Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/ITeyHGvsM61zDSXHkKUitbV5Dss.roa
File: ITeyHGvsM61zDSXHkKUitbV5Dss.roa (raw, json)
Hash identifier: POjULMvDZpDksVMuf2Vyhx9htj/1YuSULEUB/bwj6Jw=
Subject key identifier: 21:37:B2:1C:6B:EC:33:AD:73:0D:25:C7:90:A5:22:B5:B5:79:0E:CB
Certificate issuer: /CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Certificate serial: 0185730396306E8123BD3906D9AECD1FC5C4
Authority key identifier: BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/ITeyHGvsM61zDSXHkKUitbV5Dss.roa
Signing time: Mon 02 Jan 2023 15:04:52 +0000
ROA not before: Mon 02 Jan 2023 15:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 195.244.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:96:30:6e:81:23:bd:39:06:d9:ae:cd:1f:c5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Validity
Not Before: Jan 2 15:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2137b21c6bec33ad730d25c790a522b5b5790ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:2b:3a:fc:de:c9:37:74:7d:de:e1:4b:69:
39:a7:28:83:f7:a5:5d:aa:4b:fc:15:26:c8:ee:98:
fe:fe:4b:66:5d:2a:35:5c:52:7d:71:7c:2c:9b:b9:
1a:b4:17:a0:68:5a:87:08:8c:59:27:55:13:f8:7c:
6e:6a:cd:41:67:42:dd:4f:d1:f1:be:0b:98:50:8f:
f6:45:ac:b9:38:52:b2:ac:a1:e2:ce:be:e0:7d:76:
5c:ec:e5:0e:06:af:90:b7:60:02:fa:52:3c:dc:15:
9b:08:2b:9a:d2:63:d5:6d:2c:aa:ac:92:dd:bc:b2:
ab:95:2f:60:ba:02:ff:0b:03:9c:29:f3:9f:99:79:
15:1a:48:83:3f:68:c5:6c:da:8d:df:3a:51:cc:ce:
d6:d4:04:1c:e8:8d:a5:5c:ed:94:61:47:6a:6f:56:
7d:2e:8c:03:d7:63:18:93:ba:67:47:42:bd:c9:d0:
03:ed:95:16:5f:c6:90:92:27:cf:e6:50:a7:bd:2d:
89:bc:a0:0c:a4:85:49:57:f5:ea:3e:df:70:29:21:
c2:fc:bd:81:73:05:b2:86:a3:82:c8:78:2f:a8:d6:
d2:31:88:00:5d:6a:ef:48:fd:8f:20:2d:6f:01:58:
e2:ad:08:bd:41:9f:61:75:2e:9e:2e:fe:65:42:9b:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:B2:1C:6B:EC:33:AD:73:0D:25:C7:90:A5:22:B5:B5:79:0E:CB
X509v3 Authority Key Identifier:
keyid:BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/ITeyHGvsM61zDSXHkKUitbV5Dss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.64.0/20
Signature Algorithm: sha256WithRSAEncryption
42:08:9f:42:48:88:10:e7:9e:db:1d:d1:bf:85:ea:2e:39:4a:
e0:5e:9f:cf:7d:6d:7e:e1:59:95:8b:be:9b:64:4a:33:3d:20:
18:35:4d:6d:5b:4b:5e:5d:26:f6:74:e2:f6:b2:1b:9e:4b:88:
b5:55:05:4e:53:d9:9b:8e:d9:3b:20:26:41:b6:0f:a2:c2:af:
66:1c:18:0f:f6:0b:74:e0:92:f3:bb:2e:63:78:b7:72:a0:b0:
59:79:dd:e6:e5:9d:41:0a:9b:93:68:50:9c:fc:2d:b4:48:49:
80:85:6d:e3:2a:a2:3b:18:e2:8b:5f:9d:4e:53:49:9d:66:1c:
e2:7d:41:f2:2c:8f:ab:23:6c:f6:2a:de:4f:e3:ff:9d:24:7e:
0a:bb:7c:2f:c6:ba:68:6c:a7:44:7b:12:c9:fa:68:ac:5c:85:
40:f0:cb:75:af:ba:a6:3c:f4:57:41:bb:c5:7e:ed:82:50:bb:
07:b3:ab:ec:40:8e:29:27:ad:c0:f8:f6:b6:71:79:94:0a:f6:
ce:a7:ff:6a:1c:15:88:06:cf:24:4b:26:8a:26:fe:d0:a4:2b:
f2:e5:97:7d:36:0b:af:16:18:cd:93:95:0e:99:4b:74:0c:c9:
bc:92:ed:f0:a1:03:22:39:ac:3e:92:21:7a:1a:a0:87:9b:11:
4f:94:f7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:23 2024 by rpki-client on console-ams.rpki-client.org