Exj1ZMbH4xBs4IwnxzbcfwkSWxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/bIaDiq4WvDaBgnFPy0-Or4fID88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:08:2b:cd:e1:40:32:eb:f4:b0:91:ed:75:07:91:a2:80:2b:
c1:11:61:ba:5c:e4:bc:09:b8:97:1c:48:93:8c:09:92:e2:34:
f4:8c:91:28:1f:68:9a:ba:6d:43:cc:96:8d:4b:b9:15:19:a3:
97:64:3c:b4:32:15:64:89:5b:af:d1:0c:90:12:b7:8f:a1:dc:
5c:64:34:cf:24:57:57:ff:12:72:5d:7a:6e:34:37:f7:94:15:
0d:38:1b:d9:19:96:98:9d:8d:55:ca:79:ae:39:d5:3d:c7:b0:
a7:13:cd:2e:39:4f:6f:49:49:a8:32:eb:34:f2:1c:cd:d5:fd:
dc:43:8d:21:06:d1:75:3c:8e:ab:88:33:92:40:f2:93:07:cf:
08:0f:19:b6:1f:ea:fe:dc:3a:9b:b7:4e:91:41:3e:e8:af:c9:
fd:4d:9e:85:ef:42:07:8d:79:6d:7c:03:6f:18:0b:a6:12:6b:
33:f6:d1:bd:57:19:0d:81:f9:cb:ee:2d:db:08:83:58:f8:6a:
2c:41:e0:59:ab:26:1c:47:17:4c:97:ee:66:4f:2e:85:28:3c:
e1:3f:60:60:75:8d:7e:9c:65:bf:14:e5:15:f1:d1:63:b1:ba:
5e:cb:06:0c:b2:02:a5:7c:ff:d9:fd:08:83:95:9c:8d:8b:18:
54:80:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:02 2024 by rpki-client on console-ams.rpki-client.org