Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/278531-9fe8-472c-a1a4-60e361463bc9/1/HpsVF_7IwKFqVMYdJ8_C28ydZ00.roa
File: HpsVF_7IwKFqVMYdJ8_C28ydZ00.roa (raw, json)
Hash identifier: zCxJ80K3pbCBeXshSm57hB7LzUPnU/P8Jmqh8ZdGuTI=
Subject key identifier: 1E:9B:15:17:FE:C8:C0:A1:6A:54:C6:1D:27:CF:C2:DB:CC:9D:67:4D
Certificate issuer: /CN=e7e3cdaffe36bec5e468177f1b6414d2096473f1
Certificate serial: 0991AA15
Authority key identifier: E7:E3:CD:AF:FE:36:BE:C5:E4:68:17:7F:1B:64:14:D2:09:64:73:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-PNr_42vsXkaBd_G2QU0glkc_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/278531-9fe8-472c-a1a4-60e361463bc9/1/HpsVF_7IwKFqVMYdJ8_C28ydZ00.roa
Signing time: Sat 01 Jan 2022 07:56:37 +0000
ROA not before: Sat 01 Jan 2022 07:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198610
IP address blocks: 95.214.61.0/24 maxlen: 24
95.214.60.0/22 maxlen: 22
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
95.214.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160541205 (0x991aa15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e3cdaffe36bec5e468177f1b6414d2096473f1
Validity
Not Before: Jan 1 07:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e9b1517fec8c0a16a54c61d27cfc2dbcc9d674d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:45:61:f2:13:cc:18:8e:c9:bf:a3:35:bb:
2b:22:40:2a:b3:df:4d:2d:92:b7:71:ef:40:a4:c0:
49:47:ea:1c:a6:81:40:0f:56:5e:11:ed:67:ee:c1:
8c:ba:e7:40:a2:d5:26:90:38:35:a2:cb:8d:6c:ec:
00:4f:5c:fe:c1:3a:6b:7a:4f:d7:42:8a:29:00:70:
56:3f:2d:5e:27:28:a8:8c:1e:d8:68:89:11:f1:59:
68:89:5c:cc:85:93:96:7d:af:08:28:ba:52:18:55:
0c:a4:fd:41:20:6e:e5:9a:0e:12:8a:4f:75:46:19:
e8:8d:c5:1e:ab:a4:75:dd:91:36:2f:88:3f:e5:06:
19:6c:bc:53:38:2a:00:0c:df:12:e1:98:4f:c6:23:
bf:e1:54:64:e2:f2:2e:9d:85:a6:2c:10:38:05:b0:
33:92:9f:f5:ea:0e:0d:d3:53:e0:c4:a4:66:ab:f2:
02:3b:ca:ec:ab:4e:9f:2b:45:41:fd:34:82:39:d9:
cf:81:7e:b3:4c:40:2a:4c:cb:5c:b4:9f:6a:be:d9:
a0:d9:00:9e:9c:2c:94:0c:bd:d5:6c:4f:91:62:a4:
51:b9:92:7a:a6:b6:ef:16:83:62:b3:9a:e8:01:87:
6a:9d:94:61:49:db:a3:33:3c:dc:07:83:66:e5:da:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:15:17:FE:C8:C0:A1:6A:54:C6:1D:27:CF:C2:DB:CC:9D:67:4D
X509v3 Authority Key Identifier:
keyid:E7:E3:CD:AF:FE:36:BE:C5:E4:68:17:7F:1B:64:14:D2:09:64:73:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-PNr_42vsXkaBd_G2QU0glkc_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/278531-9fe8-472c-a1a4-60e361463bc9/1/HpsVF_7IwKFqVMYdJ8_C28ydZ00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/278531-9fe8-472c-a1a4-60e361463bc9/1/5-PNr_42vsXkaBd_G2QU0glkc_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:7f:3e:9c:cf:01:ff:01:b3:e1:1a:81:bc:e8:2b:d5:d7:de:
c4:07:2f:8c:d2:71:dd:63:f3:8c:92:4f:ca:7f:c0:78:1e:43:
fa:1b:66:85:c5:6d:be:dc:9c:b9:57:5b:83:31:0e:3f:28:a9:
b8:1a:73:51:7b:1e:6c:a1:5f:6e:2e:ed:99:6d:c1:4a:b1:72:
28:98:81:51:01:a9:48:dd:6c:9d:45:53:67:d9:a5:08:bc:72:
2d:26:b3:1b:1b:38:6b:2f:ad:6c:4e:64:74:52:fe:02:16:f6:
47:47:a7:e6:1a:12:4d:22:fe:9b:f4:06:10:9e:cf:6c:cc:9d:
32:67:5c:eb:02:09:ff:12:38:89:95:d9:1d:64:89:26:2b:22:
41:bb:0c:da:94:03:d5:e6:59:cc:95:2c:d1:3c:43:3e:48:95:
b1:ae:4c:16:5c:bb:7e:a5:4b:96:2c:a8:6e:86:a8:d4:28:91:
43:4c:a3:3f:87:b8:d9:58:f6:7c:6c:77:66:5c:35:af:c2:fa:
7a:36:87:75:61:72:e8:3a:bd:8e:3e:8a:f1:c8:cd:50:33:be:
76:30:0c:27:5e:b7:71:d8:87:3e:e2:ca:e8:cc:4c:3f:cd:e6:
bd:db:9a:8d:08:a8:b2:ad:1d:60:0b:9d:ab:ee:93:f9:5d:8f:
b5:2c:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:27 2023 by rpki-client on console-fra.rpki-client.org