Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/vjXMYfLuQVBx7z_DskhVKexx3tQ.roa
File: vjXMYfLuQVBx7z_DskhVKexx3tQ.roa (raw, json)
Hash identifier: 0Y6WA/Bsz34NCjOvvOZztNXbO2exSSYcvTB76BRflWE=
Subject key identifier: BE:35:CC:61:F2:EE:41:50:71:EF:3F:C3:B2:48:55:29:EC:71:DE:D4
Certificate issuer: /CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
Certificate serial: 018573BA97A5A5CAFAEB9DB128883722D935
Authority key identifier: EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/vjXMYfLuQVBx7z_DskhVKexx3tQ.roa
Signing time: Mon 02 Jan 2023 18:24:46 +0000
ROA not before: Mon 02 Jan 2023 18:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.95.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:97:a5:a5:ca:fa:eb:9d:b1:28:88:37:22:d9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
Validity
Not Before: Jan 2 18:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be35cc61f2ee415071ef3fc3b2485529ec71ded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:3e:69:49:21:22:d9:7e:e7:cc:75:6c:44:
f2:17:27:f3:66:f5:85:2f:fc:8f:06:b0:fb:ab:6b:
8c:f3:43:d2:58:2b:d0:73:b2:9e:0e:50:a4:c7:9e:
5e:25:48:01:71:81:5a:a3:4c:c6:04:f1:9e:c0:8d:
00:32:77:4c:a4:eb:fa:84:af:50:63:de:19:8b:e9:
91:95:16:e7:cc:54:9c:09:47:63:13:b8:37:ff:6e:
62:60:5d:4d:97:df:b5:48:66:3f:f1:4a:f5:20:ef:
ce:fd:94:d5:43:37:2e:cf:e0:d8:6d:30:74:7b:d7:
22:2f:ac:40:41:59:a1:87:07:4e:e5:21:e7:97:8b:
a5:63:9d:6f:40:6c:58:9f:86:80:b7:e4:16:01:d9:
9d:a1:ee:ff:22:75:7e:b2:2c:88:82:c8:6a:a2:54:
90:fd:79:9b:d3:2b:a3:ed:79:22:2e:59:23:62:e5:
ee:f3:2f:4c:ba:72:80:14:7e:73:d7:fe:16:dd:d5:
f2:5b:28:2d:f0:73:d1:dc:b0:71:ce:31:67:c6:e1:
26:66:0c:2c:f4:f5:2d:a0:17:45:fd:00:61:a9:d3:
ac:f6:8c:4e:66:39:a2:bc:e8:6a:3b:32:1d:a7:e3:
55:5c:32:e0:ac:b0:56:04:bb:67:7d:59:33:cb:d2:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:CC:61:F2:EE:41:50:71:EF:3F:C3:B2:48:55:29:EC:71:DE:D4
X509v3 Authority Key Identifier:
keyid:EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/vjXMYfLuQVBx7z_DskhVKexx3tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/7hpiB_6dsND36dFhq6Tl3eJUmi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c0:3b:52:7b:ed:5c:1b:ad:e3:3b:5a:99:db:3c:00:12:63:
89:ec:2c:c6:cc:d4:fc:3b:c1:fd:d8:a5:1a:0a:b9:81:98:7c:
69:07:f8:e6:e6:d2:1d:1d:07:df:07:4f:a3:eb:b9:e4:67:8b:
23:ea:cf:20:f3:00:e3:58:ca:82:0d:2c:6c:49:7b:d8:bb:2d:
fe:ab:ac:ee:fb:3d:0f:e6:b0:3a:1d:bf:43:42:05:17:67:8a:
f8:df:18:de:9d:50:9c:c7:0d:17:f1:7b:b7:80:da:7e:61:c5:
d4:86:e0:11:ed:b4:33:e0:7d:67:bb:61:21:33:4a:cf:2e:87:
e9:89:cc:31:4f:42:3f:e2:73:ba:3c:bb:62:71:4e:45:f7:26:
92:2c:3e:c4:98:dd:a5:03:cc:6e:e0:37:e5:b6:ad:9c:47:db:
97:eb:f5:35:ba:4b:86:7d:b1:d7:ae:4d:c0:8e:de:3b:29:b2:
e5:67:79:96:e9:00:2c:18:4f:b0:00:49:07:02:2f:f1:1a:ad:
cc:94:f5:7c:b1:f6:e9:54:63:08:5e:4e:58:37:77:53:de:cd:
1b:99:9c:d1:a5:64:bf:8f:93:21:ff:0a:e3:6b:8a:0f:74:2c:
33:09:19:bf:ce:a6:57:22:2c:38:a6:ac:44:f2:55:88:69:ed:
95:c7:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 10:10:06 2023 by rpki-client on console-fra.rpki-client.org