Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/V91Z1N6QljvzAtEKs_idQcVLK94.roa
File: V91Z1N6QljvzAtEKs_idQcVLK94.roa (raw, json)
Hash identifier: g0N2gXsLsD2ADECKGkjvwdPciOigUCqa+4cI4Dc2uCU=
Subject key identifier: 57:DD:59:D4:DE:90:96:3B:F3:02:D1:0A:B3:F8:9D:41:C5:4B:2B:DE
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 01867CE301A263763DF3EB9F6F65C967F01C
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/V91Z1N6QljvzAtEKs_idQcVLK94.roa
Signing time: Thu 23 Feb 2023 06:08:17 +0000
ROA not before: Thu 23 Feb 2023 06:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210329
IP address blocks: 195.238.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:e3:01:a2:63:76:3d:f3:eb:9f:6f:65:c9:67:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Feb 23 06:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57dd59d4de90963bf302d10ab3f89d41c54b2bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:5f:01:82:e7:09:2b:55:d8:75:27:c4:b8:
66:73:94:47:3a:2e:86:a5:ec:d3:f7:26:85:9f:d1:
c6:d9:78:da:88:ca:ae:82:e5:9a:42:f9:ae:9b:d5:
23:f5:23:91:f5:73:84:68:a4:41:05:07:09:b1:8b:
af:92:31:3d:51:8d:fd:99:86:81:a8:f4:c2:6a:e8:
61:62:0d:28:3e:7b:a4:8a:f3:9b:e6:17:2b:3a:d5:
a0:f7:d7:53:47:01:0a:9f:25:96:e3:74:bb:a9:d1:
00:a1:f5:32:a5:f7:73:65:e0:7d:29:b6:81:38:c4:
cd:e8:ca:f6:f1:bc:8d:d8:08:0f:9d:fb:13:f5:6e:
40:76:8f:d8:cf:44:59:4f:5f:8d:b9:9d:5e:c7:e1:
fb:cb:3c:08:62:f2:1a:1b:92:70:9e:b0:c5:6c:c0:
f7:44:8f:00:00:ea:6a:6a:05:55:e2:42:2f:67:2c:
e6:a7:8f:46:12:c2:1b:53:38:f1:ed:97:85:fb:f5:
49:1b:70:20:da:c5:1a:10:b1:dd:8f:24:f7:ff:5e:
f4:e5:03:23:cd:92:0b:5e:a9:b9:c0:82:22:78:a0:
02:f4:b3:ad:fe:ff:52:f5:27:de:9f:40:8f:07:b3:
85:9b:91:e7:01:3f:2d:b2:2b:02:3e:19:98:a0:6d:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DD:59:D4:DE:90:96:3B:F3:02:D1:0A:B3:F8:9D:41:C5:4B:2B:DE
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/V91Z1N6QljvzAtEKs_idQcVLK94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.123.0/24
Signature Algorithm: sha256WithRSAEncryption
41:02:88:e2:ae:d4:45:a8:90:61:33:61:d8:ae:e3:b4:74:91:
2b:74:29:dd:d4:18:af:8d:bf:d1:62:e2:85:3c:cd:bb:46:14:
8c:60:51:27:05:fe:c8:f0:54:5b:03:17:52:08:9b:b5:8c:c5:
89:ec:05:31:29:7b:de:a5:5b:2c:08:ce:79:41:70:9f:d8:a9:
fa:7a:fc:d5:3c:a1:46:9d:b9:c1:40:fc:b4:61:22:bb:f9:0b:
ed:53:d4:2b:9e:29:c9:c8:4c:69:1a:1d:26:f5:85:bf:ba:4e:
81:4d:2e:ba:4a:7d:79:69:39:4f:0f:96:a7:0d:09:fc:7e:6b:
db:f8:a6:7c:44:18:93:f9:cf:d6:ca:e6:ce:1b:ac:55:81:51:
a2:da:d4:a4:cd:06:7a:d3:d9:f9:7b:7c:6f:12:1f:e7:7f:e9:
f9:e1:9e:4e:40:61:af:16:59:a2:33:92:1e:24:91:c3:49:02:
e3:81:ab:ee:ad:73:01:aa:4f:d7:e8:9e:a6:17:2b:2d:c4:66:
90:c1:4a:57:60:ca:ff:aa:a1:44:ef:02:37:e8:e3:1c:26:dd:
d8:81:25:ca:91:2c:5d:a0:be:a0:d9:65:d2:8d:23:e1:7f:a6:
01:b2:b7:9c:57:c8:fd:38:f1:c5:8b:eb:76:9f:49:d3:2d:aa:
c5:3f:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org