Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/0FQ3OAQXcuDmb0_-FT4bC6N2LOI.roa
File: 0FQ3OAQXcuDmb0_-FT4bC6N2LOI.roa (raw, json)
Hash identifier: c5Ir5nf6+Vtm3tt3c0QIY4u54UhWAT4IP2PcIfZ9mq8=
Subject key identifier: D0:54:37:38:04:17:72:E0:E6:6F:4F:FE:15:3E:1B:0B:A3:76:2C:E2
Certificate issuer: /CN=7b7645c8328f39afcdd079fa54a0ba3be78d4287
Certificate serial: 01889E9E948D23E45ED14FE87DA3323F6881
Authority key identifier: 7B:76:45:C8:32:8F:39:AF:CD:D0:79:FA:54:A0:BA:3B:E7:8D:42:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/0FQ3OAQXcuDmb0_-FT4bC6N2LOI.roa
Signing time: Fri 09 Jun 2023 05:26:12 +0000
ROA not before: Fri 09 Jun 2023 05:26:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 193.35.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:9e:94:8d:23:e4:5e:d1:4f:e8:7d:a3:32:3f:68:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7645c8328f39afcdd079fa54a0ba3be78d4287
Validity
Not Before: Jun 9 05:26:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0543738041772e0e66f4ffe153e1b0ba3762ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:c1:d7:57:fb:45:12:a3:66:05:aa:46:ae:
f1:62:cb:9b:eb:7f:5a:e7:9e:50:59:25:34:79:fb:
5c:90:57:9d:0b:24:64:ef:2b:61:2b:c9:48:e7:db:
01:35:5f:b5:83:37:4d:bf:5b:9f:50:9e:e1:0f:a3:
94:3f:d9:ac:bf:cc:ed:36:61:1a:f5:9c:f9:aa:d7:
32:ec:ed:b1:a7:a6:40:c0:e6:b2:61:e3:10:4f:20:
86:bd:02:56:eb:5b:d5:46:02:c4:33:09:a8:81:8b:
d4:a0:ff:5e:d1:a8:4b:c9:57:e0:7c:f4:89:9c:6e:
0e:04:1b:c0:f5:0a:07:b4:6f:27:92:82:6d:3b:d6:
60:09:e6:06:15:37:b8:eb:90:43:10:e6:ac:04:8e:
6c:29:16:6c:52:65:b3:77:7e:07:c2:92:54:5b:af:
6e:c0:10:cf:24:fc:1d:3f:e3:2b:91:e8:52:4d:84:
d5:5d:34:3f:f1:a1:5c:b2:41:4d:4e:fd:c9:b1:69:
c9:ea:be:da:a7:28:25:ef:49:b5:54:48:3b:5e:98:
17:1d:15:af:62:cd:59:54:9f:5a:2a:7d:d0:a0:54:
7f:d9:33:05:60:dd:d2:b2:90:6e:ff:39:fd:35:67:
de:7d:50:92:3c:3c:a8:ce:9f:19:21:f8:eb:3c:40:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:37:38:04:17:72:E0:E6:6F:4F:FE:15:3E:1B:0B:A3:76:2C:E2
X509v3 Authority Key Identifier:
keyid:7B:76:45:C8:32:8F:39:AF:CD:D0:79:FA:54:A0:BA:3B:E7:8D:42:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/0FQ3OAQXcuDmb0_-FT4bC6N2LOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.228.0/24
Signature Algorithm: sha256WithRSAEncryption
57:60:02:41:4a:bf:a8:a5:91:83:e5:fa:a1:2c:e5:5a:9c:84:
e0:d5:23:26:99:b2:f0:ad:58:8a:6e:bb:f7:27:53:99:ac:2a:
ab:72:8d:64:b4:ef:0e:b6:b7:f3:e9:7c:d6:0c:4e:48:e6:1e:
0f:68:63:4c:77:f8:32:2e:4f:67:9b:87:99:6d:df:d3:1b:f2:
36:d0:0c:06:3c:86:82:e8:81:cc:eb:21:4d:ec:58:13:14:95:
ff:09:2b:59:11:f5:dc:af:31:a8:74:c8:23:b0:9f:80:c3:69:
53:b1:99:88:90:7f:0f:96:2c:cc:a5:b0:7f:c2:b1:ea:44:7e:
3f:bf:be:21:86:bf:71:17:ef:72:2d:bd:bd:3a:0d:d2:b8:99:
1a:0c:30:e8:51:87:22:26:11:7b:6c:dc:24:01:11:62:b3:ec:
b6:76:8d:c1:5e:be:3e:94:52:bf:9e:20:9e:a8:ce:37:f7:52:
88:93:f5:ea:4b:78:f7:91:d0:1e:69:4b:18:d0:40:50:9a:a6:
ba:83:83:96:89:73:f3:94:23:d8:d8:ed:7a:98:6f:b3:2a:08:
89:8b:0b:29:0e:f5:99:3e:c4:ee:0c:2f:92:e2:22:a9:a8:2e:
2a:a4:db:9c:d5:81:f4:6c:24:65:1f:5d:8a:d7:61:2f:a6:60:
64:9e:b9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org