Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/_TxHgwE9XUpGi4a9t5W4nxnocqs.roa
File: _TxHgwE9XUpGi4a9t5W4nxnocqs.roa (raw, json)
Hash identifier: uv/EmXl8bz/0IN7yd8YWw2WP3GOZ0DB6XPTdikJW8ng=
Subject key identifier: FD:3C:47:83:01:3D:5D:4A:46:8B:86:BD:B7:95:B8:9F:19:E8:72:AB
Certificate issuer: /CN=d2090b6e7691f7e19d771e63581a181d7a6e0da1
Certificate serial: 01890127427E431344FC2EC2405C82790B3D
Authority key identifier: D2:09:0B:6E:76:91:F7:E1:9D:77:1E:63:58:1A:18:1D:7A:6E:0D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gkLbnaR9-Gddx5jWBoYHXpuDaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/_TxHgwE9XUpGi4a9t5W4nxnocqs.roa
Signing time: Wed 28 Jun 2023 08:38:17 +0000
ROA not before: Wed 28 Jun 2023 08:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201634
IP address blocks: 195.96.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:27:42:7e:43:13:44:fc:2e:c2:40:5c:82:79:0b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2090b6e7691f7e19d771e63581a181d7a6e0da1
Validity
Not Before: Jun 28 08:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd3c4783013d5d4a468b86bdb795b89f19e872ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:83:58:46:cf:4a:78:f2:ea:e4:12:98:2f:
ce:56:e0:b2:2e:e6:b7:df:84:b6:ab:8d:f1:1e:5c:
51:4a:f6:fa:cf:08:30:55:86:37:92:93:e5:b5:89:
6d:25:14:62:07:ff:11:9b:2c:f7:5d:d8:20:df:07:
bd:8b:4b:af:49:13:59:a8:68:ff:15:19:08:ff:06:
c7:17:3b:fd:37:4a:59:5f:14:c1:d0:36:12:26:c2:
1b:92:d0:a0:c2:56:fb:7f:0a:e4:d4:3d:c0:0c:be:
c6:db:90:1e:79:c0:62:12:7f:53:12:4c:87:ab:b8:
49:27:26:a7:cd:7a:33:31:ba:7a:f2:da:35:d5:5c:
5f:22:a2:96:28:51:b1:b5:df:e0:2f:f8:86:61:c9:
ec:ac:40:2d:86:70:fe:84:3b:3a:af:6a:01:33:a6:
e0:12:ee:fc:3d:54:59:e9:9e:55:2c:63:71:7e:c7:
02:5b:e7:89:3c:1f:00:3a:5d:24:ec:0a:01:0e:0d:
75:b2:b6:ee:95:68:f0:6c:6d:38:3f:56:61:0b:d8:
1a:6b:03:e9:64:50:98:fd:a1:5d:9a:b0:c5:15:de:
96:ec:c5:cf:5e:fb:26:ba:41:c7:10:7a:43:8b:62:
ba:84:08:6b:33:20:30:e4:f2:35:6d:f9:03:52:ba:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3C:47:83:01:3D:5D:4A:46:8B:86:BD:B7:95:B8:9F:19:E8:72:AB
X509v3 Authority Key Identifier:
keyid:D2:09:0B:6E:76:91:F7:E1:9D:77:1E:63:58:1A:18:1D:7A:6E:0D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gkLbnaR9-Gddx5jWBoYHXpuDaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/_TxHgwE9XUpGi4a9t5W4nxnocqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa09f3-d0ea-48d0-acb1-436e34484bfc/1/0gkLbnaR9-Gddx5jWBoYHXpuDaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bd:df:00:04:b5:2e:6b:a1:53:31:81:f2:58:72:31:b1:68:
e3:0d:fb:76:ca:e9:63:dc:c0:c9:f6:d2:64:f9:f3:ec:98:19:
ae:fb:e1:bd:3d:7e:b0:c8:d2:ca:5a:b1:ad:80:1e:d1:75:86:
a7:9a:4f:93:18:a4:64:1c:b1:b8:b0:94:ae:f7:92:90:94:01:
fd:d1:00:cd:52:a9:31:6f:14:09:d2:b2:d4:27:b5:12:dd:0a:
14:65:6e:aa:6d:3b:5e:c8:b9:cb:0c:05:65:06:c3:b1:b0:ca:
0d:9a:4c:89:cb:a2:4f:71:88:51:58:02:72:20:ae:dc:19:47:
1b:b7:80:8b:83:e0:9c:96:59:ef:78:cf:10:98:e3:07:92:7a:
00:8f:a5:ed:81:ea:95:9e:cb:8e:06:a7:8d:57:27:a6:79:e1:
aa:87:85:df:82:a8:54:5c:1d:32:17:9a:99:03:42:d6:db:46:
bd:2b:fa:cb:9b:81:eb:f9:0a:9d:43:08:63:23:32:46:57:39:
b0:fd:fa:c3:7b:a5:42:20:bc:30:de:48:9d:58:0c:bf:c3:bb:
dd:c1:35:e2:71:fa:52:aa:1f:fe:79:84:28:2a:86:ea:55:d9:
6d:14:14:73:0f:33:8b:a4:04:49:b5:8b:9d:55:2a:fa:1d:66:
49:b1:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 15:51:01 2023 by rpki-client on console-ams.rpki-client.org