Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/PqmIQHXeO5-ojeNlN_Pxy1a1p2M.roa
File: PqmIQHXeO5-ojeNlN_Pxy1a1p2M.roa (raw, json)
Hash identifier: bz7Dqd5CmhQtDLf7zIMSokeqYHQqQaCAy7jMeeglsS8=
Subject key identifier: 3E:A9:88:40:75:DE:3B:9F:A8:8D:E3:65:37:F3:F1:CB:56:B5:A7:63
Certificate issuer: /CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Certificate serial: 0182B6B1B49C2DA8A882CC7C014B7FD01229
Authority key identifier: EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/PqmIQHXeO5-ojeNlN_Pxy1a1p2M.roa
Signing time: Fri 19 Aug 2022 15:21:15 +0000
ROA not before: Fri 19 Aug 2022 15:21:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 195.85.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:b1:b4:9c:2d:a8:a8:82:cc:7c:01:4b:7f:d0:12:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Validity
Not Before: Aug 19 15:21:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ea9884075de3b9fa88de36537f3f1cb56b5a763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:29:32:6a:8e:2b:87:c1:bb:d0:b5:a3:3d:
de:a2:4e:2a:c8:48:6f:5e:3b:fc:29:17:62:c4:0c:
23:72:27:99:d4:6a:f1:fb:69:db:35:83:9d:d0:08:
01:94:cd:0e:44:26:8e:0c:f7:15:ca:b4:6a:70:6b:
00:59:6d:9a:ff:24:33:d0:dd:bb:b3:6b:0f:4f:12:
75:b4:ac:35:78:f0:bf:20:75:3b:ea:54:e5:90:5c:
8f:00:c4:d8:59:15:c4:b4:42:7f:70:92:aa:8a:4b:
34:8d:63:56:ab:b2:fd:27:1d:ef:ba:68:26:e2:92:
bb:47:dd:7c:3c:af:55:38:bc:f1:08:ae:7d:e3:71:
af:39:2e:18:e0:72:a6:8a:bb:2a:4b:89:5a:8f:0a:
da:f2:f5:d3:0e:60:98:1c:95:29:9e:b3:1c:da:a9:
84:b9:4f:78:57:7f:9b:0d:23:f8:86:83:c4:d9:61:
dd:07:15:1c:bb:4d:fc:b2:5d:39:18:76:0b:bf:56:
8d:ec:19:a2:31:53:6d:25:2d:a3:60:fd:15:be:29:
f8:40:eb:a2:69:87:43:aa:c5:01:26:c4:7b:f3:37:
71:99:e0:0c:21:d9:4c:a0:7d:55:27:c6:f6:7a:1d:
41:75:d6:b5:16:e7:a8:1f:0f:31:4c:10:04:d2:6b:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A9:88:40:75:DE:3B:9F:A8:8D:E3:65:37:F3:F1:CB:56:B5:A7:63
X509v3 Authority Key Identifier:
keyid:EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/PqmIQHXeO5-ojeNlN_Pxy1a1p2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/6s663cAhDsbySQXR-c68s-DAEsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e3:46:25:1a:e6:6c:54:c9:b2:c6:37:a9:71:ec:29:6f:0a:
cc:e5:36:9f:ee:86:91:02:6e:8c:1e:8c:cd:97:db:e1:31:56:
18:69:25:1a:19:da:20:69:4e:d2:a3:a2:27:fa:68:fe:3c:6a:
2f:31:7b:bc:42:c7:3b:c5:ce:dd:41:a7:16:9b:5c:3b:ab:35:
cb:5b:f0:2e:69:2f:47:33:7e:b8:d3:d6:ae:c6:30:ad:bb:f3:
a7:b2:5a:d8:e0:7e:9f:e8:38:d4:52:59:f5:45:da:19:38:07:
94:59:af:ba:85:b3:9f:f2:52:f2:e3:48:83:81:36:87:57:60:
77:98:fe:ac:10:11:63:aa:56:36:5f:5b:05:d1:02:23:e4:66:
f9:22:4d:14:f2:29:2d:b0:a1:23:93:67:e9:57:d7:c0:94:c0:
51:ab:43:38:0c:2c:64:e3:d6:62:55:72:26:08:99:b8:f8:8a:
b5:82:7d:1a:0d:57:fc:bf:24:70:39:60:bd:ba:cd:ea:eb:b3:
a9:09:30:75:8c:bd:49:39:e4:8e:41:9b:13:27:e0:0b:63:91:
2a:d9:e7:4d:54:6c:47:60:88:4a:25:72:5b:39:b8:11:81:51:
14:9c:51:bd:b0:1d:13:04:ca:ac:33:8d:c2:a0:1c:63:b6:df:
72:d5:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:51 2023 by rpki-client on console-ams.rpki-client.org