Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/D5vIk1n2T552uyR05MrIV-gxWsI.roa
File: D5vIk1n2T552uyR05MrIV-gxWsI.roa (raw, json)
Hash identifier: +PEZ6QgoUoykB9f6lFAV2zf8yffk3jtAvJnxUI2tliw=
Subject key identifier: 0F:9B:C8:93:59:F6:4F:9E:76:BB:24:74:E4:CA:C8:57:E8:31:5A:C2
Certificate issuer: /CN=8bd06efda2a27638f376cd6918da2bacb201bbee
Certificate serial: 0729B74E
Authority key identifier: 8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/D5vIk1n2T552uyR05MrIV-gxWsI.roa
Signing time: Sat 01 Jan 2022 13:54:59 +0000
ROA not before: Sat 01 Jan 2022 13:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6697
IP address blocks: 195.137.160.0/24 maxlen: 24
2a0a:7d80:1::/48 maxlen: 48
2a0a:7d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120174414 (0x729b74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd06efda2a27638f376cd6918da2bacb201bbee
Validity
Not Before: Jan 1 13:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f9bc89359f64f9e76bb2474e4cac857e8315ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:0b:2d:dc:a9:3a:4d:0b:f1:b5:14:2d:52:
d2:33:51:69:f1:2b:99:3a:2d:6f:5b:cb:ec:61:9f:
f8:17:01:b1:07:19:36:74:a5:96:6b:77:42:17:63:
b1:e6:f5:42:10:20:93:66:70:73:a4:b4:cc:9f:de:
27:99:29:50:5f:ad:1b:fe:e8:d8:7f:ae:76:ec:f7:
c3:79:78:fc:d0:70:9b:fd:38:81:7b:9a:8e:12:9c:
94:16:c1:4c:bf:a3:4f:dc:fa:51:96:da:33:9b:7a:
02:78:f1:dd:7b:38:e9:fd:ea:70:f0:af:7d:b2:1c:
3e:f8:1d:4c:a3:47:e2:0f:42:9a:85:19:18:8f:fa:
3f:f7:cf:4a:a4:51:7d:32:69:29:ad:e8:16:dd:49:
88:a4:62:00:2e:28:42:d0:d3:5c:ce:d7:08:16:41:
95:b7:b5:43:02:1e:95:77:6b:d3:29:1f:24:ab:98:
c7:f6:39:2e:12:4b:76:68:34:86:8e:ff:58:89:f8:
41:5b:0d:09:ec:57:42:59:61:6f:54:bf:de:09:62:
f7:3c:72:e0:16:d0:3f:b0:8d:59:78:65:dc:3a:1f:
43:10:5e:c5:56:8a:7d:75:8b:30:3d:5a:b5:4a:29:
07:dd:df:00:5d:07:52:ac:0f:6e:fb:74:9b:95:f4:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9B:C8:93:59:F6:4F:9E:76:BB:24:74:E4:CA:C8:57:E8:31:5A:C2
X509v3 Authority Key Identifier:
keyid:8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/D5vIk1n2T552uyR05MrIV-gxWsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/i9Bu_aKidjjzds1pGNorrLIBu-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.160.0/24
IPv6:
2a0a:7d80::/47
Signature Algorithm: sha256WithRSAEncryption
91:cd:8a:80:d6:4c:c9:3d:fe:09:94:d5:af:e3:b4:5e:7b:fe:
11:96:c6:66:26:42:69:c3:95:69:8c:3a:f4:a0:f8:25:cb:f4:
26:b1:98:1f:eb:41:44:94:7c:3b:0b:3f:6e:0c:b8:e5:f0:dd:
71:b1:05:b6:0f:34:01:a9:56:e5:52:74:34:30:54:24:5d:1e:
92:c7:8d:a8:78:fd:1c:4e:2b:8f:c8:72:8f:26:db:0c:27:3a:
cb:3f:b8:f6:3d:1f:b7:47:7c:d7:06:42:ca:33:13:b2:ab:7f:
ac:66:60:00:75:90:ab:64:5a:e4:02:dc:9c:04:b8:14:b0:fa:
46:ca:d3:2a:21:84:c2:17:d9:0d:6b:8a:b6:6f:9b:62:c3:81:
0f:f0:10:20:4d:32:cc:3b:64:0a:e7:96:1f:e5:55:02:8f:e7:
ab:74:b3:c8:3b:d2:2c:e2:4b:97:77:b4:43:6e:8a:dd:40:7a:
ad:fe:05:71:c9:23:dd:05:b1:bf:30:35:3e:6d:57:fc:26:b9:
e5:9f:fd:58:cd:67:0a:c4:e3:4d:96:e2:5d:4d:99:c2:0b:83:
4b:e9:85:a0:c2:8e:91:51:ea:06:16:2a:0c:de:a7:3d:44:50:
f9:97:08:95:d0:20:46:99:0d:2b:5b:3b:9c:e1:d5:1a:ff:7f:
c1:79:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:19 2024 by rpki-client on console-fra.rpki-client.org