Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/206bc6-f377-44b9-b53a-65ec722e7a92/1/sux2kpKJ-CCcNGX2-ZFBdPAaWMc.roa
File: sux2kpKJ-CCcNGX2-ZFBdPAaWMc.roa (raw, json)
Hash identifier: BXCyKol8LW+1Z21yDqDRx8u80FzcIOL1HeXSqRrCfA8=
Subject key identifier: B2:EC:76:92:92:89:F8:20:9C:34:65:F6:F9:91:41:74:F0:1A:58:C7
Certificate issuer: /CN=7835f76d377a3387f1f0fc4f47bd88dc90aa69fb
Certificate serial: 012A4A
Authority key identifier: 78:35:F7:6D:37:7A:33:87:F1:F0:FC:4F:47:BD:88:DC:90:AA:69:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDX3bTd6M4fx8PxPR72I3JCqafs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/206bc6-f377-44b9-b53a-65ec722e7a92/1/sux2kpKJ-CCcNGX2-ZFBdPAaWMc.roa
Signing time: Thu 27 Jan 2022 09:36:27 +0000
ROA not before: Thu 27 Jan 2022 09:36:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 195.64.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76362 (0x12a4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7835f76d377a3387f1f0fc4f47bd88dc90aa69fb
Validity
Not Before: Jan 27 09:36:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2ec76929289f8209c3465f6f9914174f01a58c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:4c:da:e0:ce:b8:cf:ee:67:41:ba:e4:c5:
2d:1b:c8:7e:40:57:6f:5c:07:0a:5f:a6:b0:29:97:
27:7d:31:59:e4:96:c5:dc:46:f8:ef:b7:92:56:1c:
b5:2d:4b:c4:0d:bb:53:99:81:f4:98:fa:2b:a6:49:
92:f4:ac:a1:5d:f4:3e:80:9b:44:78:c2:15:54:9c:
54:1a:c2:fb:b4:0d:70:2c:35:a1:da:f3:51:0e:44:
80:c0:01:b3:b0:71:19:89:93:45:0a:08:a3:79:4d:
70:4d:a9:e2:7f:63:d0:49:c6:52:e8:49:c7:9f:90:
30:5a:b1:03:51:8c:7e:bf:c3:15:0a:1c:5a:66:bb:
09:3e:b3:44:c8:87:d9:9a:2b:85:ed:d4:3a:6f:42:
a8:78:0c:d7:54:26:fe:1e:02:1a:16:36:7e:15:76:
d9:62:00:8d:de:69:28:74:22:7f:a0:61:aa:e2:e8:
af:8d:c5:06:c5:a2:9a:b5:92:5c:58:29:75:b2:d4:
2f:8b:6f:56:9d:c3:81:c6:2a:e6:6f:99:c7:93:63:
41:97:0e:f1:28:aa:90:c6:aa:94:af:71:dc:53:66:
7e:8f:f9:57:f7:24:42:72:bb:99:ff:60:8f:1b:a2:
0f:e4:a0:10:c5:f6:53:80:7b:c9:1a:21:d0:0b:6e:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:76:92:92:89:F8:20:9C:34:65:F6:F9:91:41:74:F0:1A:58:C7
X509v3 Authority Key Identifier:
keyid:78:35:F7:6D:37:7A:33:87:F1:F0:FC:4F:47:BD:88:DC:90:AA:69:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDX3bTd6M4fx8PxPR72I3JCqafs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/206bc6-f377-44b9-b53a-65ec722e7a92/1/sux2kpKJ-CCcNGX2-ZFBdPAaWMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/206bc6-f377-44b9-b53a-65ec722e7a92/1/eDX3bTd6M4fx8PxPR72I3JCqafs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:73:94:27:6d:38:97:23:ea:f5:78:5e:44:af:00:f8:1a:4e:
33:42:4c:1f:25:a8:d0:11:d4:7c:63:a1:97:ab:56:00:cb:69:
cc:26:81:c2:40:da:b9:bb:3b:cc:b2:75:cd:8b:04:5a:a7:9e:
c3:b3:f0:2e:f4:5c:1c:c9:f5:97:c3:0a:a4:d5:81:7c:ef:d9:
0b:a3:a7:00:08:5a:42:74:29:bd:fc:fd:2a:3b:1d:7e:1d:2c:
3b:f8:3e:d1:a3:e0:4d:39:59:3c:46:7c:e0:7d:fd:eb:6c:33:
0b:6b:5f:70:aa:a2:eb:e1:72:cf:0e:a8:9f:a8:d5:2d:f8:fe:
6a:5e:49:5b:60:4e:f5:0f:d0:7b:49:0d:85:dc:5b:f4:01:1e:
6f:d5:c7:c7:48:35:aa:de:b8:ac:4e:69:d6:e0:0f:64:fd:48:
d3:af:c7:3b:eb:62:90:fd:e5:0b:cb:0c:38:ae:53:08:b0:48:
3b:b4:3d:ae:7a:61:fb:8c:7c:2a:e0:6f:bd:0d:5e:5c:d5:4f:
c8:ba:95:ec:92:a5:69:df:1b:35:85:e7:c4:7f:44:77:71:fc:
e8:72:2d:98:ed:bd:c8:62:56:e8:5d:75:1a:38:b4:7b:43:4e:
dd:ca:3f:7a:d4:a5:8d:fb:df:f5:d1:83:3b:c0:3e:ff:13:59:
84:16:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:37 2024 by rpki-client on console-fra.rpki-client.org