Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/O2Xij05Q88NHAvQSzmfIeEI-Ha0.roa
File: O2Xij05Q88NHAvQSzmfIeEI-Ha0.roa (raw, json)
Hash identifier: NG5XihrgDGJEnF05Xg58T9eluWCpOvNSdKG6CzP7XKQ=
Subject key identifier: 3B:65:E2:8F:4E:50:F3:C3:47:02:F4:12:CE:67:C8:78:42:3E:1D:AD
Certificate issuer: /CN=b98b79836afe75370a680bb136c1b99bc88d4519
Certificate serial: 01835B2981770E1827C2A8BCB94AFDA61641
Authority key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/O2Xij05Q88NHAvQSzmfIeEI-Ha0.roa
Signing time: Tue 20 Sep 2022 13:49:50 +0000
ROA not before: Tue 20 Sep 2022 13:49:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 195.191.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:29:81:77:0e:18:27:c2:a8:bc:b9:4a:fd:a6:16:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Validity
Not Before: Sep 20 13:49:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b65e28f4e50f3c34702f412ce67c878423e1dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:31:9b:e5:b3:7b:90:08:1b:f9:f0:5b:18:
4b:43:07:32:61:ff:0b:8b:a2:bf:29:64:4c:e9:b5:
5b:36:6c:58:af:dc:7e:2c:07:f2:5b:ba:d0:61:d2:
01:a2:89:a3:f7:1a:a4:ff:d5:17:9d:cc:4f:da:b8:
13:0a:20:d2:15:72:8a:6d:27:c9:d4:04:e8:87:2f:
9b:15:34:36:a3:dd:39:29:2c:b7:2d:45:96:f0:c4:
96:0b:dc:b9:53:87:c4:94:ca:32:d8:77:01:b7:af:
06:7c:f1:06:90:8a:49:66:fa:83:60:9d:f1:c9:de:
49:aa:a1:e4:5a:df:32:ca:49:2e:b5:33:c6:9b:c3:
d7:d6:3a:c8:9c:91:84:7d:d6:02:80:69:06:f6:69:
59:87:45:6b:c4:7a:fd:0a:d7:22:3a:81:05:2c:e2:
f0:7b:ae:f3:67:60:cd:37:73:2d:1c:f9:26:4e:69:
a5:32:f2:4d:2e:63:9e:9e:c4:8a:4f:19:94:8a:03:
bf:e4:fa:ee:97:39:7d:85:0c:1c:84:a4:e7:55:22:
b9:8b:5d:f8:cf:e0:e2:2b:79:49:75:0f:d7:29:88:
76:1f:1f:c4:42:57:34:ce:3a:b1:a7:da:ce:73:e1:
4b:77:24:4a:4d:11:56:e4:f8:dc:16:0b:c4:ce:c4:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:E2:8F:4E:50:F3:C3:47:02:F4:12:CE:67:C8:78:42:3E:1D:AD
X509v3 Authority Key Identifier:
keyid:B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/O2Xij05Q88NHAvQSzmfIeEI-Ha0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:09:b9:2e:c4:5e:13:6e:1b:26:8c:3f:7a:f3:c2:fc:23:c0:
05:1d:97:78:83:75:d2:e2:1f:16:93:2b:c8:51:3e:35:0b:f5:
b7:2b:dc:6b:2c:9a:72:c8:87:35:fb:76:23:c7:24:a5:dd:99:
35:31:44:37:18:b8:42:1a:63:dd:31:f6:74:9a:1a:4f:5d:ae:
49:0b:32:b0:30:34:48:59:3d:a0:d9:95:59:92:97:9a:ac:7f:
a8:26:74:1f:8f:d2:cf:69:58:c6:84:97:e2:6e:76:15:a7:16:
3d:d0:2a:78:8f:66:c4:99:56:b2:5b:02:0a:3f:b7:c7:85:a3:
ea:66:06:81:34:d6:fd:67:34:03:bd:ee:18:46:d1:23:07:6c:
fc:41:33:aa:25:2a:db:3b:1d:67:98:90:f6:25:c2:a5:e1:c9:
bc:4b:3b:ea:b7:2d:9f:6a:20:51:22:ef:07:e0:19:d7:dd:55:
d4:25:5f:c0:67:5d:95:8e:d0:c5:d0:61:ff:32:3e:f2:32:26:
d8:9b:b3:ab:8c:15:80:bb:d7:7a:f8:e7:17:e6:92:67:e0:6f:
4c:71:9e:ce:b3:5f:43:30:aa:b3:48:ce:91:0a:bc:f6:21:e4:
c1:c6:5e:0e:00:14:6f:ef:c5:96:7f:1e:58:ab:a9:80:a1:52:
00:16:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-fra.rpki-client.org