Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3ef1b0-9f26-4fa8-9798-aaf68b6c9fd1/1/eA-OkuAN882Wna5z_EnLkZpLPwc.roa
File: eA-OkuAN882Wna5z_EnLkZpLPwc.roa (raw, json)
Hash identifier: T+yDGkAYpBdRn7FIdignHCsNACKjHSjvg2jrYYfNXNo=
Subject key identifier: 78:0F:8E:92:E0:0D:F3:CD:96:9D:AE:73:FC:49:CB:91:9A:4B:3F:07
Certificate issuer: /CN=b39e6cecba2a05cb070b9b239ec4d982ad1d95a5
Certificate serial: 01907DF3F5AA8B45EFB9712A992EC7312642
Authority key identifier: B3:9E:6C:EC:BA:2A:05:CB:07:0B:9B:23:9E:C4:D9:82:AD:1D:95:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55s7LoqBcsHC5sjnsTZgq0dlaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3ef1b0-9f26-4fa8-9798-aaf68b6c9fd1/1/eA-OkuAN882Wna5z_EnLkZpLPwc.roa
Signing time: Thu 04 Jul 2024 13:34:18 +0000
ROA not before: Thu 04 Jul 2024 13:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41023
IP address blocks: 195.189.76.0/23 maxlen: 23
195.189.78.0/23 maxlen: 23
195.189.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:f3:f5:aa:8b:45:ef:b9:71:2a:99:2e:c7:31:26:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e6cecba2a05cb070b9b239ec4d982ad1d95a5
Validity
Not Before: Jul 4 13:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=780f8e92e00df3cd969dae73fc49cb919a4b3f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:e5:45:3e:bd:85:58:6b:42:af:ba:c0:ee:
4b:04:d5:02:93:dd:2c:38:e5:71:fd:da:f5:03:e2:
0d:a0:02:06:8d:c2:da:3e:14:f0:a5:e0:88:74:f8:
df:af:f8:b6:5f:af:7c:b9:c3:73:f2:97:cc:3a:73:
a5:59:02:50:bb:14:d9:6b:c6:b4:8f:f8:be:7d:d6:
8d:cb:94:6d:45:3b:fa:fa:30:aa:6b:dd:13:fb:40:
75:53:d3:6e:1b:99:95:23:1e:46:5d:42:12:91:ee:
bc:4c:93:56:02:1b:45:9a:05:f0:13:29:43:4c:0d:
8f:5c:9e:fd:8c:28:9b:93:c3:76:35:2b:97:22:d1:
69:5b:74:c0:32:04:18:2c:50:1d:83:db:35:e8:0d:
dd:0e:62:4c:4a:b4:c0:5a:93:ad:dc:80:61:1d:3a:
5e:d9:9e:4b:4c:96:1c:48:27:5f:fa:06:f1:a2:fb:
fd:ab:cd:dd:4a:81:0f:65:ea:98:6d:1b:72:3c:ec:
e6:63:41:4b:c4:97:21:a0:a4:ee:ec:34:56:14:04:
09:0e:bd:fa:02:94:9a:5d:41:44:6c:6f:30:f0:05:
ca:74:66:85:9c:86:3c:9f:bf:44:5e:a8:21:c4:cf:
60:1e:91:12:fc:93:db:d2:1a:36:99:1a:af:40:44:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:8E:92:E0:0D:F3:CD:96:9D:AE:73:FC:49:CB:91:9A:4B:3F:07
X509v3 Authority Key Identifier:
keyid:B3:9E:6C:EC:BA:2A:05:CB:07:0B:9B:23:9E:C4:D9:82:AD:1D:95:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55s7LoqBcsHC5sjnsTZgq0dlaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3ef1b0-9f26-4fa8-9798-aaf68b6c9fd1/1/eA-OkuAN882Wna5z_EnLkZpLPwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3ef1b0-9f26-4fa8-9798-aaf68b6c9fd1/1/s55s7LoqBcsHC5sjnsTZgq0dlaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.76.0/22
195.189.230.0/23
Signature Algorithm: sha256WithRSAEncryption
01:4f:39:91:4a:38:a3:33:fd:98:b0:23:75:7e:23:b2:f2:1c:
f1:6a:fe:03:2a:b6:86:63:09:24:47:84:41:06:25:73:6c:29:
d2:1c:cd:25:3a:6e:79:f0:7c:4b:0f:44:94:d5:7e:ab:e0:27:
65:90:6b:4f:78:f7:87:a0:bd:a6:e4:5d:fa:38:d4:32:7a:73:
4f:0d:79:6e:2e:58:dc:a7:48:f7:4e:34:c2:ab:11:5a:a0:06:
9c:0c:1c:6c:55:7f:07:5d:9e:47:c6:89:e6:8d:09:a1:37:c3:
9f:ae:a6:44:ff:55:c4:95:a5:55:49:6e:4a:58:0d:38:51:7f:
9b:1a:87:44:99:5d:0e:b9:53:a8:b8:63:30:ca:d0:51:b5:51:
41:11:ac:8d:fe:07:b6:04:e3:17:02:c4:65:ff:5b:e4:14:22:
99:58:28:a9:60:6e:99:5f:b0:18:5f:d6:6f:ea:0c:d3:cd:75:
ae:24:24:03:c7:06:be:94:4c:a0:59:c6:43:1e:50:03:a4:c8:
5e:9c:11:f5:f9:10:d0:55:92:05:7b:a1:92:d2:5e:c7:80:b0:
58:56:af:c7:72:82:c7:48:26:5b:63:90:18:fd:17:c1:bf:a4:
7a:de:2a:f8:b2:38:53:a3:b0:88:61:cb:b1:65:0d:49:b4:dd:
0f:06:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 10:17:55 2024 by rpki-client on console-fra.rpki-client.org