Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/tOkplX3xoLghE-e8ytkBNSyinyU.roa
File: tOkplX3xoLghE-e8ytkBNSyinyU.roa (raw, json)
Hash identifier: sUxOfIzVdUDFCSX51Gi4ED+py1Zsh3MSqQVavxvJYhY=
Subject key identifier: B4:E9:29:95:7D:F1:A0:B8:21:13:E7:BC:CA:D9:01:35:2C:A2:9F:25
Certificate issuer: /CN=4a0e8bb6b6b0b6f129ebf8138f9d62fa09df206f
Certificate serial: 01FCECF3
Authority key identifier: 4A:0E:8B:B6:B6:B0:B6:F1:29:EB:F8:13:8F:9D:62:FA:09:DF:20:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sg6LtrawtvEp6_gTj51i-gnfIG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/tOkplX3xoLghE-e8ytkBNSyinyU.roa
Signing time: Sat 01 Jan 2022 09:58:47 +0000
ROA not before: Sat 01 Jan 2022 09:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43872
IP address blocks: 193.105.189.0/24 maxlen: 24
2a10:c9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33352947 (0x1fcecf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0e8bb6b6b0b6f129ebf8138f9d62fa09df206f
Validity
Not Before: Jan 1 09:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4e929957df1a0b82113e7bccad901352ca29f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:36:fd:57:d6:c0:cf:f7:48:5b:68:35:c6:
1e:95:f4:73:ea:8d:22:ef:08:3c:f6:7c:ce:c5:2a:
f5:c9:d8:5a:26:75:1a:73:44:a9:f0:15:7e:51:94:
b3:74:e1:e7:0a:83:7d:b6:41:b9:27:ab:74:d0:8c:
71:48:39:be:10:56:c4:af:38:7c:75:76:5b:0b:ac:
ca:ba:a6:c0:4e:e6:29:03:19:43:92:93:78:9d:df:
0f:46:6e:12:0d:84:42:2f:3e:ca:59:eb:72:20:43:
6f:d4:1c:77:50:57:0b:ed:61:e4:8b:4c:3c:0d:fe:
22:f0:f6:6c:a6:f5:98:0c:56:98:d3:85:7b:bc:54:
44:93:ab:ca:ff:a0:6c:93:bb:17:5a:59:6e:74:71:
22:5b:35:a8:c5:b4:22:af:9f:52:a0:7a:00:71:d3:
52:93:83:20:98:d4:ad:f2:29:c0:a8:c5:75:80:b7:
8b:f0:82:c7:be:71:9e:73:f8:c5:6a:8a:52:e0:4c:
fd:c3:c9:27:a9:ac:46:ce:8c:f8:a4:9c:af:c2:66:
06:9e:57:5b:47:f2:51:6b:02:98:dc:20:ed:bd:39:
ec:85:2f:93:5d:c9:c3:b5:2f:15:61:b7:bb:8e:7e:
dc:fe:be:86:bc:dc:b4:83:41:ed:ba:99:d9:34:a3:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:29:95:7D:F1:A0:B8:21:13:E7:BC:CA:D9:01:35:2C:A2:9F:25
X509v3 Authority Key Identifier:
keyid:4A:0E:8B:B6:B6:B0:B6:F1:29:EB:F8:13:8F:9D:62:FA:09:DF:20:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sg6LtrawtvEp6_gTj51i-gnfIG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/tOkplX3xoLghE-e8ytkBNSyinyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/Sg6LtrawtvEp6_gTj51i-gnfIG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.189.0/24
IPv6:
2a10:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:01:52:db:6b:f8:7f:78:cf:46:e6:1b:26:31:4e:bc:76:5f:
ed:a9:6f:01:7a:c7:a5:2c:0f:89:7a:68:89:55:f0:de:ad:f1:
1e:e5:fa:b0:e3:a6:c9:50:1a:61:ff:bc:20:52:dd:73:a0:96:
7c:c5:27:16:42:55:12:2b:83:16:6f:e1:84:21:4b:f5:3c:f5:
28:90:8e:2a:ef:2b:97:df:64:2e:06:44:3f:4b:8b:b0:84:fe:
9d:14:a2:d5:39:93:db:9e:13:96:0c:eb:50:1c:5f:1e:e9:c3:
71:12:33:2a:b8:38:84:6f:5c:ad:65:78:a1:63:92:1b:6f:cb:
91:74:fd:fb:cf:be:86:b0:c8:1c:16:ca:a2:2c:05:62:22:60:
70:bc:85:08:49:01:e3:0a:a5:35:fe:09:ce:4f:ad:23:93:77:
52:a2:e3:48:cc:04:30:0f:38:13:47:cb:7f:e0:42:05:49:cb:
9f:51:f0:8b:1e:96:74:2f:84:b3:c5:c0:25:55:be:bb:2a:98:
90:ee:8e:1d:cd:d3:18:0b:34:16:30:ac:c2:dd:8e:e3:15:54:
5f:1b:a0:31:cc:9f:80:e3:1f:64:48:23:71:5f:7d:76:03:43:
20:3e:6a:ad:5b:07:96:ac:a3:ca:c5:b7:f8:77:3a:cc:bf:a7:
7e:ed:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:53 2024 by rpki-client on console-fra.rpki-client.org