Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/oEy8uAHNbqe2u_jjNjN_qtsh63Q.roa
File: oEy8uAHNbqe2u_jjNjN_qtsh63Q.roa (raw, json)
Hash identifier: VUrFXm72zjC5jfZxy/e5owd8nSCrAepeZi4SurA1anI=
Subject key identifier: A0:4C:BC:B8:01:CD:6E:A7:B6:BB:F8:E3:36:33:7F:AA:DB:21:EB:74
Certificate issuer: /CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Certificate serial: 018572FA4B8510DDF7F7BFA550ACBA721020
Authority key identifier: 52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/oEy8uAHNbqe2u_jjNjN_qtsh63Q.roa
Signing time: Mon 02 Jan 2023 14:54:43 +0000
ROA not before: Mon 02 Jan 2023 14:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:4b:85:10:dd:f7:f7:bf:a5:50:ac:ba:72:10:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Validity
Not Before: Jan 2 14:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a04cbcb801cd6ea7b6bbf8e336337faadb21eb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:68:14:bb:cc:db:3c:7c:6f:d6:c8:df:9c:5d:
6b:d6:3d:56:87:9f:25:94:27:b1:5e:65:7b:d2:aa:
fd:f3:98:6e:0f:08:67:f1:28:c4:7a:9c:47:00:7e:
d6:e4:00:34:77:a7:af:11:30:d5:8f:88:f5:39:a3:
b0:a8:86:e8:1a:a7:5a:f6:44:93:dd:15:91:ff:c8:
c2:d7:a4:96:91:6c:25:ec:f0:37:b6:c6:0b:0f:2a:
a9:b7:14:7b:e6:49:20:a2:7d:40:c4:da:38:ff:4f:
68:30:1b:79:ea:54:7c:f7:01:ba:e9:bc:c8:b0:21:
78:1a:cc:d7:00:7b:f1:4a:1d:70:24:f4:85:36:bb:
d7:87:08:ca:64:23:8d:bd:2e:61:ea:63:78:c2:bf:
4a:d9:ed:9b:73:53:36:49:25:ea:60:e7:0c:1e:3b:
a2:49:f1:3e:32:0d:43:a3:7b:26:83:c1:6f:61:84:
42:e0:44:50:98:eb:41:09:be:d9:58:c1:b0:cd:ad:
fe:89:67:b7:30:8e:b1:56:5a:5e:90:0a:d4:b2:14:
f0:6f:ca:02:d1:ad:df:2d:5b:f8:ee:9a:2b:48:75:
b9:b9:bc:4f:61:ed:fd:4f:d5:37:f5:91:fe:69:5f:
25:98:c6:7e:7d:d2:46:32:6d:b8:34:08:a1:fa:b0:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4C:BC:B8:01:CD:6E:A7:B6:BB:F8:E3:36:33:7F:AA:DB:21:EB:74
X509v3 Authority Key Identifier:
keyid:52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/oEy8uAHNbqe2u_jjNjN_qtsh63Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/UlHO3JOHxrPTf9VkYQGcpSEYqnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.110.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b1:4b:f4:7d:27:39:1b:1c:d4:bf:4b:dc:d9:82:43:d1:08:
ab:71:42:2a:b9:ad:02:95:de:84:c0:12:8b:11:fe:88:1f:4b:
1a:48:d8:49:a9:10:fd:a9:b3:4e:b5:41:6f:7a:15:be:08:a9:
6f:94:d0:09:55:da:f0:f7:96:b2:e8:95:24:cf:c7:9a:fb:01:
c2:03:f7:99:44:d0:57:da:8f:7b:dc:e7:87:c8:b7:ab:07:ed:
5d:31:63:7f:07:53:73:11:9b:3c:b1:e0:ce:a8:0a:e8:d6:0a:
7f:dd:32:88:98:af:7e:d3:c8:4c:fc:2a:5a:0f:2c:e2:91:9b:
33:ef:1e:a2:3f:d5:fd:67:f9:6e:a6:04:9b:4c:ed:d5:21:13:
07:49:a9:2e:91:f8:0b:39:b3:e4:d3:2b:d6:16:dc:f9:7d:10:
2b:71:d3:5f:a2:d4:54:20:19:7e:3c:5d:b9:be:29:5d:ae:15:
14:53:20:0d:d6:5c:59:33:3c:49:ff:25:d8:8a:25:78:0d:ee:
10:64:0d:d9:88:79:b1:ba:9a:40:a2:46:db:4a:57:1a:c3:c6:
4c:3e:01:4b:2a:29:0c:5c:2c:c4:55:fd:2f:7e:f8:f0:dd:ff:
0f:4e:dc:9e:e5:98:90:86:87:9a:f5:44:f7:20:be:62:53:bf:
cf:ef:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:24 2024 by rpki-client on console-fra.rpki-client.org