Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/pFyyw626Zy5qBH7TwcKK_qPWeNk.roa
File: pFyyw626Zy5qBH7TwcKK_qPWeNk.roa (raw, json)
Hash identifier: XbK2k4pGDaiP6YER4YJtY2HSLBwcxESJFM3BOgZW8PM=
Subject key identifier: A4:5C:B2:C3:AD:BA:67:2E:6A:04:7E:D3:C1:C2:8A:FE:A3:D6:78:D9
Certificate issuer: /CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Certificate serial: 01856F5DD275F2E9361F90FBDCA2BB6F825D
Authority key identifier: 94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/pFyyw626Zy5qBH7TwcKK_qPWeNk.roa
Signing time: Sun 01 Jan 2023 22:04:57 +0000
ROA not before: Sun 01 Jan 2023 22:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 195.93.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d2:75:f2:e9:36:1f:90:fb:dc:a2:bb:6f:82:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Validity
Not Before: Jan 1 22:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a45cb2c3adba672e6a047ed3c1c28afea3d678d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:24:30:d5:de:45:e4:a6:a3:74:a8:06:4c:
c3:d1:30:5e:ed:21:85:b8:b2:27:ff:fa:a2:cc:bf:
ae:93:89:3d:c9:b8:21:e9:bf:bf:af:9a:88:a6:03:
c5:89:70:7c:36:fb:67:42:8c:53:4a:19:b6:ca:ef:
8a:76:42:95:9a:34:6a:71:8d:75:6c:50:8c:43:a3:
8c:89:b7:9b:5b:d3:a6:67:ac:25:33:d2:58:fa:fc:
a5:44:ef:21:3b:8f:6c:59:48:09:06:ab:21:16:2f:
55:7f:80:f3:0d:33:6b:f2:ee:25:63:46:84:2f:ca:
fa:13:e0:20:fe:12:41:2f:58:8f:b5:17:c4:ce:a3:
1e:b0:6e:a0:36:c9:30:e3:02:34:53:a6:44:cb:e1:
b9:2f:23:ad:fc:89:3a:ff:21:78:77:82:5c:b0:dd:
11:2c:e7:ac:19:3b:2f:16:19:72:9b:a5:71:16:ef:
e8:03:56:ee:14:81:0a:64:52:d8:2d:79:2d:27:ac:
24:30:f1:d7:69:72:10:fc:e6:6d:5d:59:b2:d7:83:
47:60:cb:dc:b6:c3:66:67:9a:51:a7:92:0b:77:cc:
80:06:e5:9e:8e:28:3e:97:c2:0b:99:2d:c9:fc:77:
21:1d:69:ad:0e:f1:66:82:e1:f9:39:6e:5a:64:ae:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:B2:C3:AD:BA:67:2E:6A:04:7E:D3:C1:C2:8A:FE:A3:D6:78:D9
X509v3 Authority Key Identifier:
keyid:94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/pFyyw626Zy5qBH7TwcKK_qPWeNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:95:50:e6:ef:9d:07:9a:b2:6a:a1:0a:26:cf:f2:cd:c4:ae:
f5:82:62:b1:29:89:e1:2c:ed:85:e3:a7:ba:5f:6a:b2:21:93:
08:04:56:09:bd:0f:c3:ff:d6:92:af:6c:24:20:60:80:4c:73:
89:09:0f:ee:c1:13:8f:73:36:f3:7a:f5:4f:3a:ed:56:40:13:
1d:28:30:79:31:49:26:ed:10:6c:72:07:4d:bf:0c:83:dd:4c:
e9:62:44:f1:69:68:6a:fc:28:6a:69:af:e6:57:36:dc:9b:a3:
90:cc:c0:6a:bc:30:9d:68:a6:01:6e:9d:e6:64:8a:94:70:b5:
14:e4:de:8c:df:97:77:c1:d5:d2:b8:55:f1:33:eb:3e:e7:20:
55:9f:48:6d:69:46:d8:29:23:85:54:1f:41:4f:4b:27:f6:ba:
14:e5:a3:9c:e3:01:89:62:8b:16:c5:8b:84:77:b3:81:5e:89:
85:2b:bd:66:36:38:52:5c:18:3d:32:0f:2e:d1:dd:a2:28:99:
43:89:f5:3e:be:cc:5c:0a:9f:9b:c7:6a:b8:cc:8a:09:10:24:
3d:a5:66:8a:82:84:6d:45:02:06:c3:cf:d2:de:3e:bc:bf:72:
2d:4c:63:27:73:28:c7:3d:1c:02:f4:e2:45:8c:02:85:a8:63:
a0:0f:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:59 2024 by rpki-client on console-fra.rpki-client.org