Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/VAIiW6OdzzhtfJx5XIqjVOXiowc.roa
File: VAIiW6OdzzhtfJx5XIqjVOXiowc.roa (raw, json)
Hash identifier: +AvPe7uqqsCfojpY2nSXpm2LpDy6GwZgnMeXO7eNJ7A=
Subject key identifier: 54:02:22:5B:A3:9D:CF:38:6D:7C:9C:79:5C:8A:A3:54:E5:E2:A3:07
Certificate issuer: /CN=335cd11fdbafb032534ae022abb4c8e369878a67
Certificate serial: 018456E821B41B734ADA226D02B433B6FA16
Authority key identifier: 33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/VAIiW6OdzzhtfJx5XIqjVOXiowc.roa
Signing time: Tue 08 Nov 2022 11:02:44 +0000
ROA not before: Tue 08 Nov 2022 11:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:e8:21:b4:1b:73:4a:da:22:6d:02:b4:33:b6:fa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335cd11fdbafb032534ae022abb4c8e369878a67
Validity
Not Before: Nov 8 11:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5402225ba39dcf386d7c9c795c8aa354e5e2a307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:4d:58:a0:77:c7:ee:32:7f:ae:76:81:6b:
ed:5b:e7:05:1b:c5:70:29:ef:a1:85:44:14:d6:a6:
a3:2f:8e:6c:6e:bc:72:d5:ea:46:a8:9a:cc:da:b3:
5f:9c:e2:40:0b:8b:b9:01:81:d5:1c:c2:1f:23:7c:
5b:31:b3:d3:77:98:15:24:5c:2b:03:5e:30:33:00:
5a:83:fd:03:6a:e1:c1:35:62:e5:3b:30:87:f9:ff:
41:99:88:20:b1:bc:fd:bb:aa:f2:06:2d:d5:3b:97:
28:d8:0a:8a:ef:75:45:64:ee:e1:be:8d:17:55:11:
94:0d:c5:17:8c:f6:e5:a8:81:73:23:04:28:48:33:
ca:7c:1e:ae:40:f9:fb:66:df:88:8b:f5:5f:ba:9f:
51:92:d6:d0:dd:85:0e:54:62:b2:59:b2:17:7d:50:
3e:80:dd:5e:38:57:43:da:c4:ab:d3:0b:25:42:93:
00:14:83:36:44:d4:1b:de:cf:c6:37:10:bf:ae:da:
5b:3b:38:54:3c:8b:81:e0:c6:f0:b6:37:bb:95:83:
f3:bc:7b:d8:2f:77:9a:9d:0c:5b:ef:f7:56:e3:73:
2d:4f:15:ea:b6:b4:83:18:7b:f1:f2:e8:70:20:a3:
95:a2:d1:c3:17:c9:0b:3c:a3:4a:f7:24:1c:24:b7:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:22:5B:A3:9D:CF:38:6D:7C:9C:79:5C:8A:A3:54:E5:E2:A3:07
X509v3 Authority Key Identifier:
keyid:33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/VAIiW6OdzzhtfJx5XIqjVOXiowc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
Signature Algorithm: sha256WithRSAEncryption
1f:f4:c7:14:e6:37:6c:3d:aa:17:fa:d1:ba:32:72:8a:e9:20:
6c:32:32:6c:17:5d:f5:c5:ad:44:ae:eb:de:ac:4c:3f:c0:ce:
83:b9:e8:54:d2:a5:b9:2a:7a:35:94:8a:fb:23:75:16:39:80:
d3:77:e7:28:79:59:21:e8:e8:1c:9b:e0:03:6c:df:ce:4d:72:
07:40:c4:27:f0:46:e6:0d:71:30:cd:17:9c:b7:7e:59:a8:89:
b6:7d:05:c9:c2:b9:87:0d:a7:cb:29:39:c9:32:76:04:74:ee:
e1:31:5c:4c:85:12:c9:25:a2:c4:40:48:5f:bb:fb:21:b6:e3:
40:61:9b:42:43:e4:09:d7:94:b1:b9:6f:1a:24:01:f0:1f:38:
6d:09:eb:2b:f6:7a:40:43:8b:a5:fa:22:ec:82:59:b1:55:d4:
39:08:e3:93:87:1b:19:a2:82:7f:d3:03:f5:9c:3d:30:1b:be:
68:34:e8:aa:b8:d3:08:d2:ed:d6:13:5b:3e:c6:ab:17:b4:f7:
fd:87:b2:76:35:72:d0:6b:3a:66:df:ce:7d:48:7b:37:20:df:
d9:85:a5:bd:cd:b2:9f:c4:5e:56:e0:83:71:05:4f:b3:2d:53:
e3:7c:3f:ea:f5:93:2b:dc:a9:2d:3f:d6:ba:e1:ac:71:71:4e:
33:bb:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:44 2024 by rpki-client on console-ams.rpki-client.org