Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/ziljjYh_c4vGHQ2qUmV71Qa1Uqo.roa
File: ziljjYh_c4vGHQ2qUmV71Qa1Uqo.roa (raw, json)
Hash identifier: LHbVTlkiUBdhYybQLXNA/M8+psG2I+X/94BIK0CwIk0=
Subject key identifier: CE:29:63:8D:88:7F:73:8B:C6:1D:0D:AA:52:65:7B:D5:06:B5:52:AA
Certificate issuer: /CN=23accae620e9e49f1ab69a1e6979c288bc0136ba
Certificate serial: 01857094E79CA8DA09B4BD62319C273982D0
Authority key identifier: 23:AC:CA:E6:20:E9:E4:9F:1A:B6:9A:1E:69:79:C2:88:BC:01:36:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6zK5iDp5J8atpoeaXnCiLwBNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/ziljjYh_c4vGHQ2qUmV71Qa1Uqo.roa
Signing time: Mon 02 Jan 2023 03:44:44 +0000
ROA not before: Mon 02 Jan 2023 03:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25288
IP address blocks: 195.140.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:e7:9c:a8:da:09:b4:bd:62:31:9c:27:39:82:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23accae620e9e49f1ab69a1e6979c288bc0136ba
Validity
Not Before: Jan 2 03:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce29638d887f738bc61d0daa52657bd506b552aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:0e:65:84:00:5d:02:94:fb:df:9e:ec:0b:
cd:1e:f6:db:75:ee:be:77:8e:81:3f:3c:fb:9b:48:
f1:ad:ba:9b:15:de:dc:1f:ea:e7:f5:cd:ec:ea:0b:
e0:89:47:6c:ae:67:a5:88:2f:3d:71:bf:9f:f0:7f:
bb:f2:37:ae:41:ab:9d:ab:81:2c:95:0f:47:68:d5:
89:03:95:6c:d6:02:3b:d9:4e:a2:88:d3:09:f6:f1:
3c:0e:73:a4:c8:c8:5d:9f:2c:49:67:60:44:d8:5b:
1b:ad:72:07:10:c4:84:ed:14:7c:81:c1:68:99:38:
00:da:86:94:98:0c:bc:46:9e:7e:cb:b7:45:b7:13:
45:a4:67:dd:1c:54:c2:38:92:23:93:4a:1b:d1:92:
43:4d:67:dc:48:34:40:a0:c0:4a:f5:c2:3b:92:63:
6c:7b:9f:d6:5d:98:89:4e:16:67:30:a5:02:88:63:
31:95:e4:d8:5e:6d:fd:4b:89:6c:28:b6:3f:34:bb:
4f:8b:1a:a1:07:0e:0a:09:d1:cf:10:41:8d:e5:67:
d0:31:aa:49:a0:33:31:8b:f8:9b:15:e5:bc:e8:93:
b3:35:27:5e:44:ff:1f:13:e6:e4:d8:cc:c7:af:8a:
65:1e:45:1d:a6:af:a6:73:b8:7f:8a:cb:dc:e1:b1:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:63:8D:88:7F:73:8B:C6:1D:0D:AA:52:65:7B:D5:06:B5:52:AA
X509v3 Authority Key Identifier:
keyid:23:AC:CA:E6:20:E9:E4:9F:1A:B6:9A:1E:69:79:C2:88:BC:01:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6zK5iDp5J8atpoeaXnCiLwBNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/ziljjYh_c4vGHQ2qUmV71Qa1Uqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/I6zK5iDp5J8atpoeaXnCiLwBNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.176.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ca:9d:2e:6b:d0:ef:64:de:2a:60:04:8b:b0:15:67:ae:22:
8d:64:12:0f:21:9b:8b:1f:2b:48:0f:9c:82:91:9f:86:8f:d0:
0f:df:5b:80:39:47:6a:5e:3c:e9:15:f0:75:ae:d9:43:23:cb:
5b:07:b6:08:15:21:b1:74:36:97:60:7a:7e:7b:fb:2e:96:b5:
51:34:40:41:e4:df:a7:2a:fd:e0:01:b8:43:d6:0e:11:45:b7:
16:d0:9c:38:5e:84:5f:5c:67:5e:fa:83:bd:d7:e8:7a:b5:9a:
ea:7a:d4:9b:9b:0c:97:7e:eb:e7:9d:c4:0c:1c:7a:3e:11:fd:
58:64:f9:6e:bb:36:02:ef:81:3c:8d:a9:65:e7:f6:81:dd:88:
20:a2:59:5d:fa:27:8a:85:6e:e4:23:cb:94:0f:ba:29:c0:b6:
7f:06:2e:a3:04:aa:a7:5d:1b:ac:9c:5c:00:19:b3:b6:62:c4:
53:9f:09:b0:ad:67:58:b8:c2:e0:e0:cc:3a:e8:84:d2:79:e2:
51:4c:6c:96:5c:2b:3c:23:f8:be:b5:8a:35:d3:9b:64:f9:09:
4c:60:9d:f3:02:d1:26:c8:c4:9a:cc:da:4e:15:44:f6:10:3e:
aa:89:16:68:6c:50:fc:c6:fe:49:ea:15:34:eb:a5:a5:a2:6c:
d5:c3:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:28 2024 by rpki-client on console-ams.rpki-client.org