Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/txiNeAB9VmRZBOgBoYaSGll0eiA.roa
File: txiNeAB9VmRZBOgBoYaSGll0eiA.roa (raw, json)
Hash identifier: hZxpLvHtd5GqH/d1NJ5mMuXlw+PfdoR/tq7BnWskM8U=
Subject key identifier: B7:18:8D:78:00:7D:56:64:59:04:E8:01:A1:86:92:1A:59:74:7A:20
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 0B5246
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/txiNeAB9VmRZBOgBoYaSGll0eiA.roa
Signing time: Thu 03 Feb 2022 16:57:17 +0000
ROA not before: Thu 03 Feb 2022 16:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 188.208.103.0/24 maxlen: 24
94.176.214.0/23 maxlen: 23
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741958 (0xb5246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Feb 3 16:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7188d78007d56645904e801a186921a59747a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:85:bb:35:06:47:36:11:b8:a6:b3:3b:37:
19:a3:21:ee:a7:c4:e0:8f:d9:28:f6:90:19:53:7c:
37:9a:71:2b:ad:0b:d1:04:d8:c1:d8:47:3b:ec:a4:
6c:fe:c1:eb:10:40:ca:c5:38:98:c7:fb:41:1d:e5:
a6:8e:aa:4b:61:02:26:33:76:1b:59:f5:84:e4:73:
0a:c7:7a:82:73:4d:4a:16:bb:84:03:aa:4e:78:45:
5e:92:07:cc:1d:f5:2f:6b:a2:2b:f1:5a:99:a6:d7:
6d:66:05:84:ca:ab:b2:a6:83:09:c6:d9:a5:d3:8e:
58:65:0e:dd:0d:10:46:bc:40:ad:ca:02:5f:7a:35:
06:a6:cc:9e:e4:49:c9:92:64:34:fe:55:1c:b6:96:
52:24:54:74:46:fe:ed:08:f8:a9:95:dd:a9:5e:28:
01:4d:5b:fd:dc:ea:58:4c:fb:bb:b4:66:42:40:fa:
73:91:27:5a:4b:97:0a:f6:f7:4a:f3:0a:38:0c:73:
7b:a7:10:28:af:a6:a5:30:a8:35:1d:be:d6:c1:6d:
e5:57:1c:4f:b3:1c:53:9b:80:10:ba:be:0f:4b:f8:
75:6c:94:73:7b:45:f7:e5:8b:19:90:38:f5:72:0c:
f1:f1:ef:b7:2a:f3:37:06:61:de:f0:9e:f1:ca:60:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:8D:78:00:7D:56:64:59:04:E8:01:A1:86:92:1A:59:74:7A:20
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/txiNeAB9VmRZBOgBoYaSGll0eiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/23
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
68:27:7d:da:bf:e4:33:c8:a6:f3:25:64:dd:95:fb:bb:34:96:
5b:5c:ba:68:9e:32:a1:92:1c:b1:26:93:0f:5a:61:cc:f5:45:
c4:93:35:f5:67:db:52:4a:d7:78:94:4e:4e:22:c7:2b:02:cb:
67:a0:b5:d1:a7:97:d2:61:d6:81:85:24:f9:cf:98:2f:ec:b6:
15:27:5a:88:51:9d:ab:46:fb:b8:7e:1a:c6:bb:05:93:e9:07:
74:2a:cd:05:fd:02:eb:71:a3:e6:03:0d:68:22:c8:f4:3c:7b:
3d:c5:e1:8b:23:0a:9b:65:d7:7d:97:b0:11:78:9f:3b:cf:60:
c5:1e:e2:81:53:d6:b7:44:0b:06:ad:3e:0c:91:6c:13:fb:e1:
b5:4e:2f:b8:79:51:5d:2c:ba:39:4d:43:21:d9:7b:2d:a2:9a:
eb:95:01:90:fc:b0:c3:30:8b:43:4d:2c:e4:d9:0c:1c:f0:79:
23:5a:07:8a:02:51:34:52:c8:ea:59:2c:ae:b3:0f:87:af:85:
ea:60:2a:1d:cc:98:f6:8d:64:f5:c7:a4:1d:37:d1:c7:0c:92:
f4:2a:74:30:51:24:15:e8:50:43:05:98:29:bd:ca:95:84:11:
24:97:7c:d1:88:e0:28:78:ee:a5:4d:dc:66:f1:bd:81:0a:23:
5c:15:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org