Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/1-jZhMz783i_SlcHXjpja44ifVcQ.roa
File: 1-jZhMz783i_SlcHXjpja44ifVcQ.roa (raw, json)
Hash identifier: YrbtOWXSHQv/A7zIkBh1zb8Zk2L0zWvWPksiEsKJOpA=
Subject key identifier: FA:36:61:33:3E:FC:DE:2F:D2:95:C1:D7:8E:98:DA:E3:88:9F:55:C4
Certificate issuer: /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial: 018CC42460E0521240F05BA198D67C42F887
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/1-jZhMz783i_SlcHXjpja44ifVcQ.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56762
IP address blocks: 64.187.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:60:e0:52:12:40:f0:5b:a1:98:d6:7c:42:f8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa3661333efcde2fd295c1d78e98dae3889f55c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:3a:75:62:bc:9f:2e:45:e0:6f:65:68:53:
6c:08:f1:23:db:58:3b:53:8f:8d:a9:15:8e:48:10:
4c:f8:ac:ed:1e:84:4e:85:95:52:09:d5:51:86:f2:
b2:67:47:0f:52:c5:51:ef:ec:ba:72:6c:57:a8:d6:
89:a2:68:28:a1:1b:78:8e:85:7c:9b:d7:c1:e5:98:
3c:2f:48:16:9e:f2:2f:73:1c:55:7e:1f:4a:f1:0d:
a1:ed:2c:e6:b0:1d:c9:7c:43:07:7a:f9:8b:7b:01:
01:d5:05:dc:b1:09:83:82:21:9a:68:e5:8e:e1:30:
0f:bd:a5:7c:c4:2d:73:b3:65:b3:43:bf:9c:ba:ff:
70:81:3b:e7:7d:11:b8:d7:f2:cd:e7:a5:27:9b:d7:
65:bd:9a:99:f9:42:f8:90:5b:cd:ae:c9:e0:da:e3:
97:68:91:16:4f:f4:7a:90:b1:b0:ed:b5:90:43:78:
d0:72:65:ec:db:85:f9:c9:6e:c5:2f:c5:24:9a:35:
3a:5d:93:88:a8:81:3a:fd:e0:4f:d2:c4:14:66:35:
9b:85:80:72:ae:23:bd:65:4d:bd:05:e3:2c:ff:55:
54:2b:92:2b:f2:25:4e:6e:7f:2e:00:73:84:f1:c2:
3e:b7:42:17:97:b8:6b:44:19:42:45:23:b3:78:a9:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:61:33:3E:FC:DE:2F:D2:95:C1:D7:8E:98:DA:E3:88:9F:55:C4
X509v3 Authority Key Identifier:
keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/1-jZhMz783i_SlcHXjpja44ifVcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:fc:0c:15:bb:ad:80:f5:b9:34:9c:fa:27:e5:e3:f0:db:26:
0b:d1:db:bd:fc:f6:d4:6e:13:36:7c:92:0d:89:44:4a:8a:40:
7a:ce:41:fb:44:7d:ab:66:73:77:d5:3c:e3:6f:a6:6c:fc:aa:
f8:82:5a:01:a9:7f:16:dc:56:38:bb:ba:bb:ec:43:db:e3:01:
2f:fe:43:4e:1d:f4:30:0c:94:3a:5d:d0:8b:d3:77:71:49:ce:
31:71:cd:f5:2b:27:2c:58:11:4e:41:4a:56:a7:3b:23:da:f6:
b8:42:29:21:0d:1c:c6:38:c9:7c:a3:48:58:fe:cb:c6:8a:0f:
6f:d6:df:f9:7a:fb:46:77:e1:4b:25:dd:9b:e5:9c:e7:48:4c:
26:f2:2e:7a:13:30:f2:ac:fd:d3:73:9d:b5:df:a5:d4:98:3d:
d5:1a:83:19:b3:8c:92:18:d7:47:30:84:13:f6:9d:7a:b8:e3:
1e:dc:e3:c1:83:35:22:21:d6:21:f3:25:b5:da:15:0d:67:d5:
3a:e1:25:b5:ec:2e:f8:a3:3c:44:6f:44:6e:3b:fd:90:38:35:
54:53:e7:88:54:0e:d8:6c:7a:75:3d:d0:07:4b:8e:df:f6:54:
9a:24:22:c9:59:80:ec:45:46:88:44:f7:3d:02:1b:cc:ec:ee:
79:82:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:09 2024 by rpki-client on console-fra.rpki-client.org