Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3822e5-07a4-4a38-ae68-b6c04330ccd1/1/AV0y_T_S_1cdXvO_V2kA_XNcW_0.roa
File: AV0y_T_S_1cdXvO_V2kA_XNcW_0.roa (raw, json)
Hash identifier: ZaMIBfdY3kqosN6vaDD+lMjrI+DBc/UmMRHM1bquzBk=
Subject key identifier: 01:5D:32:FD:3F:D2:FF:57:1D:5E:F3:BF:57:69:00:FD:73:5C:5B:FD
Certificate issuer: /CN=00ca712bb4911b7674c7af047ddd86aa2063ce00
Certificate serial: 01869DEAE6EBCAA8216E5BA2E59E34A1BE75
Authority key identifier: 00:CA:71:2B:B4:91:1B:76:74:C7:AF:04:7D:DD:86:AA:20:63:CE:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMpxK7SRG3Z0x68Efd2GqiBjzgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3822e5-07a4-4a38-ae68-b6c04330ccd1/1/AV0y_T_S_1cdXvO_V2kA_XNcW_0.roa
Signing time: Wed 01 Mar 2023 16:04:22 +0000
ROA not before: Wed 01 Mar 2023 16:04:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 194.104.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:ea:e6:eb:ca:a8:21:6e:5b:a2:e5:9e:34:a1:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ca712bb4911b7674c7af047ddd86aa2063ce00
Validity
Not Before: Mar 1 16:04:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=015d32fd3fd2ff571d5ef3bf576900fd735c5bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:e1:f2:88:34:2c:23:d5:69:86:61:db:07:
c6:04:56:d3:11:8e:bb:f6:23:39:b5:8f:d6:15:f4:
ec:2b:b8:d5:5a:4e:70:60:f4:c5:bf:78:51:5c:3a:
41:1d:c0:26:5f:9f:fa:60:1a:7b:4d:cc:6a:d1:42:
16:3d:f1:ba:d6:80:36:8b:11:f0:3f:5c:03:55:49:
c6:45:ee:29:e3:c2:da:f5:bb:f1:f2:5e:66:4a:ba:
d1:bf:c5:e6:1a:25:16:dc:a2:b1:d0:7e:bc:40:13:
f8:92:d9:a6:9c:90:66:9b:e5:9e:06:0b:25:a9:3a:
9d:52:06:5a:39:cd:86:ef:1e:ca:5e:86:8a:cd:39:
68:c7:fa:a0:77:f1:63:b1:75:d8:69:7e:6a:ad:9d:
77:c1:b5:e5:00:9e:e3:42:eb:38:50:86:77:11:e3:
4f:ab:04:04:5f:0d:bb:6d:e0:ae:40:f0:52:ae:7e:
2f:a6:96:0c:8d:27:c7:26:88:07:5e:24:d3:57:cb:
a9:33:75:c5:0e:22:52:6c:54:3f:ff:aa:26:cb:b7:
07:8b:56:12:ef:02:ab:9f:59:63:77:35:c4:69:03:
24:3f:3f:ef:5f:88:8c:46:04:b8:37:07:2b:14:58:
ad:65:6e:64:84:90:d6:73:a7:54:4c:8e:cf:1d:02:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:32:FD:3F:D2:FF:57:1D:5E:F3:BF:57:69:00:FD:73:5C:5B:FD
X509v3 Authority Key Identifier:
keyid:00:CA:71:2B:B4:91:1B:76:74:C7:AF:04:7D:DD:86:AA:20:63:CE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMpxK7SRG3Z0x68Efd2GqiBjzgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3822e5-07a4-4a38-ae68-b6c04330ccd1/1/AV0y_T_S_1cdXvO_V2kA_XNcW_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3822e5-07a4-4a38-ae68-b6c04330ccd1/1/AMpxK7SRG3Z0x68Efd2GqiBjzgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1f:1b:ff:6e:cf:70:9b:39:c3:f5:b0:3b:50:36:22:05:e4:
33:ff:2d:c6:44:44:40:a6:57:7f:6f:cd:0c:0c:eb:0c:38:55:
e3:d0:33:7b:f6:6b:51:2f:f6:ab:d9:9e:f4:95:3a:d0:b1:68:
9a:96:c0:07:71:b3:2b:c1:24:9c:62:74:91:5a:2e:e0:0b:c1:
84:46:a0:c6:bb:59:42:6b:e6:1b:9b:7f:65:b1:6a:e0:a0:17:
59:e9:fc:19:9b:95:c8:a3:7b:8d:dd:bb:e2:d5:bd:f7:91:90:
3d:95:99:96:a8:02:d2:d3:3a:ae:da:99:ed:5e:aa:86:ac:52:
60:ca:57:95:ee:99:9e:5a:6a:42:aa:c3:4f:ab:25:13:bc:3a:
03:2a:6c:0b:0f:05:e6:c7:22:70:eb:b6:04:2d:22:ab:05:e6:
fb:d3:a1:72:1f:fc:67:95:5f:34:0d:27:c2:e4:83:2c:11:d4:
f2:fe:a0:e4:8c:9d:f8:3b:04:44:27:df:56:7f:30:3b:f6:9a:
05:3f:bd:52:8d:53:b6:5d:fd:67:91:1c:fe:3e:f1:dd:27:c0:
da:a0:b7:e7:29:6d:7a:01:5f:ff:42:e5:0c:75:b3:f9:ac:4d:
37:cd:9e:55:2a:7b:37:29:97:39:49:35:c9:47:5b:4c:70:84:
9c:0b:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:57 2024 by rpki-client on console-ams.rpki-client.org