Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/041b0c-f791-4a5c-8e77-01a066f6f693/1/vdmveuueMOrpNTnlBUugAIZcxcU.roa
File: vdmveuueMOrpNTnlBUugAIZcxcU.roa (raw, json)
Hash identifier: 3yzSh3ssgYw2fm+JUfN18gzWx0y4NiKPIzKf5tXCZAw=
Subject key identifier: BD:D9:AF:7A:EB:9E:30:EA:E9:35:39:E5:05:4B:A0:00:86:5C:C5:C5
Certificate issuer: /CN=fb4edb6baa24285394f7f1df4f6fb2ac289e82d5
Certificate serial: 018CC26D3379B079295D959D95BA48BCB2CF
Authority key identifier: FB:4E:DB:6B:AA:24:28:53:94:F7:F1:DF:4F:6F:B2:AC:28:9E:82:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-07ba6okKFOU9_HfT2-yrCiegtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/041b0c-f791-4a5c-8e77-01a066f6f693/1/vdmveuueMOrpNTnlBUugAIZcxcU.roa
Signing time: Mon 01 Jan 2024 00:29:45 +0000
ROA not before: Mon 01 Jan 2024 00:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 195.64.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:33:79:b0:79:29:5d:95:9d:95:ba:48:bc:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4edb6baa24285394f7f1df4f6fb2ac289e82d5
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdd9af7aeb9e30eae93539e5054ba000865cc5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:c1:2d:86:6a:4d:6e:56:22:22:34:9f:cd:
5a:0a:d7:53:ec:87:ae:84:5d:26:41:54:33:7f:06:
4c:6d:9f:04:81:51:56:01:ac:b8:92:f2:95:2a:49:
50:50:72:f4:75:bb:a0:94:4e:20:54:4a:77:85:d3:
d7:09:18:7f:63:18:8d:1e:1d:0a:21:b3:c8:f6:31:
17:2f:c2:67:00:fb:6e:6b:0c:d5:35:82:be:08:12:
34:f4:8d:12:e9:e4:c9:1b:53:61:7c:46:e6:f3:be:
8b:94:14:64:95:8e:2d:c9:41:ea:f3:49:f0:23:23:
e9:96:d3:18:db:55:65:c7:52:d6:27:ec:12:2e:35:
00:00:60:29:d6:a1:f2:a5:12:a1:1b:a6:0c:b2:0c:
09:5e:61:1b:74:b7:e5:b3:5f:5e:44:60:c2:62:f1:
c4:2e:05:a1:f3:de:28:97:2c:32:24:7e:14:64:0f:
54:a4:43:35:43:8d:c4:12:95:b5:c5:3b:74:cb:5e:
4c:94:db:1a:5c:1a:72:0d:e5:cf:70:81:21:b4:e8:
02:34:71:dd:3b:c3:fa:ba:6c:61:8f:bb:d9:ba:dd:
11:8d:1c:5c:df:a7:34:d9:bf:bc:15:00:2f:f6:17:
6f:4f:c2:c4:62:c0:38:4a:d6:04:ee:21:cd:1f:5d:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:AF:7A:EB:9E:30:EA:E9:35:39:E5:05:4B:A0:00:86:5C:C5:C5
X509v3 Authority Key Identifier:
keyid:FB:4E:DB:6B:AA:24:28:53:94:F7:F1:DF:4F:6F:B2:AC:28:9E:82:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-07ba6okKFOU9_HfT2-yrCiegtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/041b0c-f791-4a5c-8e77-01a066f6f693/1/vdmveuueMOrpNTnlBUugAIZcxcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/041b0c-f791-4a5c-8e77-01a066f6f693/1/1-07ba6okKFOU9_HfT2-yrCiegtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fb:81:cd:ff:2b:87:a3:7f:fb:f3:20:ab:c6:d5:af:e1:d4:
eb:b1:91:cf:23:50:70:4d:2a:1c:bd:7c:c4:6d:21:07:1a:a9:
cf:31:0b:a5:5b:fe:16:d4:01:07:74:39:3f:01:95:f8:c6:72:
2d:8e:df:d6:71:24:5a:7e:b0:86:48:d5:29:f4:e6:7d:e2:d5:
0f:91:e5:ed:97:7d:7c:e0:7c:0f:8e:22:2c:a2:e5:78:0b:9e:
d8:08:de:31:67:2c:03:c1:d6:17:34:f3:d2:40:ca:81:4c:79:
f0:0a:97:bc:11:0c:2a:65:c3:cf:e7:77:59:56:a3:27:82:43:
62:d9:cd:3d:5d:16:b9:32:a7:2e:5d:61:7e:31:b2:39:4f:c6:
64:c2:d6:df:50:cf:ca:9b:fd:c0:7c:e6:28:ee:75:aa:94:0a:
c5:1c:91:8a:dd:4f:cd:fb:7f:e1:c7:e5:69:a8:f8:d2:ca:ca:
e7:6e:31:83:e3:de:06:63:ac:27:a0:bd:b5:4a:a4:b1:c6:fa:
e4:83:b2:0e:41:21:d4:35:b8:ee:3e:42:6f:6e:91:a5:f4:e1:
cd:16:1b:e3:5c:5a:40:a1:c9:fc:85:e9:f1:76:47:8b:38:4f:
a9:83:00:b3:e0:4e:cf:b0:67:2f:e0:7a:a8:19:a4:5f:86:7f:
04:77:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 12:07:43 2024 by rpki-client on console-fra.rpki-client.org