Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/CGH20nr4TNsr51DpqFkH-EIKluI.roa
File: CGH20nr4TNsr51DpqFkH-EIKluI.roa (raw, json)
Hash identifier: OVWjqoOzxm+2S5F9y+5zt0xMUnondXAkA8Lc2XHzNxo=
Subject key identifier: 08:61:F6:D2:7A:F8:4C:DB:2B:E7:50:E9:A8:59:07:F8:42:0A:96:E2
Certificate issuer: /CN=a609c33af20168169031255daee2d83d2662c990
Certificate serial: 35D51A2C
Authority key identifier: A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/CGH20nr4TNsr51DpqFkH-EIKluI.roa
Signing time: Sat 01 Jan 2022 11:02:12 +0000
ROA not before: Sat 01 Jan 2022 11:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12860
IP address blocks: 95.128.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903158316 (0x35d51a2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609c33af20168169031255daee2d83d2662c990
Validity
Not Before: Jan 1 11:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0861f6d27af84cdb2be750e9a85907f8420a96e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:25:72:2d:e4:12:06:e3:c8:74:a7:65:ec:
9e:ac:36:37:66:26:95:aa:bb:e8:c1:84:44:73:61:
99:9f:28:48:e5:08:06:f1:16:7a:85:18:70:f3:1d:
de:b7:0f:b5:7a:df:c8:70:4a:a3:ae:c8:95:5a:05:
a0:24:25:33:7b:1f:0d:6d:9c:14:b0:ce:df:51:2d:
2a:33:4c:05:9e:44:10:a7:03:2c:45:ee:a9:08:4b:
7f:62:2d:dc:15:41:97:fe:f4:2b:b6:ca:32:c2:59:
22:b8:40:8a:25:c8:3d:e9:bd:e1:73:d1:b9:97:8f:
4f:e8:a4:1d:0b:65:bb:bb:ef:fb:02:1b:66:2b:65:
fd:6a:7c:bc:a2:9f:3e:44:96:3f:1c:36:e9:25:30:
61:84:35:be:c2:ef:fa:fb:24:0b:ee:c4:b8:43:cd:
9b:94:73:28:8e:b9:13:4f:37:c6:97:6c:b2:f0:4d:
48:56:dd:49:6f:8f:1e:99:6b:ae:c2:dd:d1:7c:de:
64:26:b3:16:97:3a:dc:da:1a:2f:ac:e1:85:cb:50:
86:3a:9e:4c:e3:b5:41:13:58:1f:84:43:60:37:5b:
af:e7:5f:ef:06:70:2b:11:35:29:c3:c3:a9:1f:42:
c2:56:a4:c1:c7:2c:8f:39:6a:d7:23:a6:3f:f9:9d:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:F6:D2:7A:F8:4C:DB:2B:E7:50:E9:A8:59:07:F8:42:0A:96:E2
X509v3 Authority Key Identifier:
keyid:A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/CGH20nr4TNsr51DpqFkH-EIKluI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/pgnDOvIBaBaQMSVdruLYPSZiyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.159.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f7:dd:9c:b6:36:04:ab:4b:96:27:67:f6:40:cb:78:87:a9:
6f:60:45:79:7b:10:07:07:4c:3e:aa:6f:d3:5e:7b:95:d7:71:
72:23:d0:27:6e:24:23:c0:b2:10:22:8c:07:c4:f7:6f:e0:c2:
44:55:e5:e1:5c:8e:19:77:fb:9e:7e:a7:ec:21:dd:69:5b:9d:
91:4b:42:76:c3:2c:1d:e0:37:88:44:93:fc:ab:0e:b3:72:f9:
41:c6:a5:67:d4:60:f5:6f:e6:b4:2a:8a:64:39:da:fc:09:bb:
5e:01:35:50:4a:94:22:3f:52:3b:b9:c7:38:74:d0:20:0c:b8:
5d:b6:61:e3:e9:00:68:f4:7d:b6:cf:08:83:0e:3e:db:28:12:
ff:29:ae:06:2a:40:12:9e:b5:0e:98:27:bb:1b:9a:3f:46:16:
1a:42:84:be:9a:08:06:31:44:02:eb:c9:7e:ee:85:6f:70:8e:
66:2f:25:11:74:45:a2:61:fb:61:2a:0c:c2:01:a5:ec:4a:03:
79:c2:df:f4:59:9e:68:b6:6b:9a:fb:7e:1f:0c:07:fd:99:66:
82:ad:67:1a:20:ee:a4:48:1e:78:6f:45:83:1b:76:e4:fb:c1:
4c:59:2e:a9:e2:22:0e:0e:13:57:db:13:98:4a:38:cb:3a:5b:
8f:5c:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:32 2024 by rpki-client on console-fra.rpki-client.org