Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/0ZZZfmmZya7_y9k_wFSLLBYvPok.roa
File: 0ZZZfmmZya7_y9k_wFSLLBYvPok.roa (raw, json)
Hash identifier: 5u+1MqRQ1Q51Fzlp4v0yYwFn5CoaxCUJKzaXZO22x/g=
Subject key identifier: D1:96:59:7E:69:99:C9:AE:FF:CB:D9:3F:C0:54:8B:2C:16:2F:3E:89
Certificate issuer: /CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Certificate serial: CB889C
Authority key identifier: D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/0ZZZfmmZya7_y9k_wFSLLBYvPok.roa
Signing time: Tue 26 Apr 2022 14:45:32 +0000
ROA not before: Tue 26 Apr 2022 14:45:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13338780 (0xcb889c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Validity
Not Before: Apr 26 14:45:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d196597e6999c9aeffcbd93fc0548b2c162f3e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:bf:25:f5:77:15:21:52:c5:b3:a6:a8:b0:
4c:2b:25:5c:a9:bf:ba:24:d5:d9:df:66:ad:c8:83:
65:4d:71:f8:7e:ae:7c:da:1e:fb:d7:87:78:f1:10:
93:08:93:31:fd:ac:36:19:29:fd:17:72:b1:87:5d:
9f:11:73:d2:5a:7b:c7:54:5d:c0:07:c2:9d:1d:c8:
ad:03:01:09:c1:25:bd:f8:0d:b4:bc:0e:2e:8b:2d:
c2:b1:2d:01:20:44:83:3c:c5:16:ac:1c:cb:8c:4a:
e2:25:04:e4:2a:e3:da:ad:a2:5b:0f:49:6c:22:b7:
5f:ac:3f:d8:e9:5b:7e:cb:93:e6:0c:73:52:ac:e1:
36:a4:87:02:e0:f7:99:c1:af:79:62:ac:f0:f5:23:
d7:bc:9a:10:0f:48:06:bf:f8:61:cc:ea:b7:49:8d:
a9:bd:c6:69:5d:db:77:7d:a6:bf:96:c2:20:f0:d9:
f5:9a:d9:16:25:9b:23:d0:34:00:2f:c7:02:9a:dd:
40:dc:74:7f:5d:ea:ce:5c:74:5a:59:9d:a2:06:19:
3a:c5:46:8f:a9:59:a0:53:37:3d:66:06:4a:92:c7:
96:f0:f1:fc:1b:f4:34:08:0c:c6:b5:bd:d7:e3:bd:
1a:4c:02:ae:65:4a:6c:4f:f8:56:52:0d:28:30:32:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:59:7E:69:99:C9:AE:FF:CB:D9:3F:C0:54:8B:2C:16:2F:3E:89
X509v3 Authority Key Identifier:
keyid:D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/0ZZZfmmZya7_y9k_wFSLLBYvPok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/2AYuTMJvLfdu8wjOem48g0TJ0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d7:ee:c1:dc:a0:69:e2:b7:a1:29:a1:ee:f5:f4:43:02:cb:
6e:06:79:7c:ab:b6:cd:d8:cd:d9:39:56:55:39:03:5b:3d:d2:
be:ba:13:b2:e5:e4:ec:a5:e3:05:37:51:61:4d:07:0b:25:cd:
ce:b7:b7:4b:14:11:0b:8f:fd:89:65:ff:95:27:4a:7a:af:e8:
04:3f:70:b8:0f:18:3e:3c:1e:8e:6b:f2:ac:b1:02:ce:e0:f0:
17:df:8d:4b:73:45:2e:2f:9c:38:27:03:1a:0f:f3:1f:a4:b6:
60:72:84:ad:f9:62:94:5a:cf:db:25:37:8d:b9:16:d3:27:d1:
c3:9e:43:32:50:a4:f2:d5:91:17:ae:8f:a1:04:fd:75:ef:3b:
54:cc:1c:c4:58:e1:51:45:32:fa:9f:da:6e:7c:20:32:5f:3c:
2a:5a:c8:d9:c9:9b:6d:35:d3:5a:49:c0:b9:dc:03:ef:47:ad:
e6:d8:f1:24:65:1a:10:b2:3d:2d:7a:5f:41:11:55:ac:17:b8:
20:01:4e:d4:9b:10:e7:84:16:78:39:76:47:32:c4:16:82:ca:
9c:bb:b1:5d:c2:1f:60:97:8b:c4:8c:dc:24:7a:bf:96:99:65:
6d:aa:ea:3f:8d:b9:7b:2b:f7:f1:32:3d:4f:cb:88:e4:ee:b6:
d3:37:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org