Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/og6ps1HzwFFqkbMQy_yxTX7nBsw.roa
File: og6ps1HzwFFqkbMQy_yxTX7nBsw.roa (raw, json)
Hash identifier: cXx0uJxnO3CxXhe3Z4kTh+YeXtcm0QTFZjvsJAOMYHw=
Subject key identifier: A2:0E:A9:B3:51:F3:C0:51:6A:91:B3:10:CB:FC:B1:4D:7E:E7:06:CC
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 0186B02C545587ADAD700006950772C71434
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/og6ps1HzwFFqkbMQy_yxTX7nBsw.roa
Signing time: Sun 05 Mar 2023 05:09:00 +0000
ROA not before: Sun 05 Mar 2023 05:09:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204548
IP address blocks: 195.238.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b0:2c:54:55:87:ad:ad:70:00:06:95:07:72:c7:14:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Mar 5 05:09:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a20ea9b351f3c0516a91b310cbfcb14d7ee706cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:bf:53:2a:be:b0:92:b1:d1:41:33:2d:67:
07:d9:82:d3:e4:0b:ef:f9:e5:42:a4:fd:0d:18:32:
78:98:56:1c:29:57:a4:87:ce:ae:23:09:7a:e4:38:
ab:de:05:cf:2b:ac:09:d2:c0:0b:df:38:6c:06:ef:
f6:46:96:b1:27:ce:f6:2a:a5:03:7d:6a:b4:79:7a:
4a:ff:0e:1e:03:05:35:f7:5d:5a:72:8f:f4:e9:45:
3e:ac:a8:76:d3:96:6c:9a:72:4d:9c:31:aa:b1:76:
da:39:43:87:25:15:ac:66:2e:64:a0:4b:b3:ce:ae:
9b:a5:a5:f1:a5:7d:06:02:51:64:91:53:b8:d3:c0:
e5:01:ba:bf:7e:be:74:fd:c4:5c:3f:20:fe:c1:2e:
e5:fe:a9:e0:89:01:04:6c:b8:b1:5c:0b:74:87:a5:
00:02:3e:ff:7e:25:4e:31:ea:45:71:d5:cb:07:09:
0d:3f:98:49:fd:88:f1:d2:c8:1c:70:b0:07:98:a2:
45:46:3d:33:9b:8a:1f:c9:25:3f:fc:80:96:e5:6c:
96:93:9f:e3:ed:c2:8f:bd:78:69:61:8d:5d:05:5d:
70:f5:ec:5c:38:6b:79:70:26:81:bc:95:a6:ae:ec:
b8:4a:a7:af:f9:23:66:5c:6e:db:1f:7c:be:03:fb:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0E:A9:B3:51:F3:C0:51:6A:91:B3:10:CB:FC:B1:4D:7E:E7:06:CC
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/og6ps1HzwFFqkbMQy_yxTX7nBsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7e:9a:6d:fa:69:55:15:52:a5:cd:7c:c6:3c:14:43:5a:e9:
9b:61:1a:8e:52:e9:81:1a:97:82:34:b9:71:df:87:5b:37:5e:
04:9d:1c:e4:6d:df:ff:5a:f7:93:6a:ae:ea:9f:af:1b:55:91:
2e:6d:ec:42:6a:a9:d4:38:e3:8a:99:f2:66:1d:4a:13:ed:1f:
f8:fb:0c:50:6d:82:6e:9a:5a:79:20:82:f7:ec:12:57:54:ed:
1a:0e:06:75:99:fa:ad:bd:f5:ab:e1:df:af:6c:1d:08:ac:74:
47:96:c3:4a:f7:50:dd:de:94:10:44:29:a8:e3:ac:b9:13:47:
99:98:e9:d3:1f:d0:17:0a:d8:a5:1e:b2:e3:43:bd:3f:38:bb:
0b:8a:7b:a2:63:d7:2f:f7:12:05:6a:35:de:87:1b:d4:65:15:
9d:84:24:af:15:8c:86:ac:35:04:5e:75:84:eb:86:42:8d:b9:
cc:29:76:3e:fd:24:9a:7e:cd:2d:03:dd:09:59:59:ec:3c:8a:
fc:08:55:6f:70:fe:b5:d8:fc:12:b4:dc:cd:cc:df:97:3b:b3:
4d:86:3f:8e:51:36:b0:d2:ae:e7:34:2d:53:7e:b7:a9:37:e7:
cf:41:0b:5a:35:05:f5:17:46:98:8d:e8:85:1a:ad:7e:ed:af:
7a:bb:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org