Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/0ptmTNLI8NskM7NolJSncum_jvc.roa
File: 0ptmTNLI8NskM7NolJSncum_jvc.roa (raw, json)
Hash identifier: Tl9pBy6O6HE8MOZiszpDzE8l6tQ/8KRh5OmiIK6vkm0=
Subject key identifier: D2:9B:66:4C:D2:C8:F0:DB:24:33:B3:68:94:94:A7:72:E9:BF:8E:F7
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 01856E2664D32E1512ED5503D7FEDB89E209
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/0ptmTNLI8NskM7NolJSncum_jvc.roa
Signing time: Sun 01 Jan 2023 16:24:47 +0000
ROA not before: Sun 01 Jan 2023 16:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24875
IP address blocks: 195.238.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:64:d3:2e:15:12:ed:55:03:d7:fe:db:89:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Jan 1 16:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d29b664cd2c8f0db2433b3689494a772e9bf8ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:27:43:b1:fe:e5:f8:f4:9b:a4:2a:43:d2:
49:aa:66:6c:12:27:ce:ec:48:07:fa:d2:59:0f:f4:
49:b8:12:08:58:34:77:6c:c7:32:37:e5:14:cc:8d:
3e:00:01:a2:59:77:67:66:71:2a:58:75:eb:84:26:
47:fc:d6:9f:f4:28:b1:68:9e:19:44:e7:76:4c:91:
79:04:16:29:a5:56:19:61:0c:e1:11:20:b8:30:63:
b7:b2:8f:f1:df:1c:c7:e4:19:42:b4:59:c0:c7:a0:
36:a1:fa:26:23:a2:f2:0b:43:67:0c:e7:29:44:11:
fd:29:7d:0f:8a:8e:04:0f:00:d2:d0:90:98:24:bf:
bb:fb:2c:2e:78:e2:9c:f3:6d:59:3d:8e:15:c6:0f:
3c:29:43:8b:1a:bd:10:f7:83:b9:91:a8:27:09:f5:
a2:97:77:0e:bb:45:a1:96:45:fe:d2:b6:94:d7:2c:
bc:92:58:71:35:9d:7f:c5:3d:b3:09:5a:0c:b9:55:
02:8d:bc:3d:17:03:64:77:a0:68:82:10:05:4d:e4:
a4:d5:aa:66:ce:0b:be:5b:66:5e:3e:6b:b7:ac:58:
2a:2f:c6:2a:f1:7c:00:04:fc:1c:4c:bd:4e:5f:fc:
cf:a7:db:5d:c2:8e:16:dd:48:df:3b:b5:91:99:26:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:66:4C:D2:C8:F0:DB:24:33:B3:68:94:94:A7:72:E9:BF:8E:F7
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/0ptmTNLI8NskM7NolJSncum_jvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.121.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f1:ac:20:2d:de:be:a0:96:8e:03:bd:59:35:98:a9:b8:39:
7a:24:03:66:28:3a:fd:69:c6:3d:88:ce:65:1e:be:e5:a7:70:
0c:b3:70:66:79:1d:21:24:41:5f:46:80:38:52:63:83:3f:f3:
e9:f8:e7:0b:07:4c:12:23:a1:e8:83:3a:bc:a8:84:3a:bf:5e:
e0:ee:e9:16:b2:b7:ef:b2:a9:ec:3d:4d:a1:a8:99:f3:be:71:
0e:d8:86:32:fb:e4:91:cc:ce:5e:33:ca:89:d0:14:e0:6b:b2:
e6:42:d5:f2:fd:9f:56:ac:ac:23:75:f9:46:80:17:1a:ac:e2:
58:32:c0:db:b0:1c:1d:10:74:06:82:d0:40:6d:cf:cf:4c:4b:
3c:12:73:a6:46:5f:ad:bb:0e:5b:3b:95:42:5d:79:62:ed:a9:
b7:73:64:d2:1e:5d:b5:26:e0:79:f1:95:bf:e9:20:0c:d6:8f:
6c:e7:9e:8c:f4:7b:b7:9c:99:43:0a:a8:b1:52:47:1b:a0:88:
4d:95:af:f4:e5:be:b5:8e:bc:48:50:4b:4c:2a:4e:e6:8c:2f:
e8:45:16:1e:c3:f1:2c:d4:dd:0c:45:41:ae:34:43:da:aa:bd:
a4:be:3c:d6:df:6e:51:57:d5:13:90:23:47:ee:fc:57:09:78:
44:56:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org