Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3822e5-07a4-4a38-ae68-b6c04330ccd1/1/3-bxJGDo1zZUXq_T7fhkvK3vuyw.roa
File: 3-bxJGDo1zZUXq_T7fhkvK3vuyw.roa (raw, json)
Hash identifier: +U5mrfa3pUCo/BHhzLqlLkJk5tmuNQSOLRwz2xikFaA=
Subject key identifier: DF:E6:F1:24:60:E8:D7:36:54:5E:AF:D3:ED:F8:64:BC:AD:EF:BB:2C
Certificate issuer: /CN=00ca712bb4911b7674c7af047ddd86aa2063ce00
Certificate serial: 01882086B3A6F436592FE0D2A358FA28B1FF
Authority key identifier: 00:CA:71:2B:B4:91:1B:76:74:C7:AF:04:7D:DD:86:AA:20:63:CE:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMpxK7SRG3Z0x68Efd2GqiBjzgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3822e5-07a4-4a38-ae68-b6c04330ccd1/1/3-bxJGDo1zZUXq_T7fhkvK3vuyw.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.104.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b3:a6:f4:36:59:2f:e0:d2:a3:58:fa:28:b1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ca712bb4911b7674c7af047ddd86aa2063ce00
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe6f12460e8d736545eafd3edf864bcadefbb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e4:99:de:86:d3:b4:bb:3e:76:1d:f4:4f:31:
bd:00:e3:13:5d:04:f7:15:8a:21:e6:26:e0:8d:cd:
f9:b8:34:dd:39:52:b7:45:6a:65:47:29:2d:34:29:
db:af:ee:9a:14:da:47:94:f7:51:e7:a0:d3:ad:59:
1a:ac:2d:19:51:ac:46:38:30:df:e4:df:57:8e:fd:
61:ce:f1:b8:a2:51:84:1e:96:1c:13:2b:d5:ab:9f:
bc:15:8b:96:23:79:6c:5d:28:74:3d:47:e0:49:3d:
c9:7e:e4:b4:0b:00:e0:43:73:6a:58:c4:1f:ca:ec:
a8:c6:25:e9:19:b7:a2:54:07:d6:3c:bc:53:f2:40:
b6:9e:4f:18:f8:82:d9:c1:70:79:5d:5f:7e:c3:5f:
f1:dc:a8:95:69:16:7f:13:58:db:a2:61:8c:bb:ec:
d7:0f:ad:c5:9a:9e:cc:5f:e3:a2:88:a2:7c:fd:cf:
37:d2:9e:8c:57:28:6b:ba:4d:91:46:a5:1b:95:cf:
08:0a:10:d0:4f:32:4c:85:78:26:63:1e:d9:08:7e:
2a:6d:c4:4b:5a:10:fc:38:4d:db:69:11:18:f0:fc:
07:55:6b:13:e9:a6:03:28:c7:c6:4f:88:fb:0f:39:
59:7d:fd:9b:84:df:68:19:2e:c8:db:10:ce:76:ee:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E6:F1:24:60:E8:D7:36:54:5E:AF:D3:ED:F8:64:BC:AD:EF:BB:2C
X509v3 Authority Key Identifier:
keyid:00:CA:71:2B:B4:91:1B:76:74:C7:AF:04:7D:DD:86:AA:20:63:CE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMpxK7SRG3Z0x68Efd2GqiBjzgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3822e5-07a4-4a38-ae68-b6c04330ccd1/1/3-bxJGDo1zZUXq_T7fhkvK3vuyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3822e5-07a4-4a38-ae68-b6c04330ccd1/1/AMpxK7SRG3Z0x68Efd2GqiBjzgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2f:bb:58:ec:4f:00:ff:11:17:a6:9f:69:83:cb:46:09:8c:
ad:38:dc:a0:b9:d9:07:90:f3:7c:e9:74:6f:22:99:e0:57:a6:
42:43:d1:64:c3:00:ca:8d:2c:cf:ef:31:63:ee:0f:7e:19:e3:
67:78:8f:42:91:5f:fa:9b:cc:8a:da:ee:39:81:a6:00:8f:53:
4e:ef:46:cc:15:f4:6e:be:f3:b6:a3:10:32:3e:07:b4:0e:48:
7d:29:2b:d5:ea:b8:1e:63:ba:12:6d:be:ce:e1:30:8c:c8:15:
73:28:0e:30:be:c1:47:6e:ce:0e:c6:3d:3b:d4:be:be:98:85:
03:9b:71:b6:e6:32:49:4c:4e:38:a8:12:b8:b8:04:8a:80:56:
9c:71:58:d6:49:ab:7e:1b:b5:76:dc:96:af:d9:19:21:49:da:
41:3b:60:f3:8f:53:85:60:a0:0b:85:bc:14:73:20:af:97:c7:
b2:46:9d:3a:97:6c:38:2e:0c:5f:bb:2f:86:ee:3f:fa:11:8a:
0f:2c:07:dd:30:84:18:8e:75:2e:f6:7c:83:db:aa:09:10:f0:
24:b3:64:7f:14:a2:42:8d:eb:fc:ae:9f:ef:ea:01:03:24:20:
fa:51:7d:49:83:a0:b7:7a:31:ef:13:5b:8a:ee:cb:30:32:3f:
68:fa:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 14:25:49 2023 by rpki-client on console-fra.rpki-client.org