Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/nOnOHy2aiJpOR9Fq0LK7XiVbB_o.roa
File: nOnOHy2aiJpOR9Fq0LK7XiVbB_o.roa (raw, json)
Hash identifier: Pg5drG2N14lcYv+BBMd+tSlQTV5MJR+WS6Ujn6FTE+I=
Subject key identifier: 9C:E9:CE:1F:2D:9A:88:9A:4E:47:D1:6A:D0:B2:BB:5E:25:5B:07:FA
Certificate issuer: /CN=b98b79836afe75370a680bb136c1b99bc88d4519
Certificate serial: 01856F4B6B141A3BB668073899A25F7CC25F
Authority key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/nOnOHy2aiJpOR9Fq0LK7XiVbB_o.roa
Signing time: Sun 01 Jan 2023 21:44:51 +0000
ROA not before: Sun 01 Jan 2023 21:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 195.191.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:6b:14:1a:3b:b6:68:07:38:99:a2:5f:7c:c2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Validity
Not Before: Jan 1 21:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce9ce1f2d9a889a4e47d16ad0b2bb5e255b07fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:e1:93:8a:91:6e:6e:25:6d:6c:30:8a:50:
c0:7c:85:33:46:cb:91:06:0d:c2:c9:99:2f:63:30:
b3:0d:80:8c:a3:ca:0e:65:b4:b7:c1:7e:80:a7:c6:
cf:02:59:a6:d8:ef:8c:35:68:75:5a:41:c7:38:06:
62:dd:8a:91:15:8f:98:59:4b:16:56:e3:24:dc:c2:
c2:c8:46:e1:54:19:1f:7f:b7:cc:83:80:02:04:f9:
1d:64:72:86:4c:0c:61:c9:83:d8:51:75:2d:8a:4f:
e3:80:bf:7e:cb:e4:54:e0:48:3e:d1:38:00:f0:64:
e7:09:09:8e:26:33:a3:28:b1:87:47:e2:99:f8:57:
fc:99:bd:46:3d:c5:1a:f2:5e:7a:d9:d3:0b:15:bc:
a5:e8:fb:d5:8a:54:42:c1:a9:ff:a4:9f:15:28:20:
c4:36:37:cf:bf:8e:83:26:5b:2b:c3:96:6b:1f:98:
12:87:a2:5f:45:d3:2f:da:ec:f9:9e:9e:75:f0:e6:
60:f0:09:39:1c:58:bc:b1:d1:11:88:2b:65:b5:b1:
bc:f3:5b:e9:3e:2c:bb:cb:f9:5d:f9:99:f9:0c:dc:
69:96:86:1f:de:0b:ee:09:1f:db:d0:00:48:89:27:
ed:c7:04:b6:16:d0:f1:01:e6:b2:54:23:fd:42:d0:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:CE:1F:2D:9A:88:9A:4E:47:D1:6A:D0:B2:BB:5E:25:5B:07:FA
X509v3 Authority Key Identifier:
keyid:B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/nOnOHy2aiJpOR9Fq0LK7XiVbB_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.231.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2b:23:fb:75:34:00:79:6a:3f:7d:ed:2b:48:51:c8:44:16:
c3:0c:99:b1:d2:a6:3a:bf:9d:9b:d5:52:13:b5:58:44:ed:4f:
fb:ee:5b:48:a4:7e:a6:f3:83:63:3d:4b:01:fd:ea:f4:79:03:
c6:5d:7f:5b:80:9d:9f:43:41:44:d4:7e:1d:d7:32:bb:9c:5e:
fc:ee:9a:6e:52:95:e5:5a:ca:dc:2b:fd:63:d6:b3:31:6b:91:
3f:9c:f7:ce:5d:92:08:63:a1:02:92:14:56:16:97:ba:0d:f6:
c1:a7:2e:14:ac:78:8c:30:c3:64:71:9c:1e:88:16:db:d0:3c:
de:38:5a:5f:96:21:94:92:9d:52:7b:35:e9:45:71:b2:df:48:
3a:80:c6:14:a9:4b:1d:4b:02:1c:5b:56:75:ff:56:d1:4e:34:
20:a6:fc:0f:eb:cb:93:fb:6f:64:5b:db:b6:ca:f8:56:61:4c:
c6:27:b7:c9:f2:d4:35:19:99:15:6b:35:7e:13:3f:70:85:76:
59:17:38:79:60:da:9f:19:63:69:5f:4d:a9:4b:70:d4:d5:6b:
c2:b4:ae:56:8f:22:b5:74:78:c9:26:f1:0c:85:e3:78:c4:a0:
cd:71:c2:e5:40:1c:f5:e6:59:7d:f6:8f:92:4d:d0:ca:34:db:
12:c9:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:05 2024 by rpki-client on console-ams.rpki-client.org