Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c762b9-f91a-45b4-8068-20de177bfbf7/1/1-6-vSZoSqzZJRGjJ2mhhdiMh1bE.roa
File: 1-6-vSZoSqzZJRGjJ2mhhdiMh1bE.roa (raw, json)
Hash identifier: cs+0yZGM8h8htqfRazEezHVmRyW+QxROXmoJfSkCTWI=
Subject key identifier: FB:AF:AF:49:9A:12:AB:36:49:44:68:C9:DA:68:61:76:23:21:D5:B1
Certificate issuer: /CN=3e047b4b6df73e35ac4d9a827b4048bd90a21237
Certificate serial: 01866C2E944C72328431DCE92B79E332A626
Authority key identifier: 3E:04:7B:4B:6D:F7:3E:35:AC:4D:9A:82:7B:40:48:BD:90:A2:12:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgR7S233PjWsTZqCe0BIvZCiEjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c762b9-f91a-45b4-8068-20de177bfbf7/1/1-6-vSZoSqzZJRGjJ2mhhdiMh1bE.roa
Signing time: Mon 20 Feb 2023 00:17:17 +0000
ROA not before: Mon 20 Feb 2023 00:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 195.144.10.0/24 maxlen: 24
194.150.208.0/23 maxlen: 24
2001:678:10c::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6c:2e:94:4c:72:32:84:31:dc:e9:2b:79:e3:32:a6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e047b4b6df73e35ac4d9a827b4048bd90a21237
Validity
Not Before: Feb 20 00:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbafaf499a12ab36494468c9da6861762321d5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:40:fc:7f:5c:7f:67:99:19:00:f8:79:cd:
b9:6e:f2:f8:66:94:f9:4d:e4:d0:4e:64:3a:95:da:
c5:6d:74:bf:45:d9:ee:84:ba:3d:f3:34:5e:29:3d:
0a:f7:8c:19:dd:41:7a:ed:4d:2d:80:68:ca:34:2e:
a7:cd:a4:8f:1f:b3:56:1b:4d:b5:8f:ca:7e:69:8c:
8c:24:ea:56:cd:79:cf:cc:1d:d1:91:aa:d9:fc:76:
c7:42:04:32:8b:8f:59:f1:f3:ee:dd:3d:a8:48:da:
b2:d7:06:4c:fc:a4:28:eb:f3:34:fe:ca:e5:f7:2a:
e5:21:6c:f4:04:86:68:d8:87:97:f5:f5:a3:c3:da:
d2:c5:69:1d:10:15:16:79:d9:75:c8:df:de:4a:3e:
27:5a:c8:1a:b6:f6:10:83:79:1e:7e:bc:33:80:b5:
3b:89:f8:92:1d:75:81:6f:30:ff:1f:7b:33:bb:a5:
f8:28:77:54:17:10:8b:e9:76:e8:ab:e1:0b:dc:28:
ac:5a:9e:5b:06:c9:70:9f:a0:88:39:a2:ce:eb:86:
5e:79:64:16:e7:9f:0a:bc:56:53:45:95:98:20:d2:
cc:ff:3d:6d:83:cd:9c:29:0e:bb:41:39:68:2c:2b:
71:ac:9c:97:49:7a:1e:dd:ec:99:d9:14:59:b5:52:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:AF:49:9A:12:AB:36:49:44:68:C9:DA:68:61:76:23:21:D5:B1
X509v3 Authority Key Identifier:
keyid:3E:04:7B:4B:6D:F7:3E:35:AC:4D:9A:82:7B:40:48:BD:90:A2:12:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgR7S233PjWsTZqCe0BIvZCiEjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c762b9-f91a-45b4-8068-20de177bfbf7/1/1-6-vSZoSqzZJRGjJ2mhhdiMh1bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c762b9-f91a-45b4-8068-20de177bfbf7/1/PgR7S233PjWsTZqCe0BIvZCiEjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.208.0/23
195.144.10.0/24
IPv6:
2001:678:10c::/48
Signature Algorithm: sha256WithRSAEncryption
7f:4c:dd:89:91:68:f6:47:3f:8f:a4:da:47:78:98:0e:24:5f:
f8:53:da:ba:4d:53:20:ba:d1:d0:de:8f:fc:f1:ce:5a:4c:dc:
9a:41:ed:f1:13:38:b8:b9:e6:21:2e:bf:41:95:66:a4:73:95:
d0:1c:32:a4:04:cd:19:64:e7:61:fb:e4:5e:d8:c0:46:bf:d6:
9d:5a:58:82:ce:70:7e:27:69:5a:63:3e:d1:8e:28:4c:48:7b:
06:a3:77:5d:b3:cd:f9:42:a7:5a:b5:b2:00:6d:13:4e:4f:cf:
90:57:45:e0:13:11:8b:5e:a8:10:cc:47:0b:50:df:ad:0c:09:
ec:93:39:9a:c4:36:6b:91:89:90:cb:2b:dc:0e:61:0c:b2:d1:
2b:64:29:ea:5f:79:95:cd:b5:66:2a:a2:8d:25:5a:74:54:da:
e3:56:47:b1:55:7c:55:d7:92:d2:c1:28:af:f7:1c:31:e9:bd:
05:ab:69:e7:ad:dc:e3:b6:ed:85:0f:c1:02:2e:5b:ce:db:f1:
d9:fb:03:a4:46:92:40:80:e6:d5:8c:e6:c9:71:ad:07:49:ae:
db:f6:22:ce:c9:c8:d4:ea:98:9c:a2:28:96:fd:ba:c0:8b:2f:
4d:b2:72:0b:5b:90:84:5d:d1:e6:39:70:ec:dd:5c:9a:28:ea:
74:76:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:43 2024 by rpki-client on console-ams.rpki-client.org