Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/JcsJunOxd3RwoEV7hDVLrDTAGwE.roa
File: JcsJunOxd3RwoEV7hDVLrDTAGwE.roa (raw, json)
Hash identifier: Com7iBDcZkLBlAj8eJKXdaJxT3e/1eiFGfVA11PU4w0=
Subject key identifier: 25:CB:09:BA:73:B1:77:74:70:A0:45:7B:84:35:4B:AC:34:C0:1B:01
Certificate issuer: /CN=dc332686065555dfe5505add5226a9cf9482879a
Certificate serial: 01856E6FC33DF1EC98B7C2D79F7DA23C2692
Authority key identifier: DC:33:26:86:06:55:55:DF:E5:50:5A:DD:52:26:A9:CF:94:82:87:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DMmhgZVVd_lUFrdUiapz5SCh5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/JcsJunOxd3RwoEV7hDVLrDTAGwE.roa
Signing time: Sun 01 Jan 2023 17:44:56 +0000
ROA not before: Sun 01 Jan 2023 17:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 195.60.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:c3:3d:f1:ec:98:b7:c2:d7:9f:7d:a2:3c:26:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc332686065555dfe5505add5226a9cf9482879a
Validity
Not Before: Jan 1 17:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25cb09ba73b1777470a0457b84354bac34c01b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:b0:c5:d3:3d:69:3f:03:ce:02:ef:51:12:
8b:64:70:4a:0f:e2:cd:cc:b9:8a:49:ec:e6:bf:f6:
ba:56:04:8c:7f:fd:1e:84:ed:17:db:fe:58:43:1d:
48:af:14:60:e7:c0:77:b7:5c:d2:34:70:59:6d:59:
29:bc:26:7b:7a:27:0f:43:dc:bd:cb:17:cf:1c:76:
33:b9:85:59:a5:e7:a0:2e:60:53:fa:33:3c:ef:47:
20:96:0b:f5:b0:f5:2e:91:66:4d:c4:e6:d2:64:fe:
5a:ce:a6:30:f4:27:64:51:30:98:fc:3d:71:37:9c:
08:42:ba:ab:c0:f8:c9:6f:ce:15:e0:a3:07:e3:eb:
6c:32:34:ca:6a:d9:b2:73:2a:32:41:98:fb:a2:66:
64:25:92:6d:d3:c6:c1:06:3b:c4:43:63:e8:ed:77:
00:28:a9:12:59:6a:e2:03:13:b1:0d:23:f9:33:d6:
82:24:f4:2c:01:84:e4:63:ec:1c:8d:fc:96:44:28:
23:a5:56:27:63:ba:f6:f1:ed:ba:c3:7d:a8:e0:79:
0b:1a:f9:e9:74:fa:21:0a:b1:43:71:15:b7:20:3f:
0b:04:cf:c7:c4:49:1d:01:ba:1f:1f:8c:1c:5d:70:
fb:49:9b:84:b7:cc:06:89:d9:7d:45:75:3b:fe:1c:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:09:BA:73:B1:77:74:70:A0:45:7B:84:35:4B:AC:34:C0:1B:01
X509v3 Authority Key Identifier:
keyid:DC:33:26:86:06:55:55:DF:E5:50:5A:DD:52:26:A9:CF:94:82:87:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DMmhgZVVd_lUFrdUiapz5SCh5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/JcsJunOxd3RwoEV7hDVLrDTAGwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/3DMmhgZVVd_lUFrdUiapz5SCh5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.170.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b6:d7:c9:16:e0:c3:4b:27:1d:91:e2:42:f0:f5:d4:81:bb:
05:66:16:57:43:de:6f:43:a5:28:dd:99:b2:74:c4:65:99:b0:
18:f6:c1:86:88:49:b6:72:4f:68:ad:60:8c:34:7e:31:71:84:
fb:ad:51:e6:af:5f:bc:2d:0d:49:22:4a:da:c0:ba:5a:ba:e6:
2b:77:e4:44:70:38:ec:c0:25:9c:49:18:ba:af:74:a6:bf:2c:
7b:43:db:76:52:b8:49:c1:dc:f6:5f:29:59:fd:5d:dd:b5:95:
b9:af:88:32:7a:e8:9e:66:6a:36:29:2c:17:87:14:e4:bc:23:
da:a0:aa:87:df:92:50:a7:26:d8:fa:01:82:6b:ad:80:f1:7a:
5d:74:66:ae:15:a7:55:76:ab:69:31:9b:7d:b3:1e:4f:f4:1a:
94:5d:ee:93:53:4f:32:e6:7e:f2:c5:0b:8c:69:0b:9c:0b:63:
59:35:33:48:df:6c:1f:cf:7e:c7:a3:f1:94:c6:fe:58:f3:b5:
3f:75:4f:45:8b:5e:3d:8b:1a:64:f8:62:58:a8:8e:6d:09:88:
a2:7f:84:77:91:26:ea:3a:8e:27:37:6f:00:72:50:5f:78:44:
6e:71:ae:bd:a1:f1:e7:41:f1:ba:88:fc:8e:5a:e3:68:e6:2b:
48:7f:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:25 2024 by rpki-client on console-fra.rpki-client.org