Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/AOGXwmsiBtrct66DqsVZGizivSk.roa
File: AOGXwmsiBtrct66DqsVZGizivSk.roa (raw, json)
Hash identifier: zjzHxT+3dYroR+yjoek34D7qnCCeNEPIsOV5FbKHUBg=
Subject key identifier: 00:E1:97:C2:6B:22:06:DA:DC:B7:AE:83:AA:C5:59:1A:2C:E2:BD:29
Certificate issuer: /CN=77358867f21914e152fbf46c8bcc06109abfe0f5
Certificate serial: 018CC8DF2CBD335D1B3E65EB5847BD854968
Authority key identifier: 77:35:88:67:F2:19:14:E1:52:FB:F4:6C:8B:CC:06:10:9A:BF:E0:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/AOGXwmsiBtrct66DqsVZGizivSk.roa
Signing time: Tue 02 Jan 2024 06:31:58 +0000
ROA not before: Tue 02 Jan 2024 06:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206654
IP address blocks: 195.211.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2c:bd:33:5d:1b:3e:65:eb:58:47:bd:85:49:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77358867f21914e152fbf46c8bcc06109abfe0f5
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00e197c26b2206dadcb7ae83aac5591a2ce2bd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:12:77:db:07:57:6e:31:5e:45:00:bd:db:
d3:98:1c:86:a3:25:19:ba:98:a5:39:ef:00:67:9f:
c9:17:8d:fe:ee:74:e9:fb:7e:2f:28:3d:f9:45:e6:
e6:f8:7c:32:e2:7a:19:b7:e7:92:f5:40:82:54:e7:
d6:fd:c5:c3:4d:a7:a4:fd:7f:16:1a:be:7d:42:36:
68:a2:eb:67:85:eb:6a:59:06:26:2b:03:55:79:bb:
c6:d9:d0:e5:67:4b:94:b7:fd:1e:e1:1a:83:88:7d:
68:56:da:58:19:ec:ac:8d:ba:38:d9:c4:d5:31:71:
b2:ce:83:11:dc:8d:9d:7f:cd:6a:c0:40:41:5d:57:
c4:30:40:95:5a:b0:c7:6f:bd:d6:b3:39:5f:82:e8:
d4:fa:ee:e8:9e:5d:10:0b:bc:e5:e1:ca:a0:21:29:
65:0d:60:7e:32:80:3d:92:1b:cc:d4:13:38:4d:26:
60:c5:dd:42:98:1e:a8:a3:c9:60:72:24:c6:56:20:
32:79:4b:87:81:2c:8d:18:ef:a7:d7:a4:fd:2f:dd:
1b:ef:98:2d:11:d1:cf:9d:5c:92:92:05:61:0f:4e:
bf:af:be:ec:88:ce:63:dc:16:9f:d7:86:8b:ec:ba:
f7:7c:91:7b:04:86:54:35:b1:18:04:0b:14:91:fa:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:97:C2:6B:22:06:DA:DC:B7:AE:83:AA:C5:59:1A:2C:E2:BD:29
X509v3 Authority Key Identifier:
keyid:77:35:88:67:F2:19:14:E1:52:FB:F4:6C:8B:CC:06:10:9A:BF:E0:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/AOGXwmsiBtrct66DqsVZGizivSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.48.0/24
Signature Algorithm: sha256WithRSAEncryption
48:50:87:b8:aa:ac:96:e0:0d:e2:d7:81:c1:90:ca:e1:44:8b:
1b:3c:fd:54:d8:6e:34:80:a8:1a:85:74:b3:89:bb:b8:31:b7:
be:f3:3b:e5:73:8b:46:a6:df:25:77:df:d7:d9:87:58:f7:2d:
1c:fd:84:ff:72:80:aa:08:04:32:8f:a6:b8:9f:b4:2b:93:61:
0d:63:ed:34:94:66:e1:d5:20:59:1d:d8:f1:81:74:48:e7:b4:
f4:ef:25:af:d0:6e:96:3f:a1:4b:fe:36:78:59:b7:f1:80:e6:
55:b2:74:fa:58:e2:b4:d4:f6:7b:04:02:91:4f:0e:06:5d:e3:
3d:0d:62:22:79:9b:7c:70:6a:be:03:6b:e8:3a:84:65:de:b8:
69:05:d1:ff:5a:fc:be:63:46:cb:b5:d2:db:fd:15:91:c9:9c:
d3:fd:bd:fe:43:33:85:2c:a8:3a:e1:50:6c:09:ad:e9:54:d6:
e0:6c:b1:1b:20:0e:aa:d7:95:df:ca:7c:a8:70:e2:7d:40:79:
6d:e2:ec:22:12:92:4b:1c:3c:41:bc:74:bc:86:0e:2c:17:94:
ac:d9:8e:f9:a9:51:1c:39:43:8e:e3:b5:b6:20:41:f5:f5:ec:
88:27:d4:e0:77:a7:27:17:cd:eb:19:7a:a2:ce:d3:07:ef:04:
15:a3:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:35 2024 by rpki-client on console-fra.rpki-client.org