Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c762b9-f91a-45b4-8068-20de177bfbf7/1/dvC-olXhiqUYwap4SXesHn8K9ko.roa
File: dvC-olXhiqUYwap4SXesHn8K9ko.roa (raw, json)
Hash identifier: XXSNPFmCX6cfhESW2r1m5cOQc6hERxl0Ojn2+gibfL4=
Subject key identifier: 76:F0:BE:A2:55:E1:8A:A5:18:C1:AA:78:49:77:AC:1E:7F:0A:F6:4A
Certificate issuer: /CN=3e047b4b6df73e35ac4d9a827b4048bd90a21237
Certificate serial: 01856CC1532054D60C42CE983AA100F13632
Authority key identifier: 3E:04:7B:4B:6D:F7:3E:35:AC:4D:9A:82:7B:40:48:BD:90:A2:12:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgR7S233PjWsTZqCe0BIvZCiEjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c762b9-f91a-45b4-8068-20de177bfbf7/1/dvC-olXhiqUYwap4SXesHn8K9ko.roa
Signing time: Sun 01 Jan 2023 09:54:47 +0000
ROA not before: Sun 01 Jan 2023 09:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21155
IP address blocks: 195.144.10.0/24 maxlen: 24
194.150.208.0/23 maxlen: 24
2001:678:10c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:53:20:54:d6:0c:42:ce:98:3a:a1:00:f1:36:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e047b4b6df73e35ac4d9a827b4048bd90a21237
Validity
Not Before: Jan 1 09:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76f0bea255e18aa518c1aa784977ac1e7f0af64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:83:ed:11:bb:ba:0b:ef:08:6d:1d:75:d1:
61:28:ab:3a:da:af:12:1f:1d:10:22:ec:01:4e:4f:
90:9a:3b:52:de:c0:0c:40:cd:cd:7d:fa:22:bb:8b:
19:1b:c3:f1:ab:43:07:e5:76:0b:89:72:de:50:1a:
50:2e:1b:34:9e:31:e3:de:78:18:14:ce:90:59:76:
16:22:e4:bb:3d:99:4c:d7:eb:c4:6b:8e:cb:aa:78:
2d:51:00:6e:76:54:a0:52:37:eb:da:89:ee:63:7a:
bd:c1:41:e0:0a:8e:4c:49:23:ae:72:ef:45:9c:86:
c3:59:5d:e3:af:31:a9:6a:73:91:24:0e:c2:19:3f:
6f:5a:e8:6a:c9:7b:e2:87:8b:60:54:a1:ec:19:d4:
22:7b:db:cb:27:5c:22:0a:61:bd:21:32:07:15:cb:
6b:69:cc:9c:ac:8e:93:eb:e1:c6:75:cf:bd:28:40:
d3:50:20:f8:98:3b:63:e6:13:61:4b:27:44:05:78:
d1:ca:53:4c:06:58:45:8d:04:ce:fe:0d:c3:3a:47:
98:ee:61:c4:36:83:30:b8:ee:09:73:3a:f0:67:5a:
16:f9:91:ae:5c:e6:4f:01:24:24:8e:ad:ff:44:50:
2c:ae:bb:50:62:61:63:18:4e:97:97:df:17:b9:14:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F0:BE:A2:55:E1:8A:A5:18:C1:AA:78:49:77:AC:1E:7F:0A:F6:4A
X509v3 Authority Key Identifier:
keyid:3E:04:7B:4B:6D:F7:3E:35:AC:4D:9A:82:7B:40:48:BD:90:A2:12:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgR7S233PjWsTZqCe0BIvZCiEjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c762b9-f91a-45b4-8068-20de177bfbf7/1/dvC-olXhiqUYwap4SXesHn8K9ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c762b9-f91a-45b4-8068-20de177bfbf7/1/PgR7S233PjWsTZqCe0BIvZCiEjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.208.0/23
195.144.10.0/24
IPv6:
2001:678:10c::/48
Signature Algorithm: sha256WithRSAEncryption
46:a3:03:8b:ca:c5:b5:fa:45:fd:4a:7c:e5:ae:01:82:a4:6b:
a7:90:47:d0:a8:06:80:23:3e:52:c6:a3:64:f5:1a:99:e4:51:
3a:2b:36:00:7d:c1:96:bd:7e:d8:a0:e6:ae:1b:0f:51:86:80:
37:3b:e4:0b:a1:13:98:44:1c:fe:5f:83:55:8a:ef:b1:b1:a8:
e0:07:56:4e:03:d1:a2:85:b6:cc:2c:45:86:17:e1:6f:02:11:
f4:10:80:47:45:83:75:6d:b5:b8:3d:66:06:7d:17:4e:3a:d2:
ae:6d:85:9f:19:e3:75:93:fc:b8:6c:25:60:f1:74:d7:17:0c:
b1:ec:5f:20:f2:b7:0e:ac:0b:e7:9f:7b:8b:90:cc:33:2f:e8:
49:b1:f0:f0:b6:40:d2:55:80:89:95:2b:09:76:fe:b5:2e:d6:
d1:f5:e0:ae:68:a4:26:9e:a1:d0:75:72:0b:b2:15:88:27:e0:
90:28:9a:01:ab:fd:88:b1:c8:bf:b6:05:51:65:d5:70:23:e2:
a6:6b:ac:11:a8:5c:6d:9f:75:74:39:4b:80:a9:ff:3a:83:89:
c0:73:bf:ff:3b:53:68:98:db:10:68:ad:28:81:57:9e:87:ac:
d5:1c:be:a2:f6:1f:d9:fb:08:3f:3a:b5:20:57:58:25:c5:20:
79:76:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:55 2024 by rpki-client on console-fra.rpki-client.org