Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/H8Vh3zcqfd_z8LuSKP1RaW3K8hk.roa
File: H8Vh3zcqfd_z8LuSKP1RaW3K8hk.roa (raw, json)
Hash identifier: WK4OsNmaLlxAVR4d0SeUm1xZ/6+ZrDJu+lg/skV2TJI=
Subject key identifier: 1F:C5:61:DF:37:2A:7D:DF:F3:F0:BB:92:28:FD:51:69:6D:CA:F2:19
Certificate issuer: /CN=71ed7ba32e16b552184e665579e8874b74a1ca9b
Certificate serial: 095764EA
Authority key identifier: 71:ED:7B:A3:2E:16:B5:52:18:4E:66:55:79:E8:87:4B:74:A1:CA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce17oy4WtVIYTmZVeeiHS3Shyps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/H8Vh3zcqfd_z8LuSKP1RaW3K8hk.roa
Signing time: Sat 01 Jan 2022 07:01:05 +0000
ROA not before: Sat 01 Jan 2022 07:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41390
IP address blocks: 195.3.144.0/22 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156722410 (0x95764ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ed7ba32e16b552184e665579e8874b74a1ca9b
Validity
Not Before: Jan 1 07:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fc561df372a7ddff3f0bb9228fd51696dcaf219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:f6:cd:11:60:45:a9:c0:50:91:88:c2:88:
32:b2:da:d4:ef:16:44:8e:ea:d2:25:6e:12:d2:7c:
bd:2d:f0:f4:3e:0e:fe:7b:f3:00:de:ad:2b:63:5d:
6f:8d:ec:c2:e1:e4:da:85:6c:97:f7:74:5d:d4:d2:
fb:34:ce:30:04:3e:c7:40:20:d7:0b:c1:f2:ed:52:
f8:3d:13:09:6b:f4:9d:09:d6:00:78:cc:ed:a1:c5:
c0:b8:fd:91:37:83:30:2f:c3:56:97:4c:00:c8:ed:
ef:2e:7e:d4:d8:d6:0a:93:4d:c1:93:65:68:45:0e:
09:32:36:d0:11:6f:5a:de:8a:03:af:58:25:a1:dc:
a8:54:6b:17:28:22:a2:e3:63:ad:90:e4:35:4d:b0:
ff:22:0f:ff:5c:4c:49:e2:93:28:07:18:66:13:51:
63:71:2c:bf:8c:47:da:c5:13:a3:01:3d:89:56:20:
17:b7:95:ab:f5:1c:de:08:c9:56:d7:cc:88:c9:71:
77:9e:b0:ea:56:9e:a8:52:d0:33:3c:24:65:40:79:
08:e4:09:c6:63:a7:3f:69:1b:e0:72:b6:ce:b1:6f:
1b:02:21:51:57:0b:2a:22:2d:bc:79:38:7e:7b:8b:
e0:de:8c:43:34:9e:2b:b8:ae:13:c6:13:a6:a4:94:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C5:61:DF:37:2A:7D:DF:F3:F0:BB:92:28:FD:51:69:6D:CA:F2:19
X509v3 Authority Key Identifier:
keyid:71:ED:7B:A3:2E:16:B5:52:18:4E:66:55:79:E8:87:4B:74:A1:CA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce17oy4WtVIYTmZVeeiHS3Shyps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/H8Vh3zcqfd_z8LuSKP1RaW3K8hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/ce17oy4WtVIYTmZVeeiHS3Shyps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.3.144.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:91:ce:08:e3:bd:a0:66:3c:72:01:ce:d8:5d:bb:f9:d6:6e:
c0:ae:ee:2a:fa:7d:72:49:26:da:63:a5:66:c8:07:db:65:f0:
46:d7:3a:70:66:aa:39:84:16:03:de:ef:66:d3:c3:aa:b0:c1:
fa:8a:a0:4d:51:21:3e:26:48:68:f0:0f:aa:c0:71:a0:37:c8:
06:ad:1b:01:ac:31:af:b4:6f:0f:aa:49:c6:8d:48:14:44:95:
63:05:34:74:5e:ff:2b:db:7c:9e:39:db:a0:d8:05:a9:96:75:
b7:ad:c6:96:7e:a0:b2:b3:9e:73:b1:f3:45:42:68:3e:da:27:
a6:e4:93:72:9a:6b:15:d3:5a:c5:d0:3c:14:46:b7:30:48:b3:
92:77:9a:a4:4e:70:0a:2d:43:6b:f2:6b:e2:eb:12:2e:65:59:
1d:4c:58:4c:7c:32:43:18:b8:35:7d:22:b0:6d:71:88:e1:fc:
d5:ae:f7:57:fe:cd:14:d4:1d:fa:66:a5:2b:c3:a6:48:25:66:
da:5e:e9:6b:2f:79:16:f4:ce:63:90:58:8b:22:ac:a7:de:35:
ef:2f:67:4f:25:7b:dd:2f:77:6d:d1:fc:1b:9e:86:a7:50:06:
2c:c2:41:35:09:1c:40:5f:35:ce:dc:d1:f6:ea:f0:8c:01:15:
d6:95:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:03 2024 by rpki-client on console-fra.rpki-client.org