Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/UUNaXQn2DXYo91ROJecD6XDaI0g.roa
File: UUNaXQn2DXYo91ROJecD6XDaI0g.roa (raw, json)
Hash identifier: 9e0DpfErZG5RsZ8ySEkRVrjnN+DhNgO9jwM02C2BfWU=
Subject key identifier: 51:43:5A:5D:09:F6:0D:76:28:F7:54:4E:25:E7:03:E9:70:DA:23:48
Certificate issuer: /CN=a609c33af20168169031255daee2d83d2662c990
Certificate serial: 018570D4F8E8AF53A2DEE8EEEEC215E1949F
Authority key identifier: A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/UUNaXQn2DXYo91ROJecD6XDaI0g.roa
Signing time: Mon 02 Jan 2023 04:54:43 +0000
ROA not before: Mon 02 Jan 2023 04:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 95.128.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d4:f8:e8:af:53:a2:de:e8:ee:ee:c2:15:e1:94:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609c33af20168169031255daee2d83d2662c990
Validity
Not Before: Jan 2 04:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51435a5d09f60d7628f7544e25e703e970da2348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:3b:51:eb:c7:6d:19:3a:7f:68:32:cc:a7:
f0:df:17:c8:68:c2:d2:43:7f:87:27:3b:fb:c7:5c:
b7:62:c3:de:70:ea:9c:6f:98:da:a4:16:40:8a:17:
66:a9:b8:00:f6:9e:42:e1:c6:21:93:ed:47:d7:07:
90:78:4b:c0:59:38:a1:e9:b0:ce:0f:da:12:5b:2b:
56:ac:c0:d9:0a:24:5e:cb:6d:19:13:92:99:ff:80:
6e:a6:98:43:54:2d:c2:40:cb:0b:f5:48:13:9c:9e:
8a:c5:ca:54:20:f9:3c:c4:5e:66:ba:35:7b:01:f8:
59:6e:dd:ca:f3:07:95:46:7b:a7:bb:2b:c9:dc:64:
e2:f4:30:0e:8e:17:82:a7:d4:3e:69:41:dc:1e:50:
2d:d1:48:31:96:0e:db:cb:78:11:25:39:70:eb:22:
2f:70:4e:13:90:9b:42:e2:b1:f1:89:64:00:91:7b:
18:6f:d8:e3:4d:0c:0e:e7:67:46:21:cc:d8:be:3b:
b2:cf:bd:4c:03:af:f3:3a:91:6e:9f:26:24:73:ae:
4c:c0:05:87:08:89:7f:ac:4e:bd:48:4b:6b:87:08:
08:87:80:2e:68:d9:e8:df:cb:7d:98:62:37:1d:bd:
ea:2d:5a:ef:6a:56:a9:0f:fd:87:40:77:fa:03:d8:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:5A:5D:09:F6:0D:76:28:F7:54:4E:25:E7:03:E9:70:DA:23:48
X509v3 Authority Key Identifier:
keyid:A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/UUNaXQn2DXYo91ROJecD6XDaI0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/pgnDOvIBaBaQMSVdruLYPSZiyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.159.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4c:38:8c:18:d6:01:e9:15:e9:a9:06:6f:b4:56:ba:aa:19:
61:3b:8f:d6:ca:c7:fe:41:c4:ca:5e:89:a2:71:84:a6:65:61:
7a:64:bb:fb:fe:db:61:3d:ae:20:f5:95:16:48:73:c9:ec:7c:
ed:c6:64:51:1b:d9:32:28:dc:e7:fb:d0:c6:d4:39:68:a5:52:
56:0f:84:e4:6e:8a:08:d9:4f:e5:96:46:96:3d:c6:ed:cb:45:
0d:8e:00:95:31:80:f7:4a:fa:08:30:c5:bb:2c:91:1e:2b:69:
a5:19:c1:69:45:56:3d:38:8e:6e:ed:36:3d:65:a5:46:37:ef:
d0:f0:f5:2b:58:7d:3e:fe:b1:5b:5f:00:6d:1a:c0:c6:24:d8:
9e:6b:f1:8a:ea:6b:9c:ce:c5:fd:5d:49:f1:e8:d6:c9:fa:44:
10:b8:5b:8a:55:06:b2:e6:bd:c8:97:55:85:31:ad:90:a3:49:
f4:64:fc:f8:80:ce:ea:f3:69:79:f8:b5:08:f5:14:03:18:91:
20:a4:ce:05:f5:25:de:ef:86:b5:d3:f4:fe:a1:a2:69:9d:e4:
40:e2:48:ca:90:d8:e6:10:7d:0c:ca:e0:0a:db:b4:4b:6f:0c:
25:66:52:9c:88:b4:dd:16:ef:f2:6e:c9:d2:85:b7:f0:bd:94:
62:9a:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:41 2024 by rpki-client on console-ams.rpki-client.org