Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/64a7ea-3ae1-4e0c-bf70-cd28af2af2a5/1/ySHlokQD894hmxD1dY-5Rs1rPrA.roa
File: ySHlokQD894hmxD1dY-5Rs1rPrA.roa (raw, json)
Hash identifier: /seNgcrGNmg8tCtZS8q9dcNYh3bjuWqT6juoafE4SK4=
Subject key identifier: C9:21:E5:A2:44:03:F3:DE:21:9B:10:F5:75:8F:B9:46:CD:6B:3E:B0
Certificate issuer: /CN=4a4e38fded7aa5dc1746a2659a26ab1ec9dada2f
Certificate serial: 01856D416EDAE2961E6ED27DA49AE89F1B2F
Authority key identifier: 4A:4E:38:FD:ED:7A:A5:DC:17:46:A2:65:9A:26:AB:1E:C9:DA:DA:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk44_e16pdwXRqJlmiarHsna2i8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/64a7ea-3ae1-4e0c-bf70-cd28af2af2a5/1/ySHlokQD894hmxD1dY-5Rs1rPrA.roa
Signing time: Sun 01 Jan 2023 12:14:42 +0000
ROA not before: Sun 01 Jan 2023 12:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 195.96.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:6e:da:e2:96:1e:6e:d2:7d:a4:9a:e8:9f:1b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e38fded7aa5dc1746a2659a26ab1ec9dada2f
Validity
Not Before: Jan 1 12:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c921e5a24403f3de219b10f5758fb946cd6b3eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:07:29:65:c5:10:a0:1a:81:25:f9:68:69:
e5:06:4c:0b:04:e4:19:af:2b:72:9b:88:63:53:60:
e5:3b:ad:95:16:7d:43:2f:b4:0d:de:0d:31:d0:52:
90:ec:44:aa:76:9c:bf:6d:53:37:2f:6c:b8:6d:ec:
51:d3:82:a9:54:fd:a0:0b:91:c4:b8:90:04:7d:dd:
20:17:f9:f0:19:8f:b8:7a:87:87:66:6c:33:4f:cb:
b3:0d:4d:f3:0a:44:be:3b:c7:19:b9:b1:01:d9:31:
4d:c9:d7:9a:6e:02:5b:73:1b:f6:de:12:05:66:0a:
84:3f:21:2c:f4:0e:b6:2f:10:33:34:3b:e2:36:36:
a6:f9:c8:4e:54:46:36:b3:0b:a1:ec:f5:a0:75:81:
b5:14:b7:0f:d7:cc:35:42:2d:e6:28:a3:9b:ab:62:
88:8b:98:c8:7a:1d:6b:86:5d:a2:2b:36:fd:82:8d:
d6:2e:2d:87:87:84:42:d7:1e:b9:9f:e9:8c:3c:c1:
89:3e:0e:73:81:db:5a:5c:3c:5f:a1:c7:da:8c:ef:
00:4a:6f:19:31:1d:a1:6d:b0:d9:9f:b7:c3:04:70:
a3:d8:15:25:9f:15:cd:22:e7:ab:ea:23:ca:6c:63:
58:96:3f:54:26:59:80:88:b5:9f:5a:0b:54:35:33:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:E5:A2:44:03:F3:DE:21:9B:10:F5:75:8F:B9:46:CD:6B:3E:B0
X509v3 Authority Key Identifier:
keyid:4A:4E:38:FD:ED:7A:A5:DC:17:46:A2:65:9A:26:AB:1E:C9:DA:DA:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk44_e16pdwXRqJlmiarHsna2i8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/64a7ea-3ae1-4e0c-bf70-cd28af2af2a5/1/ySHlokQD894hmxD1dY-5Rs1rPrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/64a7ea-3ae1-4e0c-bf70-cd28af2af2a5/1/Sk44_e16pdwXRqJlmiarHsna2i8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.159.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c0:70:b2:83:72:6f:69:2b:bf:da:4e:a8:30:1b:e2:ad:4d:
60:7c:b7:7d:5b:2f:6b:9b:3a:f4:4a:e1:d4:cf:d3:db:aa:db:
45:3b:c8:0b:91:e8:43:bc:e8:64:6e:83:ed:20:7e:5b:31:4e:
ad:e3:75:31:1c:d1:52:0c:48:a0:04:6a:9b:45:6a:88:50:4a:
38:1e:a4:ac:2f:f4:ac:e4:1c:e6:78:19:3a:63:0e:77:0a:e7:
3e:96:13:23:ac:22:82:39:f9:b5:9e:bd:3b:63:e5:ab:53:71:
b0:22:ce:23:ca:a8:6d:02:39:70:d0:b8:2b:a3:17:b7:c2:3a:
c6:39:64:bd:86:52:10:d3:bf:30:ba:02:d8:1b:a5:df:9c:6d:
47:74:15:19:e1:c2:16:6e:87:3c:ae:54:c2:d6:08:a6:78:1c:
aa:6c:0f:00:64:37:79:06:ed:e9:1a:53:72:a1:fc:a7:c7:bf:
87:a1:79:d6:b9:bf:66:ce:c2:33:21:75:ef:eb:dd:40:8f:b1:
c3:85:29:89:ae:28:d2:bb:02:77:14:78:90:f8:4a:da:e6:24:
7f:75:f3:9a:cb:f3:c3:b3:2f:42:40:39:2f:e0:06:4d:ef:5d:
56:98:12:16:50:37:81:56:31:7e:3f:24:d9:c8:94:5f:7d:e1:
75:c4:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:49 2024 by rpki-client on console-fra.rpki-client.org