Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/tZ4aCWlqunqRloMPsSmgbF7cEto.roa
File: tZ4aCWlqunqRloMPsSmgbF7cEto.roa (raw, json)
Hash identifier: 9p1c+hIh/ucKbiLECMtP6DlWpjzjVmIqhZ5iS7McGug=
Subject key identifier: B5:9E:1A:09:69:6A:BA:7A:91:96:83:0F:B1:29:A0:6C:5E:DC:12:DA
Certificate issuer: /CN=866dee727e83997c0203c0f718d33b93d77d821d
Certificate serial: 01857230F9FE13875D91F291C2F9251C6C60
Authority key identifier: 86:6D:EE:72:7E:83:99:7C:02:03:C0:F7:18:D3:3B:93:D7:7D:82:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/tZ4aCWlqunqRloMPsSmgbF7cEto.roa
Signing time: Mon 02 Jan 2023 11:14:50 +0000
ROA not before: Mon 02 Jan 2023 11:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 195.64.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:f9:fe:13:87:5d:91:f2:91:c2:f9:25:1c:6c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866dee727e83997c0203c0f718d33b93d77d821d
Validity
Not Before: Jan 2 11:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b59e1a09696aba7a9196830fb129a06c5edc12da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:22:41:dd:25:4a:4a:5d:d8:1d:ad:c3:58:
4c:6e:69:b5:9a:11:2a:05:85:75:f5:08:6d:7a:2c:
7d:10:ba:d0:a8:b1:e7:a7:b5:13:26:72:98:10:66:
cc:f9:0c:67:de:83:2a:7e:c0:88:a8:e6:d1:48:6e:
4d:2a:13:e6:79:77:9b:9f:b2:a9:af:1d:54:3d:6e:
b9:6e:6f:7e:e6:d3:7c:a7:ae:3e:97:5a:94:ea:e8:
4f:6d:6b:c7:cc:b0:a2:7e:4f:73:94:96:74:59:18:
73:36:e7:d0:bd:a5:6a:7c:91:86:e2:20:d8:1a:7a:
79:17:a6:be:36:1a:2b:f5:39:51:54:89:f9:5b:3c:
72:37:d3:2f:77:d6:db:fd:66:53:b9:d4:fa:44:bc:
0f:b6:27:75:64:8d:58:31:30:1b:da:71:79:d6:f2:
b0:c4:7c:af:1b:1a:22:d8:d7:d8:7a:e2:56:6a:02:
16:fb:8c:0e:66:13:ff:32:1e:d0:28:61:0a:3a:d7:
1d:4d:e6:a3:9c:72:9a:96:00:5f:eb:35:bf:c9:e8:
11:08:2c:99:5f:ae:d0:d1:0c:29:b1:12:df:a6:1b:
30:1f:12:dc:57:66:ec:e8:84:1d:69:b8:78:02:f5:
93:4f:7b:fd:92:51:d7:b4:75:51:45:b8:6b:e4:cf:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:1A:09:69:6A:BA:7A:91:96:83:0F:B1:29:A0:6C:5E:DC:12:DA
X509v3 Authority Key Identifier:
keyid:86:6D:EE:72:7E:83:99:7C:02:03:C0:F7:18:D3:3B:93:D7:7D:82:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/tZ4aCWlqunqRloMPsSmgbF7cEto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:30:0a:e6:99:d3:f8:f2:d6:94:fc:14:3b:37:e1:22:b7:80:
95:c3:cc:bd:9a:38:70:a3:a5:81:f8:33:44:8b:f1:71:06:5c:
4d:b0:e6:59:14:75:75:24:77:20:ef:66:46:48:b8:b8:55:52:
1d:d4:b7:c7:de:8f:67:72:b6:a4:6f:68:54:62:05:50:ab:3d:
73:6d:74:61:15:9d:11:04:03:ed:6d:88:6a:6b:36:26:c6:fc:
6f:62:5c:b1:6e:5c:88:a2:c9:40:e4:5e:f1:c5:aa:80:dd:e5:
d9:0b:b8:5d:07:4f:5d:07:d2:31:7a:03:08:e0:76:f1:b2:d7:
ca:d3:44:d9:dd:c6:d0:67:51:ad:1b:0d:40:c2:3b:ff:ab:77:
46:66:0d:34:e7:c0:d5:de:b8:e9:09:98:86:0e:68:ed:a5:53:
43:4d:9f:fe:ea:8c:e0:8e:89:04:d6:11:d5:24:d0:e2:06:2d:
0f:43:b6:f8:c1:40:06:5f:76:24:8f:3a:3e:91:ee:a8:19:93:
b3:0f:f8:f3:b2:6f:d6:f1:5f:fd:05:7d:35:9b:ab:cf:a9:73:
8d:b8:50:3d:63:66:e2:34:da:79:da:c5:a3:2e:22:4a:35:fe:
e5:ac:5f:74:d8:a6:ce:56:df:c0:56:20:bd:01:fb:42:18:04:
f2:9e:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:13 2024 by rpki-client on console-fra.rpki-client.org