Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/1C3rt5Vrb4OG__JRYgdbpO7Sens.roa
File: 1C3rt5Vrb4OG__JRYgdbpO7Sens.roa (raw, json)
Hash identifier: TAji06l96eHntqSocppsdRwdAA61xS518Dqa7MOSc54=
Subject key identifier: D4:2D:EB:B7:95:6B:6F:83:86:FF:F2:51:62:07:5B:A4:EE:D2:7A:7B
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 018B85EBAA10F5A2FF3BD67729165640DF90
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/1C3rt5Vrb4OG__JRYgdbpO7Sens.roa
Signing time: Tue 31 Oct 2023 13:28:16 +0000
ROA not before: Tue 31 Oct 2023 13:28:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.59.8.0/24 maxlen: 24
194.59.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:eb:aa:10:f5:a2:ff:3b:d6:77:29:16:56:40:df:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: Oct 31 13:28:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d42debb7956b6f8386fff25162075ba4eed27a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:f8:98:e5:4e:de:fd:28:69:fa:e7:4c:af:
e6:4e:82:cd:1a:7a:65:f8:ce:ff:3c:ab:ed:9a:af:
8f:5a:10:72:c7:7c:15:9f:4c:39:56:c6:54:d6:46:
3d:f4:f1:27:f8:21:fe:e8:f6:4e:f0:f9:2e:be:06:
1e:75:d0:ea:b4:3e:35:35:b0:96:86:2f:6a:c6:9d:
d8:1c:c7:f9:5a:be:3f:c5:1e:2a:59:00:1b:17:65:
d5:f6:27:72:75:82:68:78:91:6b:69:50:4d:c9:4a:
e2:1c:c2:0e:6c:17:e4:1d:30:6a:38:22:6d:89:83:
14:bf:d8:b6:3b:02:0e:b7:19:43:26:91:da:31:e1:
76:e8:85:71:2d:73:9b:28:64:9e:77:ce:b1:d3:e9:
19:b9:10:10:91:5a:15:d0:2c:78:50:b6:f1:89:6b:
50:9d:fc:7b:50:3b:d6:b1:09:92:04:33:2a:38:bb:
76:55:83:4e:c9:16:06:12:46:bd:3e:9b:70:c3:f6:
c1:bc:87:ba:f0:8f:5e:6f:35:e4:a5:40:82:77:23:
df:85:52:16:9d:b1:59:1d:ba:c6:1c:da:17:e0:f6:
86:53:62:f3:d3:e8:59:96:77:c5:e2:61:2f:1f:b2:
cc:46:9d:f1:6f:35:29:01:79:18:a9:c3:36:61:9c:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:EB:B7:95:6B:6F:83:86:FF:F2:51:62:07:5B:A4:EE:D2:7A:7B
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/1C3rt5Vrb4OG__JRYgdbpO7Sens.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
194.59.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b1:71:65:d0:b0:50:8e:1d:8e:f9:a9:e3:e4:bf:37:ba:2b:
bb:02:2c:c9:90:76:38:51:c8:f7:a3:87:76:15:38:e0:88:a2:
74:65:f2:69:a9:a5:18:f9:e1:99:dd:a9:63:ab:a4:62:ac:fa:
1e:92:d9:81:c5:86:5a:68:dd:5c:db:e4:63:1a:b6:f4:b1:66:
a7:87:8a:a3:e4:88:03:b8:5b:d2:fe:dc:d7:7c:5c:1a:af:2f:
bf:ec:32:1b:89:af:4c:b7:57:e9:f3:2e:ed:5c:20:c4:b9:e6:
0d:eb:bb:63:b4:51:2b:40:81:bc:cc:f5:c3:e6:71:c6:e7:78:
23:df:7f:e4:cb:af:0d:70:b8:fc:11:51:17:02:32:47:21:41:
cc:bb:f9:c1:43:d8:f2:95:08:fa:df:5c:be:2b:d6:cb:7e:cd:
d1:73:34:cb:0a:5c:a7:4c:68:d6:dc:30:14:5a:e0:ab:c4:6e:
5d:1e:fd:f7:e1:74:0e:46:62:6c:9b:af:9b:3a:e5:3a:70:42:
15:a5:42:dc:ee:bb:dc:be:96:2f:cb:7b:ba:d2:ca:e5:07:bd:
1f:a1:0d:54:53:45:96:4b:4b:2a:30:88:03:c3:62:ba:2c:61:
d5:e3:89:51:1e:0a:88:ae:b4:ea:e1:35:00:89:e5:ed:13:98:
9d:66:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-fra.rpki-client.org