Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/c7W0hPiQSlKhIbPXZbwg3xjo6Ko.roa
File: c7W0hPiQSlKhIbPXZbwg3xjo6Ko.roa (raw, json)
Hash identifier: Qc/9Mg4cHwZykSSwsvKjKKubOXhlQOK/OcQxsymr8v0=
Subject key identifier: 73:B5:B4:84:F8:90:4A:52:A1:21:B3:D7:65:BC:20:DF:18:E8:E8:AA
Certificate issuer: /CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
Certificate serial: 01856F5DA42ABB37675D424E59A49BF9051F
Authority key identifier: 57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/c7W0hPiQSlKhIbPXZbwg3xjo6Ko.roa
Signing time: Sun 01 Jan 2023 22:04:45 +0000
ROA not before: Sun 01 Jan 2023 22:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 194.9.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:a4:2a:bb:37:67:5d:42:4e:59:a4:9b:f9:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
Validity
Not Before: Jan 1 22:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73b5b484f8904a52a121b3d765bc20df18e8e8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:eb:71:f7:bd:26:d0:fe:86:9a:a3:8a:6a:fe:
8a:90:19:85:f3:1a:67:0c:1f:6e:53:36:26:7d:5e:
7f:49:e9:44:63:05:f4:8f:f6:e1:20:96:7c:6d:58:
92:99:2d:db:01:9b:21:d4:dc:50:9a:5b:eb:be:57:
bd:0f:a6:e7:07:d7:59:41:ca:3f:c4:22:06:21:6a:
bb:a1:03:cc:5b:e0:30:f1:00:fa:6b:0a:33:c8:35:
d6:11:d9:94:8b:2e:84:52:ae:ad:6b:79:85:70:d1:
da:80:5c:4f:01:a7:ba:fd:b6:f3:5d:d8:f1:38:02:
02:e0:08:b4:51:62:f9:c4:e7:0a:54:c5:66:f6:6b:
91:bb:95:ab:78:96:09:9b:70:3e:07:c1:16:6c:d5:
78:3f:cd:23:99:b7:b8:a6:e4:e9:cc:a6:69:d5:e2:
1d:43:3d:34:6d:31:19:5e:10:1e:7d:3f:d7:79:f4:
3d:e3:9f:2e:c6:51:b1:2d:5f:d8:9e:68:fa:e3:f9:
35:b7:a0:dd:4d:76:80:ef:14:a3:9a:a9:8a:ca:28:
e7:9d:ab:2c:e9:09:b7:9f:f5:19:0f:a7:77:7d:8b:
12:42:34:9b:78:0b:05:0a:6d:d4:c2:22:10:aa:08:
7a:34:ee:ba:ee:a3:8a:65:e7:e0:70:56:07:60:1f:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:B4:84:F8:90:4A:52:A1:21:B3:D7:65:BC:20:DF:18:E8:E8:AA
X509v3 Authority Key Identifier:
keyid:57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/c7W0hPiQSlKhIbPXZbwg3xjo6Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/V8XopP5NnpGMSdsYOxFUs_ICxg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.180.0/24
Signature Algorithm: sha256WithRSAEncryption
60:15:93:b7:6a:f1:f5:55:10:b2:1c:c8:58:e5:e7:67:4f:e0:
c5:94:4a:97:1a:93:a9:58:99:af:4e:d4:de:a1:83:1d:aa:a0:
77:75:56:ba:d4:d8:b7:c6:22:70:59:01:e1:18:74:49:17:f7:
f7:54:09:76:80:6c:69:89:bd:59:8f:c0:5c:1f:99:e6:25:40:
70:1a:5f:fd:81:7a:4b:a3:03:03:37:54:18:21:19:94:fa:d1:
b1:c7:64:92:87:32:5b:35:2c:77:1a:38:5a:49:e2:74:3e:aa:
c1:95:a4:3a:67:8e:1b:20:82:c5:2e:a1:66:c8:8c:2b:bb:39:
ee:b2:d8:ae:5b:11:67:10:03:72:2e:70:58:c8:6d:00:f2:5a:
33:16:a1:bd:c4:87:df:48:f4:fb:fe:00:bf:8c:9e:e4:80:bd:
68:c1:12:ee:1e:0c:61:8c:3f:12:b7:b5:08:c4:65:6c:0d:1b:
3c:37:a1:a6:32:01:98:8b:26:3b:4c:83:f7:4b:db:76:ec:f9:
37:21:43:2a:47:3c:ad:6b:0e:41:4b:bb:e0:c4:ed:10:9a:89:
ad:ca:ca:27:ac:10:49:98:2f:0a:22:79:91:98:fb:ae:9f:e5:
af:d3:40:8f:02:8f:33:57:82:e0:82:cc:b5:4a:54:8b:5e:6c:
46:13:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:40 2024 by rpki-client on console-fra.rpki-client.org