Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/6TJIfykLCy5mkEsIrjr5SnJ52qc.roa
File: 6TJIfykLCy5mkEsIrjr5SnJ52qc.roa (raw, json)
Hash identifier: OOezUKfpsXcqyBwPKk3OfDVzEnwz9Uzwx5cSUW/pLlI=
Subject key identifier: E9:32:48:7F:29:0B:0B:2E:66:90:4B:08:AE:3A:F9:4A:72:79:DA:A7
Certificate issuer: /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial: 018CC3B69E1249D2BFD5D99416530D45CAD5
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/6TJIfykLCy5mkEsIrjr5SnJ52qc.roa
Signing time: Mon 01 Jan 2024 06:29:34 +0000
ROA not before: Mon 01 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207480
IP address blocks: 195.39.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9e:12:49:d2:bf:d5:d9:94:16:53:0d:45:ca:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Validity
Not Before: Jan 1 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e932487f290b0b2e66904b08ae3af94a7279daa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:73:6a:63:e1:1c:c0:f0:16:36:ff:98:d2:
54:c3:4e:17:e1:ef:f4:f1:3f:51:bb:26:0d:08:b7:
d9:db:e3:6b:e6:50:c7:a2:d4:dc:2c:1d:24:87:49:
c0:84:48:16:4f:2b:62:05:f7:ee:7f:21:f8:92:f0:
78:74:62:b9:32:79:49:e9:63:6f:64:00:fa:b2:e9:
be:97:d5:b2:2f:49:dc:7d:a3:bd:3d:2c:17:ec:16:
47:25:64:98:07:f9:c5:de:cb:f3:92:36:8d:ec:d7:
9f:40:c6:1a:8c:63:1a:0b:56:10:fd:a3:e5:9a:7e:
60:f7:cb:5c:96:4c:1b:39:05:f3:fd:e7:ea:a1:18:
12:03:cb:2e:5f:c7:e3:31:43:69:e0:6d:9e:7e:bc:
34:d2:a4:3c:0c:de:74:46:cb:db:87:7e:fe:5e:b2:
16:be:be:e3:9f:a0:d6:57:31:d0:a4:14:85:18:fd:
f7:54:8e:01:97:93:dd:b7:a4:e7:f1:6b:9b:41:19:
b5:37:d4:76:e2:42:ba:93:13:bd:df:17:4b:b8:68:
da:3f:03:83:f0:10:54:59:67:db:87:f8:ae:c5:57:
13:7b:07:82:f8:8f:fe:c9:a2:0f:f3:a7:79:05:e0:
64:fd:98:34:d5:55:4c:9a:c0:f7:1b:b1:d5:49:ee:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:48:7F:29:0B:0B:2E:66:90:4B:08:AE:3A:F9:4A:72:79:DA:A7
X509v3 Authority Key Identifier:
keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/6TJIfykLCy5mkEsIrjr5SnJ52qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.220.0/24
Signature Algorithm: sha256WithRSAEncryption
68:18:7a:3b:8d:bf:76:d2:86:96:7a:f8:a0:06:da:99:d4:d0:
2b:74:bd:f6:93:6f:a2:4e:a6:be:4b:7f:a1:d0:1a:c3:72:81:
85:5f:3f:e0:5d:c8:27:91:d0:fb:d7:81:52:91:b7:15:4e:82:
a0:74:ac:ad:da:3e:af:83:fe:fa:82:b2:72:42:f6:5f:d4:b0:
5a:77:70:5a:89:36:dd:12:bf:65:61:50:ba:56:4d:0f:3f:35:
2a:68:b3:21:99:d1:3a:5b:28:41:88:23:e9:80:28:cc:83:95:
16:d9:8c:0b:82:0f:81:e7:02:8e:c9:43:32:07:91:b4:99:94:
40:08:67:19:58:bc:96:9e:e2:c8:06:f3:9f:b6:b0:ac:99:4f:
d4:b0:d7:48:2d:23:ca:37:b6:6f:0b:93:8a:94:63:32:83:ed:
92:e7:4c:26:2e:dc:c7:1f:2d:b9:0c:1b:47:75:9e:0c:7d:57:
08:1e:c9:4f:b2:0a:15:d6:4e:75:2d:8c:03:3a:c7:43:8e:15:
04:36:71:aa:e8:dc:ee:59:64:2f:af:da:1f:77:21:19:16:42:
a2:d5:16:c7:fd:c3:c7:73:4a:20:e2:86:32:8d:be:04:a2:71:
b5:57:6e:1a:f3:8e:74:f2:66:34:a5:fe:95:c9:60:70:ff:cf:
56:68:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:13 2024 by rpki-client on console-ams.rpki-client.org