Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/Hm1jQlj3-I-SnLT0lJLFXbnT-I0.roa
File: Hm1jQlj3-I-SnLT0lJLFXbnT-I0.roa (raw, json)
Hash identifier: +Z2WDieOaU1SfdzQA0qL9FAXHHSFuu2MiEGvuubUpcI=
Subject key identifier: 1E:6D:63:42:58:F7:F8:8F:92:9C:B4:F4:94:92:C5:5D:B9:D3:F8:8D
Certificate issuer: /CN=fc9c0a37eeee18884743eafbde51c3e36a5edf43
Certificate serial: 018CC80170C1B093D596636128570EDD253D
Authority key identifier: FC:9C:0A:37:EE:EE:18:88:47:43:EA:FB:DE:51:C3:E3:6A:5E:DF:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JwKN-7uGIhHQ-r73lHD42pe30M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/Hm1jQlj3-I-SnLT0lJLFXbnT-I0.roa
Signing time: Tue 02 Jan 2024 02:29:46 +0000
ROA not before: Tue 02 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57523
IP address blocks: 195.226.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:70:c1:b0:93:d5:96:63:61:28:57:0e:dd:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9c0a37eeee18884743eafbde51c3e36a5edf43
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e6d634258f7f88f929cb4f49492c55db9d3f88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:49:7b:38:9d:e2:17:d6:d1:e5:9b:8e:26:
24:92:c4:42:08:64:ff:da:95:26:6a:f8:a4:59:19:
2d:3c:67:41:fc:be:60:28:b1:d9:8a:6f:04:5a:b2:
34:d3:d8:a5:17:79:53:e0:82:90:ac:8e:3e:bc:9f:
26:31:ae:f7:e8:8e:90:54:93:31:42:1d:45:89:0d:
25:81:55:c2:40:62:25:13:25:47:26:bb:14:f5:e0:
2e:bc:37:de:b7:a3:0a:88:2b:7b:f7:62:48:5e:64:
63:8b:db:70:17:bf:5d:43:69:ac:f8:54:a3:a3:f1:
89:e1:0c:bc:46:e1:6f:d7:4a:70:51:eb:69:ac:ce:
e2:ee:e3:ad:de:af:25:43:9b:af:65:84:ca:7a:26:
62:6c:c8:5f:7f:92:e6:6d:ab:cd:d7:aa:3f:83:b1:
62:03:20:fe:50:08:8a:4d:4b:3b:71:62:60:c0:46:
c3:e4:13:01:d7:16:e2:38:7c:3b:d7:08:c9:65:23:
6d:0d:35:fc:5b:4e:3d:49:9c:d3:cc:9f:b6:2a:3e:
3f:3e:73:6b:bc:5f:79:30:d3:87:d9:d2:2a:ed:44:
82:52:2f:db:4d:a9:ed:6c:98:ad:5b:94:a2:58:61:
39:82:0b:3e:e6:98:9c:e4:b9:31:3d:26:51:e8:12:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6D:63:42:58:F7:F8:8F:92:9C:B4:F4:94:92:C5:5D:B9:D3:F8:8D
X509v3 Authority Key Identifier:
keyid:FC:9C:0A:37:EE:EE:18:88:47:43:EA:FB:DE:51:C3:E3:6A:5E:DF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JwKN-7uGIhHQ-r73lHD42pe30M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/Hm1jQlj3-I-SnLT0lJLFXbnT-I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/_JwKN-7uGIhHQ-r73lHD42pe30M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.194.0/24
Signature Algorithm: sha256WithRSAEncryption
44:34:2a:a7:d3:6f:08:a5:08:95:e8:e5:7e:83:2a:b4:5b:4e:
c0:c8:75:e8:ee:29:a4:ab:f8:6d:35:9d:f1:05:ca:6b:6b:dc:
67:a1:28:8e:b3:02:ee:71:c5:6c:1f:a8:dc:15:67:04:d1:d9:
be:54:cd:a2:e2:d6:4f:bd:78:de:9b:3c:90:62:2b:12:c4:73:
33:60:7e:cc:1f:7a:60:c4:50:dd:c8:78:e1:2a:bc:bf:2e:95:
62:ad:33:c3:21:0d:22:cf:79:17:0a:7e:92:0a:64:50:16:bc:
6a:94:8a:a1:d0:fc:ff:8c:48:63:c2:2d:be:18:a9:03:d0:06:
35:7a:5a:c5:83:b2:6b:bb:54:fd:1c:2b:d1:13:58:91:24:6b:
98:01:14:ff:d4:d8:a5:7b:74:4a:35:15:21:e6:58:1a:dd:98:
80:8b:6a:42:c0:02:09:b3:b6:e6:66:c6:2e:8b:3b:34:83:ff:
c2:c8:e7:19:2e:7b:06:34:77:94:7d:55:04:0f:98:8c:ef:c8:
80:5d:c0:78:fe:9d:63:1b:82:e2:c1:3e:86:6d:6a:23:21:7c:
16:48:02:03:78:bc:7f:d1:70:2e:2f:86:65:39:1d:34:41:a2:
d6:71:3e:c4:c0:86:3a:85:3e:35:b3:17:63:f4:f0:ab:f4:bb:
9e:43:e4:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAXDBsJPVlmNhKFcO3SU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWMwYTM3ZWVlZTE4ODg0NzQzZWFmYmRlNTFjM2UzNmE1
ZWRmNDMwHhcNMjQwMTAyMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTZkNjM0MjU4ZjdmODhmOTI5Y2I0ZjQ5NDkyYzU1ZGI5ZDNmODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTxJezid4hfW0eWbjiYkksRCCGT/
2pUmavikWRktPGdB/L5gKLHZim8EWrI009ilF3lT4IKQrI4+vJ8mMa736I6QVJMx
Qh1FiQ0lgVXCQGIlEyVHJrsU9eAuvDfet6MKiCt792JIXmRji9twF79dQ2ms+FSj
o/GJ4Qy8RuFv10pwUetprM7i7uOt3q8lQ5uvZYTKeiZibMhff5LmbavN16o/g7Fi
AyD+UAiKTUs7cWJgwEbD5BMB1xbiOHw71wjJZSNtDTX8W049SZzTzJ+2Kj4/PnNr
vF95MNOH2dIq7USCUi/bTantbJitW5SiWGE5ggs+5pic5LkxPSZR6BK/nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB5tY0JY9/iPkpy09JSSxV250/iNMB8GA1UdIwQY
MBaAFPycCjfu7hiIR0Pq+95Rw+NqXt9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0p3S04tN3VHSWhIUS1yNzNsSEQ0MnBlMzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xNjhhMDYtNjU2MC00YTU5LWI4NGMt
ZWIxNTYxY2Q4YmZlLzEvSG0xalFsajMtSS1TbkxUMGxKTEZYYm5ULUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8xNjhhMDYtNjU2MC00YTU5LWI4NGMtZWIxNTYxY2Q4YmZl
LzEvX0p3S04tN3VHSWhIUS1yNzNsSEQ0MnBlMzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LCMA0G
CSqGSIb3DQEBCwUAA4IBAQBENCqn028IpQiV6OV+gyq0W07AyHXo7imkq/htNZ3x
Bcpra9xnoSiOswLuccVsH6jcFWcE0dm+VM2i4tZPvXjemzyQYisSxHMzYH7MH3pg
xFDdyHjhKry/LpVirTPDIQ0iz3kXCn6SCmRQFrxqlIqh0Pz/jEhjwi2+GKkD0AY1
elrFg7Jru1T9HCvRE1iRJGuYART/1Nile3RKNRUh5lga3ZiAi2pCwAIJs7bmZsYu
izs0g//CyOcZLnsGNHeUfVUED5iM78iAXcB4/p1jG4LiwT6GbWojIXwWSAIDeLx/
0XAuL4ZlOR00QaLWcT7EwIY6hT41sxdj9PCr9LueQ+Qr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:50 2024 by rpki-client on console-fra.rpki-client.org