Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/JUbj1WHOJf6pu0Rh9tlh01k6L44.roa
File: JUbj1WHOJf6pu0Rh9tlh01k6L44.roa (raw, json)
Hash identifier: RPC8cpeNnTVS92X5WCWJ+DRVbNL5iWfkDN7pVMOkUQQ=
Subject key identifier: 25:46:E3:D5:61:CE:25:FE:A9:BB:44:61:F6:D9:61:D3:59:3A:2F:8E
Certificate issuer: /CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Certificate serial: 018573039756C6B54CF88918EDD998AAF337
Authority key identifier: BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/JUbj1WHOJf6pu0Rh9tlh01k6L44.roa
Signing time: Mon 02 Jan 2023 15:04:53 +0000
ROA not before: Mon 02 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200444
IP address blocks: 195.244.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:97:56:c6:b5:4c:f8:89:18:ed:d9:98:aa:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Validity
Not Before: Jan 2 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2546e3d561ce25fea9bb4461f6d961d3593a2f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:5a:99:06:d9:ac:72:60:71:27:9c:df:10:
e1:b3:3b:cf:cf:e7:10:51:3e:3c:4a:37:da:69:f9:
bb:de:03:35:21:71:df:88:37:1f:fe:5b:a3:4a:b0:
0d:41:70:ed:c0:97:47:07:c8:89:fe:4a:2f:a1:8e:
67:0e:ab:d2:c9:32:fe:37:47:98:d0:d3:31:8f:d8:
f1:48:57:d0:66:87:ff:98:39:d8:ae:89:e2:e8:82:
f7:c3:95:7d:f0:d0:ca:ad:1f:ac:f8:43:00:b7:6f:
35:c7:f5:63:40:5a:9e:01:75:ba:ea:fa:ba:a9:bd:
32:b9:36:2e:1a:c5:bd:1c:9d:81:dd:16:f1:4d:bf:
51:32:b8:2d:b8:3a:4e:f5:81:1e:e2:c1:44:6a:6d:
54:c7:67:4d:73:ec:59:5f:f0:dd:ea:fe:6c:dc:f6:
8f:60:dd:73:ba:c8:f7:5a:21:fc:e0:68:ad:de:3d:
32:e8:54:86:28:31:44:9d:88:5b:ac:a8:fd:b9:a7:
25:69:bc:28:6b:0c:94:67:e3:34:16:35:91:c7:88:
6b:b8:09:73:a1:05:2a:8b:a2:9e:3d:b7:15:15:e1:
4f:07:0b:6a:d0:ac:f3:5b:1d:82:68:f8:03:6b:d7:
8b:b8:f7:8f:9a:5c:15:0d:9a:4c:a6:75:a7:14:6e:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:46:E3:D5:61:CE:25:FE:A9:BB:44:61:F6:D9:61:D3:59:3A:2F:8E
X509v3 Authority Key Identifier:
keyid:BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/JUbj1WHOJf6pu0Rh9tlh01k6L44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.88.0/23
Signature Algorithm: sha256WithRSAEncryption
50:df:e0:a5:fd:d8:21:3e:19:af:47:5c:69:55:c4:e5:bd:97:
8d:1c:7d:b1:d4:ec:d2:b2:28:37:01:3c:9d:1e:5e:64:89:15:
79:61:5f:97:af:b9:32:9c:c5:52:df:13:61:3e:0d:cf:b0:c6:
fa:45:d3:02:61:b3:b5:88:f8:c9:93:5e:0f:51:0b:a9:94:41:
91:48:81:e6:ee:d2:3b:bd:ab:4d:ed:3d:9d:4a:a0:73:2c:fc:
3b:a2:c3:c2:48:ef:49:da:39:85:f0:99:bd:65:3d:9c:72:98:
6d:35:cc:fc:77:67:cd:be:8d:06:48:e3:44:60:0c:5f:1e:51:
19:92:19:4d:9c:24:38:a4:9b:c3:65:98:da:04:7f:7f:d1:ae:
41:c2:c7:f5:8a:cc:a7:b4:85:7a:01:9b:04:80:c2:5a:16:84:
58:74:09:e6:4b:e2:ff:95:a1:47:9d:c2:2a:38:74:05:10:64:
22:1c:86:cf:fe:69:d1:e3:ae:a8:1e:a0:ca:be:a8:ca:b0:9c:
6f:17:1b:67:12:d4:8d:b2:20:91:2b:3a:c7:43:11:2a:62:d9:
01:f9:5e:69:df:f9:a0:83:9f:dd:de:aa:eb:dd:c2:56:99:69:
4d:59:0e:1d:b9:02:3d:e0:d4:c0:18:2c:f2:01:87:b1:f0:d4:
a5:97:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org