Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/4LmPm60ncp6ahWK0XdFyXA49Y8Q.roa
File: 4LmPm60ncp6ahWK0XdFyXA49Y8Q.roa (raw, json)
Hash identifier: TYSTxfEGWckGKTwYAai9lnqfH5czZwx3l2E6dsvkskQ=
Subject key identifier: E0:B9:8F:9B:AD:27:72:9E:9A:85:62:B4:5D:D1:72:5C:0E:3D:63:C4
Certificate issuer: /CN=b98b79836afe75370a680bb136c1b99bc88d4519
Certificate serial: 0181ED8ADF7BCA252BEEC076F532350918C3
Authority key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/4LmPm60ncp6ahWK0XdFyXA49Y8Q.roa
Signing time: Mon 11 Jul 2022 13:55:09 +0000
ROA not before: Mon 11 Jul 2022 13:55:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 195.191.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:8a:df:7b:ca:25:2b:ee:c0:76:f5:32:35:09:18:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Validity
Not Before: Jul 11 13:55:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0b98f9bad27729e9a8562b45dd1725c0e3d63c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:32:4d:a7:e3:f0:0e:27:ca:d3:54:5b:5a:
c3:56:53:31:d1:07:37:5a:f4:6c:fb:5f:0b:90:0e:
8e:e9:53:b7:ad:df:fc:01:95:92:90:cf:ea:05:4f:
e6:4d:eb:03:11:6a:5f:02:79:74:56:71:1b:a7:79:
29:d6:98:36:57:e3:32:bc:8b:29:7c:c8:90:c1:b9:
df:83:eb:5a:bf:6d:ae:d5:91:a8:1c:75:01:aa:b8:
df:40:48:e1:dd:37:6d:83:13:d1:ec:36:57:37:af:
d6:8e:ff:62:9d:2d:b7:ef:95:90:b3:1f:9a:d2:42:
69:ad:40:70:b4:7c:a5:f3:d2:5c:2d:bd:52:8a:f4:
ed:aa:93:66:8e:c2:15:ef:64:b4:8c:31:75:b6:77:
17:fe:aa:c1:fe:ac:da:46:db:cd:cb:66:20:a0:38:
25:bc:b7:8e:8f:1c:3d:9c:8a:f2:17:3e:f7:16:57:
3c:56:32:39:d1:c5:d2:bb:37:cb:b7:99:2b:7a:d6:
80:65:f7:0a:5c:f2:b5:69:01:46:67:19:08:d4:ae:
da:ea:fb:6b:86:54:19:24:bb:49:50:39:8a:7c:89:
1e:dd:7b:bf:8c:33:56:6a:de:59:c3:ed:8b:23:e7:
0a:02:ac:21:0d:d4:84:bc:6f:29:4b:66:e9:88:c4:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:8F:9B:AD:27:72:9E:9A:85:62:B4:5D:D1:72:5C:0E:3D:63:C4
X509v3 Authority Key Identifier:
keyid:B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/4LmPm60ncp6ahWK0XdFyXA49Y8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.231.0/24
Signature Algorithm: sha256WithRSAEncryption
11:13:d1:8e:e4:81:5c:12:7f:5e:48:64:00:0e:2a:36:00:7a:
9a:1e:c6:55:e2:70:51:84:9e:5b:7b:6b:64:65:a7:88:83:70:
b1:03:41:a2:d0:88:cf:97:86:b3:34:e4:7a:23:ec:35:22:b3:
f6:a9:4f:5e:1c:e0:47:fe:b6:2d:53:83:c8:1b:fd:c9:59:e1:
a9:e4:4d:11:b0:6e:84:d2:c4:73:be:be:d3:5a:86:be:72:be:
bc:36:83:df:1d:5e:1a:2f:81:cf:3b:e4:91:ca:0e:0c:f1:80:
4f:ac:fa:93:81:8a:04:34:eb:fc:5d:a5:a3:5a:74:4d:7e:a0:
17:42:e8:52:54:12:6f:5e:70:64:c1:02:bc:eb:f8:a5:af:67:
12:8f:e4:95:a8:45:21:b0:d7:29:29:7f:7d:f1:c9:b7:6d:14:
bb:77:91:17:24:aa:c5:10:4a:2e:5e:46:b3:0e:ad:21:2a:17:
b7:7a:67:a3:83:3a:1e:74:ea:48:3e:f9:e2:cb:ef:67:11:99:
c1:f1:32:07:07:a8:f7:4f:01:c1:27:ac:e4:7e:c4:c6:c4:d6:
99:ea:87:24:b3:75:8a:b5:c8:a7:09:b1:79:6d:b8:e6:a3:47:
10:49:7a:5a:8b:2e:7b:29:8c:81:4b:0c:cc:3d:68:d0:ec:ca:
ca:7b:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:05 2024 by rpki-client on console-ams.rpki-client.org