Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/TVzRZfQ4YsSEESQzIbaZ23PPUEM.roa
File: TVzRZfQ4YsSEESQzIbaZ23PPUEM.roa (raw, json)
Hash identifier: UTBcfF8+2Zo0Ocuj9TS7VVTZENaX2FGZtN/CX/5k8Ms=
Subject key identifier: 4D:5C:D1:65:F4:38:62:C4:84:11:24:33:21:B6:99:DB:73:CF:50:43
Certificate issuer: /CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Certificate serial: 0185730397A2DA7B82D527FA9B9B54A64112
Authority key identifier: BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/TVzRZfQ4YsSEESQzIbaZ23PPUEM.roa
Signing time: Mon 02 Jan 2023 15:04:53 +0000
ROA not before: Mon 02 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205069
IP address blocks: 195.244.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:97:a2:da:7b:82:d5:27:fa:9b:9b:54:a6:41:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Validity
Not Before: Jan 2 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d5cd165f43862c48411243321b699db73cf5043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:81:05:dc:b1:a7:c3:e4:63:82:9d:a1:b8:
76:67:21:78:62:34:3c:63:62:65:19:b1:b5:a3:62:
ed:e9:87:2e:06:ab:a7:04:22:ac:a6:16:51:62:f2:
31:ba:95:23:b8:f6:ea:7a:6b:b8:6c:29:f4:6f:ac:
f1:16:a7:c7:ef:86:14:e7:d8:1e:83:1e:a7:12:26:
4b:2f:84:66:c7:a7:3a:6d:5a:26:01:bf:03:2f:b2:
8c:f6:63:7b:c2:0d:23:37:86:b0:fa:af:d9:50:24:
13:f5:47:5a:b7:15:ec:2a:53:90:54:75:2a:80:58:
86:9a:5a:8a:c9:c1:9e:86:d7:14:5f:ef:be:f5:55:
16:5a:7c:d3:e4:23:7b:06:f4:ee:07:48:c2:72:8a:
7a:df:25:86:14:cb:53:fc:41:4c:64:c7:ba:9f:26:
12:63:c7:bb:55:42:a5:9a:aa:99:7d:5f:a2:ba:35:
33:15:c8:4c:66:3c:0a:8a:1f:fb:58:4b:0c:ba:81:
05:4d:83:9a:1c:7f:b2:34:01:e4:fb:4f:9f:ad:f5:
f1:da:1e:2a:26:42:6b:51:54:ed:a3:b7:37:b6:83:
23:80:e8:14:91:9f:a5:d1:89:d3:b6:0d:25:ba:f9:
46:79:83:5c:8e:33:6e:3a:d8:5a:ef:02:9e:50:7a:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:D1:65:F4:38:62:C4:84:11:24:33:21:B6:99:DB:73:CF:50:43
X509v3 Authority Key Identifier:
keyid:BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/TVzRZfQ4YsSEESQzIbaZ23PPUEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.92.0/24
Signature Algorithm: sha256WithRSAEncryption
11:81:24:40:45:18:3d:cb:a7:fe:d7:19:98:67:f5:88:0d:f4:
65:82:ec:3e:b3:d1:19:f6:c3:cb:a2:ab:b4:a8:95:60:a5:16:
f1:06:03:5e:87:0a:ea:47:9c:2d:61:9b:0a:d7:04:b1:db:f6:
16:21:c0:bb:39:15:2b:af:2e:3f:1b:bc:b9:da:ac:9d:e8:fd:
b8:bf:9d:39:33:39:30:a5:90:c1:97:aa:f6:10:44:59:58:19:
ab:b4:d9:7e:a9:47:77:3f:49:6a:61:4e:2f:13:b3:46:7d:a3:
40:1c:db:9f:66:6b:5d:06:28:33:b8:98:08:1a:77:e4:05:c9:
b5:b1:fe:17:72:8c:c3:ae:af:84:0f:79:eb:40:98:a1:20:47:
5d:41:78:f0:66:8d:a8:cd:54:97:77:fb:ec:39:87:a9:33:eb:
56:0d:2f:8a:f2:2c:51:cf:0d:ef:55:c7:a5:58:eb:0c:0e:e5:
1b:7e:db:6c:4a:18:da:c4:11:a3:77:97:e0:59:9a:c3:02:6b:
e6:ce:e5:9e:a7:6b:5a:c8:e8:2a:a1:ed:ec:58:2c:e5:17:a4:
e0:dd:df:5b:75:dd:ee:c0:5a:e9:a1:aa:30:0d:f3:d2:fc:2c:
19:06:0f:bb:d0:03:a4:85:6e:f0:a2:57:ad:69:5e:ab:79:12:
cc:0f:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org