Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2da576-e416-4f3b-a2fe-97646e3957e7/1/U8GRRNP01duKbkRSyBFzfRKNW6E.roa
File: U8GRRNP01duKbkRSyBFzfRKNW6E.roa (raw, json)
Hash identifier: M1KmFgqUIgh1TlZQ5Ei605iQ3isE7weyLxnYdKMs8Rw=
Subject key identifier: 53:C1:91:44:D3:F4:D5:DB:8A:6E:44:52:C8:11:73:7D:12:8D:5B:A1
Certificate issuer: /CN=165f8763fb8f2e7fd2f3b93804484fab4efab9bd
Certificate serial: 01821F8A241EE9B65FACBDC262F87C70F650
Authority key identifier: 16:5F:87:63:FB:8F:2E:7F:D2:F3:B9:38:04:48:4F:AB:4E:FA:B9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-HY_uPLn_S87k4BEhPq076ub0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2da576-e416-4f3b-a2fe-97646e3957e7/1/U8GRRNP01duKbkRSyBFzfRKNW6E.roa
Signing time: Thu 21 Jul 2022 06:55:23 +0000
ROA not before: Thu 21 Jul 2022 06:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 195.64.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:8a:24:1e:e9:b6:5f:ac:bd:c2:62:f8:7c:70:f6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165f8763fb8f2e7fd2f3b93804484fab4efab9bd
Validity
Not Before: Jul 21 06:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53c19144d3f4d5db8a6e4452c811737d128d5ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:33:f5:f8:b2:5e:27:c3:95:a9:27:e2:8f:
63:43:ad:42:eb:e0:0c:1a:67:1b:a1:ef:07:68:31:
01:6c:6e:45:43:0c:1d:18:40:d0:dc:9d:0c:aa:b4:
94:04:08:66:57:b5:03:31:3d:bd:4b:64:2c:c8:6f:
89:b9:aa:fe:df:7a:9f:72:03:dc:f0:6d:4a:be:38:
aa:ff:66:4e:1f:09:ee:15:79:b5:66:e5:e5:6f:78:
0f:b4:a9:01:9a:cd:31:7e:93:9f:8f:e3:ad:19:5b:
06:4a:64:f5:3d:e4:14:3a:43:59:7c:a4:51:90:7c:
d5:01:a0:30:01:8b:78:e8:75:7b:be:b8:5b:3b:aa:
98:e6:86:b9:8b:90:e2:d4:55:7f:12:56:45:30:ca:
20:52:a3:be:c4:36:86:84:93:36:e6:db:ce:5b:e4:
a1:41:00:41:26:9b:cf:35:52:79:21:93:ee:4e:20:
25:1a:8b:d6:45:b7:21:9d:ae:34:02:9a:db:65:71:
02:76:50:4e:1f:d8:84:3d:f9:f9:f1:5b:8e:ea:63:
23:15:61:f2:a0:e7:20:33:14:d8:1b:4c:65:3e:0a:
5c:3a:6f:63:6c:32:8c:cc:43:7b:da:85:f4:c4:50:
02:77:9f:aa:2e:c1:a6:9a:42:6f:dd:4b:88:70:50:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C1:91:44:D3:F4:D5:DB:8A:6E:44:52:C8:11:73:7D:12:8D:5B:A1
X509v3 Authority Key Identifier:
keyid:16:5F:87:63:FB:8F:2E:7F:D2:F3:B9:38:04:48:4F:AB:4E:FA:B9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-HY_uPLn_S87k4BEhPq076ub0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2da576-e416-4f3b-a2fe-97646e3957e7/1/U8GRRNP01duKbkRSyBFzfRKNW6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2da576-e416-4f3b-a2fe-97646e3957e7/1/Fl-HY_uPLn_S87k4BEhPq076ub0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.120.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ba:7f:d3:e7:1e:93:9e:50:aa:d0:f6:41:fc:f2:99:af:3f:
1d:b8:52:f8:d3:1f:9d:e7:0d:86:e8:d6:2a:a7:d0:b5:ab:29:
07:fd:fb:b4:fb:75:05:e9:f5:45:93:e2:d6:e3:91:59:b8:de:
af:73:18:ff:c7:04:dc:44:7a:18:95:6b:0b:fc:b8:c3:98:80:
be:12:33:29:0c:b8:16:1d:25:d6:8e:b9:c9:da:06:b3:8e:c5:
8e:c2:1e:a9:38:b5:03:85:4c:4f:1e:ef:98:26:1d:5e:2f:d6:
02:bd:8a:3c:1e:92:47:3e:26:c2:78:3d:de:a2:a2:9d:c6:34:
b5:3e:39:a0:87:59:38:71:55:9c:8b:8a:17:9b:04:eb:93:55:
9b:b5:ee:98:aa:92:42:38:8f:d2:59:49:25:ff:e0:31:7a:1a:
57:69:bf:c3:d2:ab:ff:fa:3e:52:98:ce:b7:e2:ef:b4:6c:53:
03:5c:f5:45:7c:91:a0:b6:7b:c2:0b:94:31:60:e1:a6:db:f0:
41:66:19:f4:95:b0:63:93:44:e0:3a:69:4c:d2:15:b7:74:74:
3f:22:b3:ca:f3:12:23:8c:16:32:c3:99:d4:76:32:8d:f1:11:
13:75:f9:20:00:cb:ea:5f:aa:80:58:51:17:5e:fc:ce:ac:e4:
d1:e4:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org