Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/hQsMu_GNjirXykr_Xi2yXLo0V_g.roa
File: hQsMu_GNjirXykr_Xi2yXLo0V_g.roa (raw, json)
Hash identifier: XnFLsiZROJNcRHfXUORklJb2UTnPbsWe3rK6WkUhQE0=
Subject key identifier: 85:0B:0C:BB:F1:8D:8E:2A:D7:CA:4A:FF:5E:2D:B2:5C:BA:34:57:F8
Certificate issuer: /CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Certificate serial: 018D8433AD0120CBE906DB6BC686562D2788
Authority key identifier: D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/hQsMu_GNjirXykr_Xi2yXLo0V_g.roa
Signing time: Wed 07 Feb 2024 15:33:15 +0000
ROA not before: Wed 07 Feb 2024 15:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 195.64.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:33:ad:01:20:cb:e9:06:db:6b:c6:86:56:2d:27:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8062e4cc26f2df76ef308ce7a6e3c8344c9d031
Validity
Not Before: Feb 7 15:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=850b0cbbf18d8e2ad7ca4aff5e2db25cba3457f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:31:7e:bd:aa:8b:59:84:3a:60:ac:0d:bc:
4e:54:78:f3:95:34:a2:3b:a9:1a:28:8d:00:75:03:
9e:a4:59:38:61:ed:38:56:12:18:fa:5b:1f:76:94:
ae:4e:03:f1:f7:bd:8b:eb:93:55:ea:76:96:b1:51:
9a:73:0d:da:cb:62:5a:ae:dd:53:57:16:14:6a:87:
c2:0d:5f:f1:cb:56:98:0d:20:2a:f1:44:32:64:f2:
9d:cc:a4:e0:7d:37:51:ab:9f:9c:26:59:3e:f4:ee:
7a:09:87:88:f8:89:81:48:8c:cb:2c:cc:90:22:9b:
bf:95:0f:52:11:72:e1:4a:e1:f6:af:c4:84:81:d9:
a4:00:cc:10:b4:9b:66:2e:a0:23:50:f6:a3:26:fe:
7c:41:40:3e:a7:b6:fe:59:63:9a:1c:ed:10:88:48:
3a:27:25:75:db:71:c3:f6:fa:20:1f:bb:c0:b5:30:
dc:b5:e6:f9:33:a0:57:0d:cc:f1:3d:23:02:4a:40:
58:4d:e4:64:d5:17:35:2f:39:89:77:18:d3:f5:67:
49:ea:0d:4a:f3:49:07:0c:48:45:d6:00:7c:49:7a:
2b:c2:93:4e:f8:0b:76:07:ea:74:a3:a5:0b:d1:ec:
7f:bd:25:62:70:19:84:e8:20:c8:a3:bc:f2:a7:75:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:0C:BB:F1:8D:8E:2A:D7:CA:4A:FF:5E:2D:B2:5C:BA:34:57:F8
X509v3 Authority Key Identifier:
keyid:D8:06:2E:4C:C2:6F:2D:F7:6E:F3:08:CE:7A:6E:3C:83:44:C9:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AYuTMJvLfdu8wjOem48g0TJ0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/hQsMu_GNjirXykr_Xi2yXLo0V_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8774b5-5710-4e32-9850-4e265d8965ea/1/2AYuTMJvLfdu8wjOem48g0TJ0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e5:c8:34:c7:c9:0c:89:e9:c7:77:da:8c:47:13:1e:95:19:
3b:d0:bc:e7:df:0e:17:2f:d8:e9:fa:3c:76:18:a6:f4:fa:14:
29:6d:7d:6e:b7:66:28:e0:06:cc:7c:3f:f5:8b:9e:93:0e:c4:
25:c2:94:70:f6:81:fb:7d:f4:2c:38:47:dc:b2:e6:6e:64:23:
63:5d:ec:54:ef:c3:e2:0f:7b:6f:7e:3c:0a:0f:ab:66:02:3c:
53:dd:4b:f8:39:06:4b:de:f2:0b:dc:71:1c:d8:26:52:81:d5:
ad:6e:f7:cc:e0:39:1d:f3:84:09:71:2b:a4:cc:a0:ef:7f:45:
9a:d6:df:b4:2e:0c:50:a7:8c:7e:cc:d8:32:b9:b1:ce:d0:52:
06:c7:26:20:e8:44:82:0d:d9:f8:69:b1:0d:32:b0:64:f9:b8:
7f:c8:73:9e:65:07:69:4f:8a:0f:bc:8e:e5:2a:24:10:ca:93:
27:da:74:ee:45:a7:2a:c1:ee:11:0e:51:77:e7:1b:f6:61:89:
b8:16:d9:5b:35:77:e2:7e:6a:0c:af:0b:b9:e1:ec:97:63:e3:
0f:39:04:a7:3d:88:60:c8:40:31:35:5c:15:15:cc:cb:8d:d0:
1b:a7:84:01:a5:3b:0a:b1:c2:7a:91:44:b2:88:ea:9f:f9:fd:
5f:2f:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 17:08:28 2024 by rpki-client on console-fra.rpki-client.org