Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/e_FKIyQtl1C8yh7JPwKG391C6Fs.roa
File: e_FKIyQtl1C8yh7JPwKG391C6Fs.roa (raw, json)
Hash identifier: +v8488KGeh+zPQCnfddeGNn/0oK4lluwYfhIn6Zks1g=
Subject key identifier: 7B:F1:4A:23:24:2D:97:50:BC:CA:1E:C9:3F:02:86:DF:DD:42:E8:5B
Certificate issuer: /CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Certificate serial: 01856FC288C22F594784EDA69116A37D1BC2
Authority key identifier: 54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/e_FKIyQtl1C8yh7JPwKG391C6Fs.roa
Signing time: Sun 01 Jan 2023 23:54:58 +0000
ROA not before: Sun 01 Jan 2023 23:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 195.69.163.0/24 maxlen: 24
2a12:3e40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:88:c2:2f:59:47:84:ed:a6:91:16:a3:7d:1b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Validity
Not Before: Jan 1 23:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bf14a23242d9750bcca1ec93f0286dfdd42e85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:a5:6a:74:e2:87:fa:af:96:63:70:9c:b9:
1f:83:72:9c:dd:39:87:c3:04:92:ba:86:37:55:46:
8b:c8:ae:82:e8:37:51:5e:b0:bf:24:0b:b4:f3:75:
b0:fc:99:dc:68:ea:77:09:35:a4:50:7a:30:68:4c:
ba:41:66:11:21:0f:7b:84:85:da:08:b4:98:cb:b8:
2f:71:a2:8e:71:39:2a:92:37:fd:87:9d:40:30:f6:
0c:a3:9f:d3:db:9c:f7:9c:47:8b:29:06:26:66:6c:
04:73:24:1c:0f:e1:aa:d0:3f:1f:59:96:a0:69:1a:
64:2d:e1:60:20:b5:30:6c:e2:16:8f:94:7a:84:91:
2b:fd:eb:66:44:f8:09:c2:89:51:d3:81:a7:4c:f3:
e3:52:a6:ec:af:6f:47:92:80:6e:02:35:8d:26:f4:
2e:61:3a:aa:7c:04:85:e5:c7:4a:d3:c4:b1:dd:16:
5b:ef:20:2c:c0:e6:98:8e:91:02:67:c4:a8:f8:56:
88:15:0f:b4:be:84:fa:2d:5a:a6:e4:9c:f5:74:9c:
01:e1:5c:79:71:0a:2b:83:e2:97:e2:bc:1d:03:fa:
62:cb:73:82:b2:99:5b:da:e9:a9:dc:d8:4e:99:0e:
fd:79:81:aa:c6:46:05:04:ec:05:1c:0a:a6:ab:2b:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:4A:23:24:2D:97:50:BC:CA:1E:C9:3F:02:86:DF:DD:42:E8:5B
X509v3 Authority Key Identifier:
keyid:54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/e_FKIyQtl1C8yh7JPwKG391C6Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.163.0/24
IPv6:
2a12:3e40::/44
Signature Algorithm: sha256WithRSAEncryption
19:45:f0:e4:82:9e:c9:b8:b4:80:9f:b0:48:ab:72:0f:73:36:
24:af:46:ec:b9:06:7c:f2:a9:94:94:42:08:58:f8:c4:f2:ff:
bb:54:10:c5:13:59:0c:18:5d:e7:da:56:0d:d4:63:5e:db:a5:
4d:96:97:68:8f:1a:a6:df:1b:f0:ce:84:d3:57:ec:7a:79:07:
90:f6:69:83:cf:39:ad:e9:33:32:84:e3:12:1d:91:90:4f:fb:
d8:8d:3c:49:cd:5b:ed:cf:14:1a:4b:cd:32:7b:b6:30:1f:d0:
57:4f:e3:17:94:1b:9c:c1:98:4b:8b:85:59:6d:f8:a1:55:18:
f5:86:d3:37:96:3b:18:cd:4c:8e:61:6c:68:ff:d3:ef:b4:21:
2b:f7:97:b3:d5:99:d3:1f:92:13:40:3e:5f:1e:eb:53:6b:5a:
ea:84:aa:22:b8:10:31:be:07:24:03:bf:11:ba:0b:f7:1c:86:
a6:1c:36:85:32:cc:a6:c0:4b:30:fb:93:ec:41:04:4a:fd:21:
17:d0:f1:4f:2b:a0:3a:58:e8:e0:ae:90:19:5e:b3:71:4f:d0:
75:ce:b4:bb:cc:2f:01:6f:57:38:b2:c2:ff:63:90:f6:bf:42:
a6:d6:24:3c:2e:79:42:21:10:7e:2f:c7:0f:fd:b7:00:8d:4b:
ba:f0:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:53 2024 by rpki-client on console-fra.rpki-client.org