Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/tbLYcQi5reUOlBShnemehD36f4I.roa
File: tbLYcQi5reUOlBShnemehD36f4I.roa (raw, json)
Hash identifier: k+ASJQWnLVZVLdRuO2KhuY5UdlxEnIU4k/EyRdalmRs=
Subject key identifier: B5:B2:D8:71:08:B9:AD:E5:0E:94:14:A1:9D:E9:9E:84:3D:FA:7F:82
Certificate issuer: /CN=daa27995228f4f8176637aacc3a16471a88d8423
Certificate serial: 0183117B45874C2EB236A247B513EC9694BA
Authority key identifier: DA:A2:79:95:22:8F:4F:81:76:63:7A:AC:C3:A1:64:71:A8:8D:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/tbLYcQi5reUOlBShnemehD36f4I.roa
Signing time: Tue 06 Sep 2022 06:27:14 +0000
ROA not before: Tue 06 Sep 2022 06:27:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34761
IP address blocks: 217.194.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:7b:45:87:4c:2e:b2:36:a2:47:b5:13:ec:96:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa27995228f4f8176637aacc3a16471a88d8423
Validity
Not Before: Sep 6 06:27:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5b2d87108b9ade50e9414a19de99e843dfa7f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:74:a1:41:ba:86:3a:cd:20:de:bf:ae:42:
a3:d9:01:be:1d:58:d2:52:8e:0d:35:0e:c6:58:c2:
ea:7c:cf:f6:60:a2:59:34:33:88:61:32:81:ba:ae:
73:3c:63:6d:04:3e:44:d9:6e:ad:67:52:da:0c:34:
0a:c2:1d:b5:4b:9e:5b:31:c9:7d:90:c3:4c:56:25:
17:49:4f:f9:7b:8d:9f:29:fe:01:6b:16:d9:f5:cb:
87:8e:fb:da:4a:bd:3b:e7:6b:99:aa:8d:cc:9d:3e:
6f:b9:e3:bc:29:43:58:40:ac:9c:d2:23:ca:af:4a:
9d:f4:d2:bd:3f:83:5e:69:3b:53:12:7c:47:32:17:
34:c0:24:4b:ae:3d:90:2f:b5:eb:55:e8:f9:19:59:
f2:90:09:0a:9c:a1:2d:0c:00:28:21:1c:73:d6:4e:
17:24:f7:d5:5e:c3:0b:cf:e8:7b:5f:9b:74:29:a6:
6a:e1:74:20:0b:77:ee:16:b5:ab:03:a5:7c:ca:5f:
4e:7d:50:e0:3c:e8:d6:68:b0:fe:ce:08:f4:76:64:
3d:2e:95:68:48:85:83:a7:14:16:86:92:11:e3:dc:
6d:cf:97:78:c1:11:88:e6:21:b7:a8:be:d4:78:ee:
7b:91:1d:d7:07:25:18:d7:67:28:28:b4:99:fe:9d:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B2:D8:71:08:B9:AD:E5:0E:94:14:A1:9D:E9:9E:84:3D:FA:7F:82
X509v3 Authority Key Identifier:
keyid:DA:A2:79:95:22:8F:4F:81:76:63:7A:AC:C3:A1:64:71:A8:8D:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/tbLYcQi5reUOlBShnemehD36f4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/69be21-8f43-4bb7-94bf-2314148c15dc/1/2qJ5lSKPT4F2Y3qsw6FkcaiNhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:72:33:a3:30:03:3a:1c:82:af:9c:9f:d1:47:a6:80:f1:79:
f4:d8:0b:63:92:fe:03:d8:c2:2f:35:58:17:31:a3:47:d0:cb:
0a:63:44:ce:1d:f2:19:8f:29:88:a4:d9:2b:67:7c:bf:62:b1:
1c:57:09:c7:65:e1:cf:2b:75:00:39:19:d4:71:4e:45:ad:ab:
1a:74:e5:22:0f:0f:a5:d6:63:88:b0:30:f9:2f:7f:3f:3c:23:
19:0a:4b:63:de:bd:8b:d0:eb:92:fb:b3:b2:b3:88:de:92:1c:
bd:95:85:9d:ff:bf:8c:8d:da:79:ce:52:8e:28:20:5d:b2:13:
03:07:12:ea:78:ea:05:4e:db:8f:e0:30:3a:26:00:d4:b7:72:
37:34:9a:eb:1e:f7:14:cf:eb:df:fe:7d:58:c2:a4:33:7e:36:
cb:f6:7b:8c:c9:e2:c1:71:8c:f4:43:cd:71:a8:38:3f:93:c1:
0e:3a:e0:b8:91:0f:14:5b:f4:e8:53:f3:ab:f6:03:ee:4e:a8:
95:97:c9:a8:aa:97:f0:ed:4e:4a:0b:65:d6:c1:52:61:17:65:
98:a5:e4:f9:16:01:1f:c1:6d:70:1f:95:fa:ef:af:05:7e:b1:
6a:95:85:2a:cb:51:f7:67:3a:bd:3d:2a:8a:34:ea:b0:73:94:
b8:b7:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:13 2023 by rpki-client on console-fra.rpki-client.org