Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/5fHSp32Uu1MzM6gPjVE8An2-hfs.roa
File: 5fHSp32Uu1MzM6gPjVE8An2-hfs.roa (raw, json)
Hash identifier: HC6/riMuRh/SvpogJsDa7CzZLcbV0Acpjz58CGUeBgA=
Subject key identifier: E5:F1:D2:A7:7D:94:BB:53:33:33:A8:0F:8D:51:3C:02:7D:BE:85:FB
Certificate issuer: /CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Certificate serial: 06ADBB31
Authority key identifier: EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/5fHSp32Uu1MzM6gPjVE8An2-hfs.roa
Signing time: Sat 01 Jan 2022 03:56:13 +0000
ROA not before: Sat 01 Jan 2022 03:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211557
IP address blocks: 195.85.201.0/24 maxlen: 24
195.85.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112048945 (0x6adbb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Validity
Not Before: Jan 1 03:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5f1d2a77d94bb533333a80f8d513c027dbe85fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:66:ac:90:38:f5:17:f5:2e:91:61:f2:b2:
8e:fc:0c:a1:3a:c8:b9:d1:ed:7e:7f:44:2c:27:e7:
a4:00:d6:eb:fa:bd:8d:6d:6a:db:7e:d8:ac:bf:3a:
0e:eb:23:2e:ae:c5:61:8f:ef:6d:25:f0:57:5b:c8:
e3:80:0d:01:df:ed:bc:8f:84:b3:8d:29:c8:5d:b6:
9a:f4:cd:50:bc:6f:84:97:d7:1c:1b:4c:97:ac:ca:
3f:4a:fc:55:a2:94:17:9d:34:d1:41:9e:e7:37:a3:
c3:b4:74:b9:34:82:50:1b:36:e2:4f:23:b2:09:a6:
39:9f:4c:98:42:b3:db:75:fd:e1:f6:28:4a:91:97:
41:1a:31:ed:43:6a:8b:7a:20:75:ee:40:40:70:f2:
5c:ee:8b:f8:08:ed:d1:97:5c:a2:ea:dd:7f:04:b1:
cf:3a:b2:8b:62:85:41:23:f7:42:58:d6:1e:25:7a:
72:c5:f1:c9:e0:09:ae:08:f1:b4:ee:02:f7:dd:8f:
e7:fe:b4:24:c6:2d:b9:47:d3:a5:d3:9d:c4:74:58:
34:81:1a:2b:22:14:ef:2e:2d:99:e5:d7:92:dd:87:
64:17:6f:2c:f9:b4:7a:24:ac:c0:c4:97:94:74:65:
23:bc:e2:22:26:d9:06:3e:55:6b:c6:0e:fd:37:4a:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F1:D2:A7:7D:94:BB:53:33:33:A8:0F:8D:51:3C:02:7D:BE:85:FB
X509v3 Authority Key Identifier:
keyid:EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/5fHSp32Uu1MzM6gPjVE8An2-hfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/6s663cAhDsbySQXR-c68s-DAEsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.201.0/24
195.85.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8e:7d:f1:8c:be:7f:55:d1:62:7a:b0:6d:4e:ef:d3:25:5d:
44:c8:15:14:e5:98:d1:f3:44:9c:18:4f:d7:af:11:99:dc:1e:
94:bf:85:e7:8e:a5:d4:20:4e:b8:1b:d8:63:6f:62:ec:33:24:
92:33:15:59:c9:89:28:5d:46:bf:97:17:b0:7b:37:ec:1b:0a:
a2:13:b4:61:ad:f6:b4:df:14:91:dc:b2:b0:ba:8b:a1:dd:6a:
81:58:b9:bb:e8:8f:34:b2:cd:fb:62:66:e2:19:1b:a3:09:aa:
dd:9a:fe:af:20:55:7e:f0:0f:ed:5a:a1:0d:ba:b9:52:91:e6:
59:e3:b2:d3:c8:b4:29:8c:5c:fd:53:82:91:90:77:5e:7f:9c:
f2:aa:03:a5:ce:94:de:6d:94:fe:01:db:b3:ad:af:7e:e9:02:
25:eb:fc:25:de:df:e6:5a:c7:18:7a:8a:64:4d:1c:95:ca:37:
68:f6:9f:f0:11:dc:bd:5d:c6:8b:ad:ee:c8:33:13:d0:01:11:
ad:43:95:df:09:80:0b:3d:5b:9a:8e:49:a7:60:fa:62:83:08:
c6:40:b7:b8:00:87:bc:4a:79:d5:ee:61:a6:63:ab:19:43:76:
5c:24:6a:6e:f7:38:b7:71:c7:e0:19:00:08:9d:b6:53:d0:95:
d0:9d:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org