Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/sOkol27BcmlVDQ3_bE7beEbweBY.roa
File: sOkol27BcmlVDQ3_bE7beEbweBY.roa (raw, json)
Hash identifier: zNjOdcDXqXqFEq2k8Y2eLveeqM/TOaPG2s3QJ8hFAQU=
Subject key identifier: B0:E9:28:97:6E:C1:72:69:55:0D:0D:FF:6C:4E:DB:78:46:F0:78:16
Certificate issuer: /CN=fc9c0a37eeee18884743eafbde51c3e36a5edf43
Certificate serial: 012560
Authority key identifier: FC:9C:0A:37:EE:EE:18:88:47:43:EA:FB:DE:51:C3:E3:6A:5E:DF:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JwKN-7uGIhHQ-r73lHD42pe30M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/sOkol27BcmlVDQ3_bE7beEbweBY.roa
Signing time: Tue 25 Jan 2022 11:45:48 +0000
ROA not before: Tue 25 Jan 2022 11:45:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57523
IP address blocks: 195.226.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75104 (0x12560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9c0a37eeee18884743eafbde51c3e36a5edf43
Validity
Not Before: Jan 25 11:45:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0e928976ec17269550d0dff6c4edb7846f07816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:72:c6:c4:9d:c8:76:46:b7:e9:6d:17:76:
6a:d1:91:5c:02:32:50:d0:74:1b:f3:42:ea:f6:ef:
97:aa:32:39:cf:eb:e0:fd:07:d1:2d:aa:fd:32:7e:
b3:42:1d:65:76:a3:23:13:6a:4c:01:05:b8:8f:e7:
33:ea:00:d9:32:5b:ed:19:83:59:02:58:f3:98:31:
e4:f4:a3:7a:f5:71:61:63:7a:4b:45:14:1e:fe:5c:
1d:94:d0:73:ab:7c:43:45:fb:51:c9:d6:62:96:59:
14:b4:5f:5e:66:ec:f3:3a:1f:d5:51:60:a0:0b:d2:
1c:88:a4:cc:67:98:74:b1:1d:02:1a:3c:31:af:3d:
2f:49:b7:33:9f:f1:97:fe:88:ed:b7:d7:02:0f:4d:
39:df:3f:b8:00:ab:48:0f:72:53:17:12:7a:48:1f:
73:19:21:a1:5d:5e:e4:be:a2:bf:52:fa:e2:3a:50:
20:32:01:2c:74:fd:2c:31:b0:35:51:02:53:cc:f8:
56:06:da:3c:b1:d2:95:29:be:2a:45:f0:3e:a9:43:
f2:52:a1:4c:9a:9c:d0:33:25:ec:14:89:f1:0a:27:
9a:93:9c:85:4a:55:b8:3f:a9:1d:16:13:b3:10:37:
50:7a:34:4d:e7:ee:ab:bb:a2:a6:ef:d4:e7:1f:6d:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:28:97:6E:C1:72:69:55:0D:0D:FF:6C:4E:DB:78:46:F0:78:16
X509v3 Authority Key Identifier:
keyid:FC:9C:0A:37:EE:EE:18:88:47:43:EA:FB:DE:51:C3:E3:6A:5E:DF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JwKN-7uGIhHQ-r73lHD42pe30M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/sOkol27BcmlVDQ3_bE7beEbweBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/_JwKN-7uGIhHQ-r73lHD42pe30M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.194.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7e:85:24:f9:28:fc:ff:dd:31:3f:83:ba:20:1c:dc:3a:b0:
34:fa:b6:73:f6:38:2d:ab:4d:2d:1e:32:4b:0b:3b:b3:fb:16:
cf:49:73:8a:ec:60:64:17:fb:f4:b8:f9:c8:54:13:32:91:f8:
ab:ce:ff:02:12:76:36:fc:ea:ea:f6:dc:74:f0:53:4c:f1:92:
96:19:76:9a:66:66:c5:92:3b:92:1b:c4:5d:b2:8c:ba:7d:c5:
e0:4d:8f:29:a9:ed:42:b3:4e:d9:06:09:53:f5:14:e1:3b:a9:
54:51:15:df:fb:d0:ea:01:6f:28:5c:1b:d0:43:8f:3a:e7:e3:
eb:9d:b8:a0:dd:f3:71:90:cc:dc:16:62:20:60:9c:46:82:ba:
ac:9d:29:65:67:33:77:a1:66:56:2d:df:f6:17:5d:a5:27:e5:
ce:70:ab:6f:2c:c5:5b:c9:68:17:f6:92:d0:2d:e5:59:ba:6c:
e4:02:d9:7d:79:2a:8c:1d:80:ee:41:eb:8b:79:fd:99:13:4f:
63:b8:48:9d:b6:e1:41:ce:14:53:9d:c9:b5:c9:0d:bd:f2:34:
ff:2e:b3:9a:d3:63:50:ca:93:e3:fa:33:1c:c8:21:01:f6:e4:
dd:d9:67:8f:da:5b:a2:bf:81:e9:2a:a7:15:90:41:24:8c:7a:
52:11:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:07 2024 by rpki-client on console-ams.rpki-client.org