Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/zFjCiOybXTPdJggJR2bym6iINP0.roa
File: zFjCiOybXTPdJggJR2bym6iINP0.roa (raw, json)
Hash identifier: c0tjdery2TiPL4A4AVFNXDjuEsWYzdIMdpo1hQr17uU=
Subject key identifier: CC:58:C2:88:EC:9B:5D:33:DD:26:08:09:47:66:F2:9B:A8:88:34:FD
Certificate issuer: /CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Certificate serial: 018573B18B42C445A7D2465BF146ED1A6CB0
Authority key identifier: DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/zFjCiOybXTPdJggJR2bym6iINP0.roa
Signing time: Mon 02 Jan 2023 18:14:53 +0000
ROA not before: Mon 02 Jan 2023 18:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 130.193.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:8b:42:c4:45:a7:d2:46:5b:f1:46:ed:1a:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf035f7bfd506df6e19240fb43aeeb2c85200d4
Validity
Not Before: Jan 2 18:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc58c288ec9b5d33dd2608094766f29ba88834fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:59:c0:d2:bd:42:8f:98:52:99:db:b5:da:
61:fd:17:fb:e0:f0:70:8c:1c:23:d9:cc:51:74:15:
32:93:73:7d:7f:77:57:f8:7c:0e:57:84:e6:ac:a9:
07:6e:17:e6:0d:09:87:a1:00:a3:70:82:2c:f0:b5:
3a:9d:f7:68:9c:3f:39:f8:e8:38:31:13:fe:1f:dd:
85:14:3a:88:b8:85:2a:ff:00:f3:1d:01:68:fe:c0:
02:01:4f:b9:46:82:82:e6:70:40:22:65:1d:c5:aa:
d5:26:e5:aa:66:99:49:47:14:1e:e4:1a:1b:19:ca:
60:5e:ed:a7:b9:0e:0e:21:91:6a:16:8d:50:c1:2a:
ad:e3:b5:51:db:1c:69:61:a4:09:d4:3d:c6:d2:ea:
c5:a6:01:c1:16:c3:13:18:70:0b:99:2e:3e:58:b9:
31:43:a8:f8:39:c8:2d:d0:0a:6d:9c:12:c4:8c:68:
2d:39:f9:02:e0:4d:32:36:fb:1d:f7:7e:da:57:44:
04:bf:9b:d1:ff:d2:3d:bb:47:d5:e9:2a:07:e2:25:
19:0b:c1:83:e7:0c:32:d6:8f:9a:ae:9c:cb:e2:c4:
1b:87:81:12:31:cc:bb:a0:f6:22:90:33:f3:58:a6:
a3:08:bf:b6:20:ec:ac:eb:c0:5c:43:df:98:34:d4:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:C2:88:EC:9B:5D:33:DD:26:08:09:47:66:F2:9B:A8:88:34:FD
X509v3 Authority Key Identifier:
keyid:DC:F0:35:F7:BF:D5:06:DF:6E:19:24:0F:B4:3A:EE:B2:C8:52:00:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PA197_VBt9uGSQPtDrusshSANQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/zFjCiOybXTPdJggJR2bym6iINP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1b610b-2740-44e9-844a-9a3ccd99bdb4/1/3PA197_VBt9uGSQPtDrusshSANQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.77.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c4:35:21:67:3c:d6:94:9d:c5:4e:87:3f:89:cd:08:84:92:
19:98:f5:d1:2d:99:4b:9f:8c:06:40:c8:b5:fd:e2:6b:52:4d:
bc:c0:13:58:0f:d0:ed:86:f1:1b:c0:34:c2:72:f0:21:f7:f2:
48:be:15:37:9e:12:19:3b:75:d4:da:19:87:0e:c7:0c:64:04:
d9:08:d8:f1:78:77:8b:5b:b9:4d:89:e0:c8:ce:a8:43:63:b8:
9b:20:c4:88:2c:13:3e:43:32:21:70:bb:06:f4:82:24:a6:8e:
11:b1:90:57:a0:e6:36:3f:c2:a8:cf:d1:50:27:c8:7b:e5:ac:
be:a6:17:9a:77:80:fb:be:a6:42:4d:12:4f:85:2f:03:91:1e:
17:9e:61:43:2c:dd:d1:0e:e4:05:78:1b:bb:bb:a0:9e:39:2a:
c8:3d:8f:37:83:1e:af:52:cf:05:b4:65:38:1b:97:ce:f5:04:
da:b4:a2:87:8d:cc:4d:8d:6a:5a:e6:aa:b9:23:0a:67:45:17:
3b:5a:88:41:7b:a5:8a:fc:ca:18:de:80:9c:6a:7b:5b:89:55:
f9:98:e0:01:a9:09:6f:42:64:34:b9:56:8c:d9:5e:ca:72:9c:
49:31:26:07:b4:de:62:1c:cc:31:c3:b5:3e:11:de:d9:f4:66:
15:4e:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org