Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/00df1c-7c89-4254-b1ca-e7bd48bdeca5/1/njo1u60OcL654rvR_QD4E2qhNeY.roa
File: njo1u60OcL654rvR_QD4E2qhNeY.roa (raw, json)
Hash identifier: Bvn10I4aQEGD7SX6vQX33j98jAn+JFAz+8YI2ni2xfI=
Subject key identifier: 9E:3A:35:BB:AD:0E:70:BE:B9:E2:BB:D1:FD:00:F8:13:6A:A1:35:E6
Certificate issuer: /CN=33bc522fbde48d01dd6f7b74109cf9a57dd70009
Certificate serial: 09C1609C
Authority key identifier: 33:BC:52:2F:BD:E4:8D:01:DD:6F:7B:74:10:9C:F9:A5:7D:D7:00:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7xSL73kjQHdb3t0EJz5pX3XAAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/00df1c-7c89-4254-b1ca-e7bd48bdeca5/1/njo1u60OcL654rvR_QD4E2qhNeY.roa
Signing time: Sat 01 Jan 2022 11:55:00 +0000
ROA not before: Sat 01 Jan 2022 11:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41414
IP address blocks: 195.62.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163668124 (0x9c1609c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33bc522fbde48d01dd6f7b74109cf9a57dd70009
Validity
Not Before: Jan 1 11:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e3a35bbad0e70beb9e2bbd1fd00f8136aa135e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:c0:eb:2a:b2:38:a3:a6:65:3d:fb:f4:5e:
9f:d9:1b:43:c7:48:84:90:3a:22:4b:6d:26:4c:11:
d6:56:d4:0c:4a:78:00:9c:b4:97:f0:05:21:8a:29:
3d:70:5b:40:85:68:fc:7d:f1:2f:40:e0:ab:5b:6f:
bc:e3:78:0b:ca:fb:fc:42:b1:80:4c:6e:77:59:a5:
d8:a4:c9:9a:2d:12:57:fa:1d:f3:8f:96:9e:13:2f:
55:37:be:55:79:92:f0:3b:9c:4b:ca:a4:ab:97:68:
a4:8a:42:9c:4d:c7:8a:73:4a:bf:37:d1:84:66:e0:
27:a6:e9:30:bb:43:77:4b:1d:66:44:c7:68:94:45:
8e:07:53:99:2f:34:e7:33:1f:17:52:c6:10:72:13:
7d:f7:2a:5b:9b:be:95:f1:6b:cc:3c:d7:f8:c3:79:
ac:37:1a:bb:a5:97:db:b5:88:85:a0:5d:44:a5:c8:
93:6c:b4:34:cd:f3:38:34:23:f3:5d:78:43:ca:57:
bb:5e:88:2e:e4:0c:0f:7d:3c:85:0a:6a:f0:0b:46:
32:b2:7f:48:c1:82:4e:13:62:7f:ec:41:5e:5c:34:
ba:59:42:f1:6e:5c:d7:2e:18:f4:f6:f1:e1:bd:97:
9c:e8:23:b4:3c:a2:04:13:d1:13:57:c3:dd:40:4c:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:35:BB:AD:0E:70:BE:B9:E2:BB:D1:FD:00:F8:13:6A:A1:35:E6
X509v3 Authority Key Identifier:
keyid:33:BC:52:2F:BD:E4:8D:01:DD:6F:7B:74:10:9C:F9:A5:7D:D7:00:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7xSL73kjQHdb3t0EJz5pX3XAAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/00df1c-7c89-4254-b1ca-e7bd48bdeca5/1/njo1u60OcL654rvR_QD4E2qhNeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/00df1c-7c89-4254-b1ca-e7bd48bdeca5/1/M7xSL73kjQHdb3t0EJz5pX3XAAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.88.0/23
Signature Algorithm: sha256WithRSAEncryption
96:30:59:b5:b0:bf:c3:00:f2:d6:4e:03:c7:6b:14:f3:70:1a:
8e:82:14:50:94:7d:8f:b7:c2:bb:53:5f:e5:f1:dd:7b:f1:bf:
6e:f5:54:c7:44:d0:92:81:6f:7d:f5:71:5e:fe:db:b0:38:45:
7a:1b:c1:6d:ab:f7:0b:3e:37:6c:fd:d0:d8:d9:de:e8:0c:be:
db:bf:bb:f0:f2:4c:90:d5:00:48:2c:93:42:5b:27:d6:a0:c4:
77:3d:d6:da:c9:1a:0d:be:61:ba:61:f4:22:47:9e:24:2b:ac:
71:1f:55:9b:2e:16:e6:9e:0d:8e:98:c3:b2:87:bb:68:d2:0b:
70:15:48:a9:9a:36:f0:2c:40:82:dd:ab:a3:4b:a3:4b:07:fe:
f7:60:2f:e8:44:04:1c:d7:35:b7:79:14:ac:a0:6d:c6:77:ca:
46:85:ac:56:5f:31:83:9e:74:ca:ab:27:75:ee:4c:0c:5f:2c:
bf:0b:55:88:08:a1:45:18:e8:02:9b:e3:05:be:93:59:7f:60:
1b:3d:74:ba:15:e5:10:02:cd:8d:64:52:b4:4d:e8:3d:a2:79:
cb:30:1e:52:cd:11:d7:14:6f:81:9a:19:ed:93:b8:b3:52:4e:
16:d6:aa:71:2e:47:98:f4:2c:25:ae:91:f3:ed:47:c6:af:be:
2b:55:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org