Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/rDtBkWSr5M7FI96Lc3tBqIDSxFI.roa
File: rDtBkWSr5M7FI96Lc3tBqIDSxFI.roa (raw, json)
Hash identifier: Y6nRV5ZwXUt+7yIjbqtnQKMynCW/zUVaOtYM0wgoaWU=
Subject key identifier: AC:3B:41:91:64:AB:E4:CE:C5:23:DE:8B:73:7B:41:A8:80:D2:C4:52
Certificate issuer: /CN=d5de6c65ecf201d9a356dfc4501337ee8d965382
Certificate serial: 0188208678CD01381D90AD3247FF90B76D16
Authority key identifier: D5:DE:6C:65:EC:F2:01:D9:A3:56:DF:C4:50:13:37:EE:8D:96:53:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5sZezyAdmjVt_EUBM37o2WU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/rDtBkWSr5M7FI96Lc3tBqIDSxFI.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 195.225.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:78:cd:01:38:1d:90:ad:32:47:ff:90:b7:6d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de6c65ecf201d9a356dfc4501337ee8d965382
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac3b419164abe4cec523de8b737b41a880d2c452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:3c:79:7f:81:1b:ad:e0:47:c0:c5:b5:3a:
c4:87:8a:9d:5c:ec:fc:2f:8e:4b:dc:78:d9:44:be:
a3:76:aa:3e:e8:16:52:c0:71:8f:13:3e:91:dd:cd:
a0:fd:6d:b0:af:e8:b5:4d:35:90:73:50:02:27:9c:
ab:a8:61:33:0b:64:19:ee:45:30:8f:d8:d7:52:16:
d7:35:76:ea:a0:48:ce:f0:6a:a7:2e:02:a5:4e:87:
34:13:e3:e9:59:22:26:fd:3d:8d:da:61:84:21:b7:
21:d3:14:0b:53:ce:27:ba:e2:f8:af:22:8a:f0:a6:
81:1b:08:84:2c:a0:22:05:31:a2:03:b0:70:75:a3:
bb:50:09:2b:87:38:ca:99:51:8e:0f:20:4e:26:44:
68:53:9f:25:3a:5e:c7:5e:92:f0:d8:fe:3c:8e:fb:
5f:4a:b0:4d:15:57:43:07:a6:db:65:dc:c5:c4:51:
f4:88:65:e8:ba:54:c1:9c:81:00:ae:43:63:9f:6e:
cd:eb:a9:9b:0f:e8:59:c7:37:43:f0:95:02:fc:9b:
88:4a:2b:66:4b:3f:38:73:59:dc:eb:af:65:b9:af:
dd:c9:5a:7f:10:c6:c5:f0:b3:39:bd:60:36:18:6c:
49:bf:85:64:f9:dd:89:d9:6f:eb:ab:b1:77:fd:48:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3B:41:91:64:AB:E4:CE:C5:23:DE:8B:73:7B:41:A8:80:D2:C4:52
X509v3 Authority Key Identifier:
keyid:D5:DE:6C:65:EC:F2:01:D9:A3:56:DF:C4:50:13:37:EE:8D:96:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5sZezyAdmjVt_EUBM37o2WU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/rDtBkWSr5M7FI96Lc3tBqIDSxFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/1d5sZezyAdmjVt_EUBM37o2WU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:83:46:ad:17:05:6e:d9:aa:b7:04:36:a2:f3:9e:e3:ca:59:
26:7b:09:42:dc:b1:0c:00:1f:e7:1c:e0:d4:b5:92:3a:90:d0:
45:9e:cd:9e:d7:45:c0:7b:27:a5:76:27:7e:73:1a:82:1b:66:
a7:84:40:b5:52:e3:a9:d3:4a:56:47:d9:97:bc:e4:c1:ab:5a:
12:10:8b:65:c7:56:cd:cd:9e:89:59:16:6f:59:f4:e6:e2:69:
4b:57:7e:b8:17:3e:35:70:16:33:89:b1:e8:90:db:f5:95:ca:
66:0d:05:a3:2b:26:dd:eb:2b:c9:c8:26:62:4e:d9:3b:3f:b5:
a2:74:c1:5e:6c:5e:22:d0:74:dc:4c:ce:f8:16:cb:15:b3:b6:
50:c4:db:32:e5:dc:50:43:df:f2:f7:39:8c:8c:96:5b:23:7b:
c5:2d:0e:8e:e2:b5:77:f4:49:cb:20:b8:0b:d5:36:cd:da:2c:
5a:1b:99:7d:19:b8:c8:6d:8f:6e:2b:e5:60:1c:ec:b0:a8:53:
28:10:e0:c6:93:ba:b2:de:00:05:ff:77:7d:7a:f7:39:07:53:
d9:17:6d:af:6a:77:c1:f5:a4:ba:7c:f3:1f:7b:c9:3f:65:dc:
61:d1:0a:70:bb:a4:7c:9b:b7:bc:e2:ef:43:fc:7d:ff:e2:17:
51:c9:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:25:38 2023 by rpki-client on console-fra.rpki-client.org