Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/o9pFQWflRdfGSlX4C4-926U-hgM.roa
File: o9pFQWflRdfGSlX4C4-926U-hgM.roa (raw, json)
Hash identifier: +7VAOeTDW8E4gfoJj+YyD8WC8kCRNUyRNRoUMaXnvVE=
Subject key identifier: A3:DA:45:41:67:E5:45:D7:C6:4A:55:F8:0B:8F:BD:DB:A5:3E:86:03
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01856ED4C680E75074299E2D4CA376921CA1
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/o9pFQWflRdfGSlX4C4-926U-hgM.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210531
IP address blocks: 195.8.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c6:80:e7:50:74:29:9e:2d:4c:a3:76:92:1c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3da454167e545d7c64a55f80b8fbddba53e8603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:c9:cc:a9:db:1d:c5:9b:96:13:82:80:98:
5a:d6:b5:fe:f7:d6:95:8d:ea:06:aa:66:7e:41:db:
ea:c1:53:84:3b:45:4e:fd:4f:e9:82:4e:30:6a:97:
07:6e:da:d1:02:84:de:a9:9c:cf:57:b6:60:14:67:
34:56:1f:9e:56:4c:ad:a9:4a:81:94:ff:2f:fc:5d:
6d:29:cc:51:ac:29:30:05:66:b4:27:a2:60:72:19:
a5:dd:6a:71:83:cb:ec:8d:05:01:f2:37:7b:ef:4b:
c5:4f:75:83:cd:40:0d:3a:3f:30:9d:21:8f:80:bd:
fb:83:08:72:40:63:69:f5:32:28:de:ed:da:e7:fa:
98:37:f2:9e:63:0d:2e:31:99:c0:91:0d:01:bb:9e:
0a:0f:0d:08:11:5f:3e:e5:db:ba:a4:7b:f5:78:6e:
1e:a5:e8:e8:a4:a6:08:2b:75:6c:29:31:73:a6:54:
a1:5a:76:ff:53:0e:06:c0:c5:12:e7:61:26:77:05:
b9:7c:65:2b:7e:fe:7f:a3:16:ce:57:cb:46:05:2a:
54:2f:ae:bd:63:73:25:2e:8d:f9:14:2f:ed:77:19:
be:f0:a8:f1:e8:e3:e4:85:6a:ea:10:80:24:8a:b7:
98:b2:a8:66:62:07:e6:ff:97:09:0f:24:cf:f7:5a:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:45:41:67:E5:45:D7:C6:4A:55:F8:0B:8F:BD:DB:A5:3E:86:03
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/o9pFQWflRdfGSlX4C4-926U-hgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:05:a3:5f:0f:17:44:d3:f0:64:71:13:dc:1d:4b:1f:cb:82:
fa:8c:23:50:08:3e:d6:3c:7a:48:3d:76:f9:d1:2c:2b:68:b5:
70:23:3c:2a:b4:32:50:06:ae:07:e8:f8:84:83:12:91:c3:26:
c3:ee:70:ad:b5:be:7a:13:cf:11:21:64:16:4d:39:fb:b1:94:
90:5d:c0:f5:11:4b:43:8e:e8:81:66:0e:08:d9:22:87:07:96:
85:9c:4d:4e:a5:30:00:35:36:fa:02:cd:88:9b:26:b1:8e:80:
6b:4d:42:53:58:93:3d:a3:00:c8:89:59:66:ab:24:25:ac:69:
0a:2b:9a:9c:a5:26:e8:b0:bd:ff:1a:81:cb:da:90:88:f3:62:
d6:70:f1:1c:9d:bb:29:64:60:40:23:cb:0b:0e:cc:b3:0a:fb:
c8:dd:de:fc:c5:bd:51:83:b8:f0:77:ce:76:8a:e7:c7:42:60:
b1:c9:e6:97:52:5b:2f:23:fa:1c:fd:82:99:e6:58:da:d8:38:
5b:c8:46:e8:d5:58:0e:af:74:f5:30:c9:c4:f3:39:14:df:02:
36:b4:1c:48:4f:d3:a6:0e:08:7b:a6:32:f4:9b:38:95:b1:92:
1f:6c:7b:f7:59:f2:74:07:cf:e5:57:e4:43:7c:80:e4:06:c7:
56:3c:f8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net