Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9d77c6-e210-4ed3-8bfc-effc7c2aeda1/1/t1W78DxcEK093Q1aehW5r8-UawA.roa
File: t1W78DxcEK093Q1aehW5r8-UawA.roa (raw, json)
Hash identifier: gQUY6vXR+V9NERoLiO3NVaP6xzBXagk6Sy312sWC4sU=
Subject key identifier: B7:55:BB:F0:3C:5C:10:AD:3D:DD:0D:5A:7A:15:B9:AF:CF:94:6B:00
Certificate issuer: /CN=1f1eac26efd7a7370d482344e3b2f346f6a865c9
Certificate serial: 0186D7E101C88E078BFCAAF1867194618104
Authority key identifier: 1F:1E:AC:26:EF:D7:A7:37:0D:48:23:44:E3:B2:F3:46:F6:A8:65:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx6sJu_XpzcNSCNE47LzRvaoZck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9d77c6-e210-4ed3-8bfc-effc7c2aeda1/1/t1W78DxcEK093Q1aehW5r8-UawA.roa
Signing time: Sun 12 Mar 2023 22:11:32 +0000
ROA not before: Sun 12 Mar 2023 22:11:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 192.188.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d7:e1:01:c8:8e:07:8b:fc:aa:f1:86:71:94:61:81:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1eac26efd7a7370d482344e3b2f346f6a865c9
Validity
Not Before: Mar 12 22:11:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b755bbf03c5c10ad3ddd0d5a7a15b9afcf946b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:d4:bd:4f:b1:cd:8f:ca:b3:ee:d6:a3:17:
f7:b7:a9:3e:ab:b9:87:56:f9:34:c7:5a:b2:db:52:
4c:a4:c2:26:5c:af:e6:37:9b:40:ee:f1:aa:ff:81:
71:c1:a4:66:47:78:05:5d:c7:ea:87:48:83:31:4b:
fe:48:4d:8e:14:0b:c8:73:96:2e:4e:af:25:3e:5e:
57:19:dd:1d:c8:8b:7c:30:ef:8c:0a:79:33:51:00:
54:b8:8f:23:d6:eb:26:f9:e9:5a:1b:cf:b0:2b:f4:
f5:30:59:3c:5c:6f:e9:dc:cc:b1:ef:66:4b:aa:ea:
49:31:c7:6c:e9:6b:ea:15:a6:e4:a8:d6:35:95:ed:
39:08:4a:a7:a6:14:75:ac:e2:2b:48:ff:90:0f:7a:
c0:c1:52:ce:f0:17:b1:fb:b5:17:3a:0c:d5:96:e7:
16:2a:6d:29:83:cb:b9:63:f5:3f:6e:52:7a:4d:d5:
8e:95:25:75:ff:9b:e9:e0:1e:02:36:27:1a:7f:b6:
52:d3:7f:69:be:17:4e:d9:0b:c3:2e:23:59:32:54:
bb:12:f3:6d:f2:5a:af:2d:54:37:5c:27:1e:26:48:
a2:fb:c7:df:4c:57:e9:6a:98:70:ee:ac:f8:c7:31:
1d:33:50:56:ab:65:28:4f:48:e6:4b:e7:f3:ad:a7:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:55:BB:F0:3C:5C:10:AD:3D:DD:0D:5A:7A:15:B9:AF:CF:94:6B:00
X509v3 Authority Key Identifier:
keyid:1F:1E:AC:26:EF:D7:A7:37:0D:48:23:44:E3:B2:F3:46:F6:A8:65:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx6sJu_XpzcNSCNE47LzRvaoZck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9d77c6-e210-4ed3-8bfc-effc7c2aeda1/1/t1W78DxcEK093Q1aehW5r8-UawA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9d77c6-e210-4ed3-8bfc-effc7c2aeda1/1/Hx6sJu_XpzcNSCNE47LzRvaoZck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.10.0/24
Signature Algorithm: sha256WithRSAEncryption
31:74:34:f8:bf:5b:81:45:96:bc:77:d9:ea:a4:30:ef:35:79:
2d:c1:0b:4d:e6:5f:ce:5c:56:81:39:53:db:2f:64:a3:3b:83:
76:f7:c5:0e:64:19:b9:87:a0:cb:5c:ba:15:f7:c5:a0:7e:25:
be:12:23:7b:19:81:2a:c3:1a:a2:94:a5:05:97:7c:22:71:3d:
76:59:86:ed:97:a2:0f:28:b3:93:df:4b:01:d1:29:84:a4:72:
1a:07:69:d8:29:70:21:cc:14:fb:43:17:e4:31:17:12:28:cc:
87:44:d0:e0:38:49:a9:b6:0c:81:61:33:da:37:ce:ba:bf:76:
74:38:dd:39:73:ca:32:94:77:2d:ad:25:65:75:1d:5d:b1:cd:
e5:02:68:c6:4c:4d:33:c6:85:15:71:6b:8f:8b:88:bf:29:f5:
6a:92:29:0b:8f:36:6b:3e:ea:86:59:c5:02:84:19:ad:e3:9e:
2e:db:51:a5:40:46:ce:92:e3:4e:65:a3:5e:21:18:5c:12:ce:
70:4c:0a:b4:77:6c:03:81:8e:6a:05:a8:5b:00:e0:a3:1c:5d:
3c:4f:50:7a:06:39:2f:b1:43:7e:e2:b4:50:c7:40:eb:86:e1:
ce:92:82:12:ff:31:c2:0b:e1:02:8f:a2:17:ab:0b:05:c0:d4:
a9:1e:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:55 2024 by rpki-client on console-fra.rpki-client.org