Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/U9FGGOKSvP5U7eCLKHnug_k-r80.roa
File: U9FGGOKSvP5U7eCLKHnug_k-r80.roa (raw, json)
Hash identifier: 2BBhvrsBfauF+6+aaR34GJlGeAv0dSVvrBN/6cGlIDs=
Subject key identifier: 53:D1:46:18:E2:92:BC:FE:54:ED:E0:8B:28:79:EE:83:F9:3E:AF:CD
Certificate issuer: /CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Certificate serial: 01856FC2899E7CE4A5D98ED2C8A61D08455D
Authority key identifier: 54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/U9FGGOKSvP5U7eCLKHnug_k-r80.roa
Signing time: Sun 01 Jan 2023 23:54:58 +0000
ROA not before: Sun 01 Jan 2023 23:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 195.69.163.0/24 maxlen: 24
2a12:3e40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:89:9e:7c:e4:a5:d9:8e:d2:c8:a6:1d:08:45:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Validity
Not Before: Jan 1 23:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53d14618e292bcfe54ede08b2879ee83f93eafcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:b2:ae:bc:41:18:3a:dc:b7:f2:0a:59:6c:
c1:9d:c1:4e:19:1f:13:f9:5c:1f:17:f1:e9:fe:ed:
ae:0d:02:5e:a7:4d:54:5f:4d:2b:22:66:2e:2c:9b:
5e:10:a5:21:80:37:da:92:1f:07:c4:24:0c:36:79:
e9:d5:03:a8:3a:89:a1:27:aa:52:2b:90:f3:88:12:
f6:69:7f:42:78:4d:7c:47:52:d5:92:22:be:d7:ce:
a3:ec:76:87:f7:b9:47:86:e2:55:99:30:9d:c7:f2:
98:10:97:d3:ca:10:74:3a:bc:29:e7:71:59:d9:69:
fc:fb:98:77:de:fc:bb:e8:b5:05:10:68:98:4c:0d:
61:86:13:6e:3c:49:26:b2:bf:73:b1:c6:3a:12:2b:
91:4c:f7:08:b7:4a:3a:47:17:11:3d:ba:e8:8f:9f:
a2:18:4e:cb:76:9d:cc:48:8b:5e:0c:7e:9c:d5:10:
76:06:30:27:bf:d7:e7:42:78:a3:26:ca:18:24:ec:
c3:3c:17:8f:c9:06:91:b5:15:ed:2f:48:79:b8:96:
24:eb:d3:68:a8:1e:ba:a0:1c:91:5c:ab:8b:7d:7f:
2b:58:2d:5e:6d:16:b2:00:ae:20:0e:56:61:a1:fc:
15:8c:ba:df:ce:98:6e:0c:3a:5e:aa:83:50:6c:a2:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D1:46:18:E2:92:BC:FE:54:ED:E0:8B:28:79:EE:83:F9:3E:AF:CD
X509v3 Authority Key Identifier:
keyid:54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/U9FGGOKSvP5U7eCLKHnug_k-r80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.163.0/24
IPv6:
2a12:3e40::/44
Signature Algorithm: sha256WithRSAEncryption
66:f9:47:89:b1:ce:c0:f4:64:31:bf:06:f7:2b:a5:dd:8a:49:
8f:2e:ce:e8:a9:34:77:3f:be:bd:db:78:c2:d0:28:f9:09:70:
4b:db:38:83:e6:51:1f:9f:96:44:5b:55:56:b8:a2:d4:33:de:
09:26:68:c0:4c:95:0e:f6:10:e2:e8:0c:28:22:d5:d7:11:75:
0b:3e:64:ca:87:8e:4a:a6:4b:69:f1:39:d2:c1:a8:b1:20:14:
c4:63:94:9d:d1:33:77:90:d3:e7:06:13:7d:45:f1:6f:27:ee:
ba:73:11:10:62:d4:23:95:7e:5f:f6:e7:24:99:84:b0:c0:97:
07:ff:3e:49:50:1e:36:de:a0:e0:9c:dc:ce:c8:02:74:be:f9:
96:fd:38:34:5a:16:b5:7d:87:ea:b1:95:88:e5:30:9b:df:36:
eb:38:b1:ed:ab:4e:63:90:6c:1d:b8:e8:d1:da:66:3f:65:33:
57:ca:1d:7c:63:ea:93:4f:12:c4:af:6b:45:df:b6:2f:53:45:
c6:fb:4e:f6:12:4e:65:4f:bc:64:a1:fb:38:90:a3:8d:46:dd:
62:bb:7b:1a:99:4e:15:11:c7:37:48:2d:57:b6:ee:12:76:9c:
7f:e8:5b:0e:33:38:86:7c:b6:df:d5:7f:8b:ca:e2:5c:d6:fb:
88:07:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:53 2024 by rpki-client on console-fra.rpki-client.org