Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/hFAGQ7Y1N8HVuMMLg6OLqrqiRwc.roa
File: hFAGQ7Y1N8HVuMMLg6OLqrqiRwc.roa (raw, json)
Hash identifier: PW9O3sQR5Z0BqxXAjPt1ZksTdYLr9FDDf7oiCati5iA=
Subject key identifier: 84:50:06:43:B6:35:37:C1:D5:B8:C3:0B:83:A3:8B:AA:BA:A2:47:07
Certificate issuer: /CN=a5915bc8a982fe61eb4aed5418323288329504d7
Certificate serial: 018DE987D034A17B6379DC26BDB476164246
Authority key identifier: A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/hFAGQ7Y1N8HVuMMLg6OLqrqiRwc.roa
Signing time: Tue 27 Feb 2024 07:46:48 +0000
ROA not before: Tue 27 Feb 2024 07:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50102
IP address blocks: 195.225.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:87:d0:34:a1:7b:63:79:dc:26:bd:b4:76:16:42:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5915bc8a982fe61eb4aed5418323288329504d7
Validity
Not Before: Feb 27 07:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84500643b63537c1d5b8c30b83a38baabaa24707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:37:18:aa:13:66:45:01:3a:6c:d5:0a:fb:
5f:16:4a:0e:6f:06:b8:8f:de:e0:66:fa:17:6b:41:
bf:e8:9f:d7:be:b1:35:fe:67:b2:f7:ec:d9:78:30:
f4:4a:96:48:83:25:c1:5e:86:70:d9:94:1c:0e:e9:
bf:4a:48:c7:b1:bf:76:12:8c:75:5c:da:b7:53:7c:
b7:21:f8:b3:09:2b:f0:17:57:96:43:bd:2d:79:df:
8b:9d:59:17:6d:93:ba:a1:e9:68:32:e7:0d:63:26:
15:f8:42:8d:c3:c2:36:b6:c6:c6:4a:be:32:9d:aa:
9b:bb:7c:52:3b:33:97:be:b8:40:68:60:3f:ed:ce:
8e:c5:f0:cb:2d:83:76:df:bb:c1:50:9d:c9:56:91:
da:06:8c:d2:8e:69:bb:73:3f:b8:90:84:c0:ac:b1:
c8:b2:1d:67:4d:68:7a:7e:d2:23:29:0c:3e:dc:ee:
d2:fb:75:a2:e8:f7:2f:6c:9e:01:88:22:42:18:d1:
90:6f:6d:bb:b4:67:75:fe:ab:ea:60:79:b7:82:91:
73:65:e0:21:51:98:2d:19:6b:62:30:b9:2d:98:cc:
d8:d4:9f:b0:26:bb:a5:ef:f7:6e:f7:10:e0:27:09:
9e:df:1d:ee:64:d5:0e:37:e9:4d:b3:2d:77:43:a5:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:06:43:B6:35:37:C1:D5:B8:C3:0B:83:A3:8B:AA:BA:A2:47:07
X509v3 Authority Key Identifier:
keyid:A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/hFAGQ7Y1N8HVuMMLg6OLqrqiRwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.58.0/23
Signature Algorithm: sha256WithRSAEncryption
97:9a:8c:e7:4c:fe:c6:b6:25:30:ae:50:3f:55:f8:9a:fb:66:
d5:ec:df:08:08:1c:06:93:ba:e5:73:04:cd:1b:88:f3:8d:c1:
a6:ca:93:e4:1b:06:67:bf:b3:f8:90:27:d6:ee:e2:b8:34:86:
b8:84:4f:0a:cb:56:fd:f8:6a:24:2b:24:7e:39:0c:4e:e4:09:
14:5e:3e:c4:52:d4:b0:2b:91:a3:76:3a:9d:40:5b:cc:5f:bd:
63:ac:59:4b:30:2c:ac:6f:81:bc:f7:d5:b6:8e:2c:0b:0e:0e:
be:9b:a7:ee:5b:f0:4f:76:09:ed:56:06:f7:5f:49:c7:32:d1:
b0:e9:60:d5:ec:16:a6:de:cb:44:1e:32:13:96:2c:65:97:36:
3f:ee:e1:61:3f:26:44:56:95:f5:fc:b0:f3:a8:1a:f9:29:d3:
41:bf:c4:24:49:2e:95:50:89:65:c3:3a:f9:ba:d0:f7:d6:b1:
c4:d3:2b:29:27:76:4d:73:ba:e7:43:c8:af:01:63:00:d9:d8:
14:3d:45:c6:db:6e:09:e2:88:3c:de:46:53:13:14:08:aa:c8:
cf:28:9f:7f:29:1f:38:6a:a2:7d:7a:78:48:a9:cc:ec:04:96:
84:17:c2:be:b8:22:a4:db:dd:53:ec:4e:f3:ca:3d:e4:19:d7:
43:92:84:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3ph9A0oXtjedwmvbR2FkJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTE1YmM4YTk4MmZlNjFlYjRhZWQ1NDE4MzIzMjg4MzI5
NTA0ZDcwHhcNMjQwMjI3MDc0NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDUwMDY0M2I2MzUzN2MxZDViOGMzMGI4M2EzOGJhYWJhYTI0NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknU3GKoTZkUBOmzVCvtfFkoObwa4
j97gZvoXa0G/6J/XvrE1/mey9+zZeDD0SpZIgyXBXoZw2ZQcDum/SkjHsb92Eox1
XNq3U3y3IfizCSvwF1eWQ70ted+LnVkXbZO6oeloMucNYyYV+EKNw8I2tsbGSr4y
naqbu3xSOzOXvrhAaGA/7c6OxfDLLYN237vBUJ3JVpHaBozSjmm7cz+4kITArLHI
sh1nTWh6ftIjKQw+3O7S+3Wi6PcvbJ4BiCJCGNGQb227tGd1/qvqYHm3gpFzZeAh
UZgtGWtiMLktmMzY1J+wJrul7/du9xDgJwme3x3uZNUON+lNsy13Q6XTgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIRQBkO2NTfB1bjDC4Oji6q6okcHMB8GA1UdIwQY
MBaAFKWRW8ipgv5h60rtVBgyMogylQTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpGYnlLbUNfbUhyU3UxVUdESXlpREtWQk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZTM3ZDMtYzYzMi00OGI4LTliMGIt
NTAxMjA1NGY5ZDI2LzEvaEZBR1E3WTFOOEhWdU1NTGc2T0xxcnFpUndjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84ZTM3ZDMtYzYzMi00OGI4LTliMGItNTAxMjA1NGY5ZDI2
LzEvcFpGYnlLbUNfbUhyU3UxVUdESXlpREtWQk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw+E6MA0G
CSqGSIb3DQEBCwUAA4IBAQCXmoznTP7GtiUwrlA/Vfia+2bV7N8ICBwGk7rlcwTN
G4jzjcGmypPkGwZnv7P4kCfW7uK4NIa4hE8Ky1b9+GokKyR+OQxO5AkUXj7EUtSw
K5GjdjqdQFvMX71jrFlLMCysb4G899W2jiwLDg6+m6fuW/BPdgntVgb3X0nHMtGw
6WDV7Bam3stEHjITlixllzY/7uFhPyZEVpX1/LDzqBr5KdNBv8QkSS6VUIllwzr5
utD31rHE0yspJ3ZNc7rnQ8ivAWMA2dgUPUXG224J4og83kZTExQIqsjPKJ9/KR84
aqJ9enhIqczsBJaEF8K+uCKk291T7E7zyj3kGddDkoTV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-fra.rpki-client.org