Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/abf0b0-5b5e-4437-a052-3f99e5036f15/1/j7R3cdtkzSKMgulhGSn9-Eczj9E.roa
File: j7R3cdtkzSKMgulhGSn9-Eczj9E.roa (raw, json)
Hash identifier: ydmzoNAZLPZHpMDL4geiqofgFZmq9iNkStwmDc9e2TU=
Subject key identifier: 8F:B4:77:71:DB:64:CD:22:8C:82:E9:61:19:29:FD:F8:47:33:8F:D1
Certificate issuer: /CN=0cd651549effd859c0336b553e237ba6f887dd25
Certificate serial: 16A8FA68
Authority key identifier: 0C:D6:51:54:9E:FF:D8:59:C0:33:6B:55:3E:23:7B:A6:F8:87:DD:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNZRVJ7_2FnAM2tVPiN7pviH3SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/abf0b0-5b5e-4437-a052-3f99e5036f15/1/j7R3cdtkzSKMgulhGSn9-Eczj9E.roa
Signing time: Sat 01 Jan 2022 04:53:28 +0000
ROA not before: Sat 01 Jan 2022 04:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34971
IP address blocks: 195.88.4.0/23 maxlen: 24
2a00:dcc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380172904 (0x16a8fa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd651549effd859c0336b553e237ba6f887dd25
Validity
Not Before: Jan 1 04:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fb47771db64cd228c82e9611929fdf847338fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:80:55:41:2e:8b:59:a4:56:a8:48:00:e8:
87:50:d5:a6:e8:15:5b:26:54:63:64:5a:d5:71:b3:
87:45:f2:03:4e:f7:0c:be:56:66:80:cf:46:fb:41:
04:7f:67:03:07:b0:d2:24:b9:5b:c5:18:13:6d:11:
6d:cb:36:0a:01:c4:c6:63:5d:de:8f:d1:6c:3e:f6:
ba:86:7f:cc:a4:fc:a8:19:e9:39:5b:a7:6a:b0:e1:
82:a2:5a:21:b5:18:db:2a:ae:11:8a:2c:af:a1:85:
b9:56:9f:2a:8c:25:0f:ca:ec:56:f3:78:af:4e:29:
51:a5:3e:da:4b:55:81:ad:2a:f4:b8:02:d2:a8:08:
2e:2a:4d:96:8d:e0:46:76:0b:a8:33:82:f9:8b:fa:
7e:16:33:04:20:08:33:6e:28:66:be:3d:03:48:d2:
81:a5:19:6f:15:84:86:63:78:aa:8a:68:db:db:c6:
c3:ea:37:5e:46:9d:e1:2d:76:12:49:6d:2d:a4:d9:
d3:68:e4:c4:33:38:61:79:e5:41:af:a7:ed:c2:ae:
5e:75:c8:66:97:8d:77:21:e1:8b:5f:47:94:c1:cc:
7e:dd:8b:9b:37:4a:96:08:3d:5c:ba:f3:76:b9:dc:
05:e3:5b:6b:33:ec:7f:a0:11:7e:1a:31:2e:fe:02:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B4:77:71:DB:64:CD:22:8C:82:E9:61:19:29:FD:F8:47:33:8F:D1
X509v3 Authority Key Identifier:
keyid:0C:D6:51:54:9E:FF:D8:59:C0:33:6B:55:3E:23:7B:A6:F8:87:DD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNZRVJ7_2FnAM2tVPiN7pviH3SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/abf0b0-5b5e-4437-a052-3f99e5036f15/1/j7R3cdtkzSKMgulhGSn9-Eczj9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/abf0b0-5b5e-4437-a052-3f99e5036f15/1/DNZRVJ7_2FnAM2tVPiN7pviH3SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.4.0/23
IPv6:
2a00:dcc0::/32
Signature Algorithm: sha256WithRSAEncryption
72:ad:c3:73:85:e7:1e:fd:1e:43:e0:13:7b:e6:fa:7c:2f:0b:
ad:4d:0a:4a:eb:1d:d5:44:a5:42:4c:af:4c:9e:db:7f:fc:1c:
88:d8:f8:b2:03:3a:ea:f0:ed:31:01:56:74:ca:da:b7:a2:e8:
f8:c2:64:b4:20:7d:62:12:10:db:2c:34:24:33:be:5f:25:7a:
27:68:ea:4e:59:e5:69:5f:15:9b:75:cb:19:11:e9:b7:12:8e:
0f:23:a2:f7:d5:02:14:29:2e:65:90:cc:84:5a:c5:09:f7:20:
be:20:84:e4:d0:7c:bd:07:1c:bc:a1:dd:27:54:e9:d4:47:40:
41:a3:55:d0:25:f7:fb:88:cf:3e:7e:b0:52:c4:f3:4d:1a:bb:
39:94:e7:a7:73:96:28:73:c6:37:31:f6:82:af:0c:eb:45:fa:
39:18:39:a6:48:40:a8:a4:30:de:ae:63:9f:cc:c7:bd:d5:3f:
e9:fa:44:6d:01:1b:2c:80:d8:5b:18:50:42:7d:08:96:fd:9c:
07:db:5e:68:64:a5:ea:77:30:f3:59:8a:92:e0:85:6a:65:e5:
9b:72:1f:6e:c9:14:c4:1c:ad:39:3f:0f:4b:90:79:6f:8a:0c:
93:14:a6:70:bf:3b:0a:7a:23:f7:75:50:f7:a5:15:20:02:4f:
b7:2b:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org