Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/yo6T2PqX_zDVgP1k9E6zf2VsL5k.roa
File: yo6T2PqX_zDVgP1k9E6zf2VsL5k.roa (raw, json)
Hash identifier: AlkIqutdZLqmErD/6VVBxTYfdRa+65H3qhsMe9VVM14=
Subject key identifier: CA:8E:93:D8:FA:97:FF:30:D5:80:FD:64:F4:4E:B3:7F:65:6C:2F:99
Certificate issuer: /CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Certificate serial: 01857C64D97506B3B58074873F29801A3594
Authority key identifier: 43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/yo6T2PqX_zDVgP1k9E6zf2VsL5k.roa
Signing time: Wed 04 Jan 2023 10:47:42 +0000
ROA not before: Wed 04 Jan 2023 10:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 195.234.93.0/24 maxlen: 24
195.234.92.0/24 maxlen: 24
195.234.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:64:d9:75:06:b3:b5:80:74:87:3f:29:80:1a:35:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Validity
Not Before: Jan 4 10:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca8e93d8fa97ff30d580fd64f44eb37f656c2f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:bf:c9:d4:42:63:55:4d:63:d0:9f:b4:e7:
e8:cf:ed:4f:e6:c6:64:88:75:e0:78:f4:39:c4:3a:
2f:da:bd:45:bf:45:7d:c2:04:21:15:09:c5:23:61:
b9:87:1d:ef:69:60:74:42:a5:2f:2d:e5:08:05:e3:
c1:c0:c8:88:40:7f:93:21:b9:d3:7c:14:f7:79:36:
11:ab:f7:97:6e:88:be:c8:7b:1c:aa:0a:b6:62:1f:
88:b4:76:b6:f4:f8:fb:fd:4d:0e:13:df:50:ed:9a:
d9:7d:e6:5b:bf:0f:0d:2f:23:5e:c2:f0:2b:bc:c6:
7c:6e:7c:0a:30:53:9b:54:0b:a7:0a:df:00:38:31:
2f:e8:2c:d4:26:19:50:08:f4:bd:34:99:81:8e:d7:
8e:28:3d:0a:63:35:ba:ae:19:4c:b0:38:5f:23:18:
39:16:f5:5c:4a:2b:8b:99:b7:06:33:58:8c:c5:91:
89:6e:7c:f7:8c:14:b0:03:ed:e2:51:84:fa:76:9f:
0d:60:72:63:06:59:f9:7f:35:ff:a9:90:76:1a:c2:
87:37:d6:4c:10:12:11:87:71:1e:95:4f:7e:83:e0:
48:62:8a:76:6a:48:63:8e:bb:2f:e4:43:85:8c:9b:
0a:34:a4:ee:f3:1b:f3:a2:11:36:31:b8:47:d1:8a:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:93:D8:FA:97:FF:30:D5:80:FD:64:F4:4E:B3:7F:65:6C:2F:99
X509v3 Authority Key Identifier:
keyid:43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/yo6T2PqX_zDVgP1k9E6zf2VsL5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.92.0-195.234.94.255
Signature Algorithm: sha256WithRSAEncryption
29:fe:e9:54:c9:d4:5f:9a:b3:f9:81:18:9a:81:3c:19:fe:64:
97:d5:20:59:6e:85:4f:e5:e2:ea:20:ce:94:57:4b:a7:c8:d9:
b3:41:9f:34:f5:2a:98:8d:72:3f:35:48:c9:8c:6b:94:a9:60:
dd:33:d5:21:a7:5d:8d:eb:42:ad:c7:c1:36:93:21:56:2d:22:
92:ed:2d:fb:76:fd:ae:77:02:14:bc:ea:59:4f:23:45:ec:ac:
82:e6:c0:7b:e4:9c:8c:e9:71:3d:12:a7:30:9d:32:a3:8f:22:
da:e8:aa:19:d1:bc:37:9a:9b:74:08:9e:3d:16:1a:44:d9:44:
eb:30:e0:62:98:eb:33:fd:b5:65:7f:8a:a1:d0:a6:45:84:ce:
b0:f3:4b:fe:50:ae:24:03:f7:8e:8b:b8:33:cc:db:36:3e:09:
dc:82:34:51:84:0d:1f:9d:2c:ca:fa:25:01:77:80:7d:d8:cd:
66:6d:e5:9b:03:1a:ea:71:48:1a:a3:c9:40:9a:7f:1e:c6:14:
51:cb:36:fd:e1:24:92:b8:7a:af:ee:f0:fa:2b:22:4d:60:a1:
36:73:f7:4d:ce:3d:55:74:7d:48:8e:dd:5e:35:55:fa:ab:fa:
f8:72:d1:84:6c:c0:06:a7:0c:19:b9:d2:a8:9f:d6:68:5c:d2:
9a:8b:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org