Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/8Jahll-N-Vb36g6iEf115J9k5X4.roa
File: 8Jahll-N-Vb36g6iEf115J9k5X4.roa (raw, json)
Hash identifier: C/JeR3Xlt2oTf8yk7Lvjqwlfv8okJfFi5POMmIVAcYY=
Subject key identifier: F0:96:A1:96:5F:8D:F9:56:F7:EA:0E:A2:11:FD:75:E4:9F:64:E5:7E
Certificate issuer: /CN=8c3d7d885b9fcf06c88f0fe2af10e3ae97ff5b6e
Certificate serial: 018663233736B3823A0C283BB0E903CA6554
Authority key identifier: 8C:3D:7D:88:5B:9F:CF:06:C8:8F:0F:E2:AF:10:E3:AE:97:FF:5B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD19iFufzwbIjw_irxDjrpf_W24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/8Jahll-N-Vb36g6iEf115J9k5X4.roa
Signing time: Sat 18 Feb 2023 06:08:17 +0000
ROA not before: Sat 18 Feb 2023 06:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 195.225.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:23:37:36:b3:82:3a:0c:28:3b:b0:e9:03:ca:65:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3d7d885b9fcf06c88f0fe2af10e3ae97ff5b6e
Validity
Not Before: Feb 18 06:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f096a1965f8df956f7ea0ea211fd75e49f64e57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:ea:45:07:4c:4e:d6:61:4d:79:cd:fb:29:
74:75:78:80:0f:d5:a8:3f:d5:f9:eb:ca:e6:eb:08:
21:41:21:ad:c1:70:eb:dd:e4:39:18:a7:c6:e6:7e:
a6:2a:be:27:61:c7:ad:94:78:ef:b3:ef:e0:15:30:
49:28:e3:7b:bb:bb:2c:2c:78:a9:d4:44:6b:f7:f1:
20:46:d6:6c:8c:e1:37:a7:7a:f9:96:f4:0b:3e:0a:
61:94:5c:6b:e7:0a:fe:10:46:39:6a:e5:7a:e1:44:
7c:56:a5:ac:59:26:b9:01:f0:54:cc:a1:40:02:df:
3f:a0:b1:b8:56:d0:06:bd:6d:27:8e:28:22:d0:39:
63:5d:21:ac:0a:e2:10:88:3f:3b:5a:c8:77:49:37:
30:af:13:07:d1:db:74:b6:99:68:fb:1d:66:e8:ce:
1a:d3:89:aa:5c:0e:e5:46:dc:e8:af:85:ee:83:46:
54:a1:6d:27:7e:7c:06:c0:62:e3:ca:e8:38:88:03:
81:9e:78:c4:3b:00:37:cf:e8:27:08:c4:32:fd:28:
b6:ff:08:3a:16:2a:96:1e:1b:94:63:a2:b5:dd:db:
70:7f:46:31:33:38:33:0e:e6:18:8e:63:e3:22:fb:
fd:7b:17:30:c4:42:35:91:2b:d4:e0:60:79:14:be:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:96:A1:96:5F:8D:F9:56:F7:EA:0E:A2:11:FD:75:E4:9F:64:E5:7E
X509v3 Authority Key Identifier:
keyid:8C:3D:7D:88:5B:9F:CF:06:C8:8F:0F:E2:AF:10:E3:AE:97:FF:5B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD19iFufzwbIjw_irxDjrpf_W24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/8Jahll-N-Vb36g6iEf115J9k5X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a92-9762-4450-83e7-e0cca5e20f4f/1/jD19iFufzwbIjw_irxDjrpf_W24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
48:97:a5:00:c2:71:eb:02:cc:7e:87:ac:aa:01:2c:a2:c3:a8:
57:b8:e3:b8:5b:cb:6b:62:1d:72:bc:85:33:49:21:12:39:fb:
b1:09:43:81:73:96:cf:b3:fd:a1:e5:71:d4:0a:96:69:91:ed:
16:fb:62:d5:6c:de:fe:2b:f1:57:33:41:76:63:fc:33:f9:02:
34:23:1c:b9:4b:08:e9:cb:02:67:05:c2:a9:de:d8:cf:08:f5:
6e:8c:88:e6:b9:40:53:68:69:1e:69:23:ba:01:29:1d:81:0c:
94:75:70:18:6b:fc:69:d2:d7:d9:c7:86:4c:7d:76:b7:0a:77:
52:12:83:9b:75:72:4b:70:52:cf:05:e7:39:5e:02:62:57:3a:
c4:78:1b:d5:f3:8f:56:ad:ca:47:83:ea:9e:b8:f9:4d:63:f6:
74:3b:00:51:b2:97:1b:81:72:4d:df:8b:9b:29:a7:fb:d5:47:
5c:d4:1c:d4:7d:e1:04:50:a3:b3:42:34:ac:92:bc:23:ed:2d:
a5:c6:4a:b0:aa:d5:9b:0d:63:27:6d:cb:ae:38:f3:64:51:ab:
5a:77:fd:6f:e1:3a:fc:af:66:41:7f:0d:c2:6a:41:ce:5a:3b:
2d:1e:a9:76:8c:c2:0d:ac:0d:8a:71:5b:9f:26:dd:fe:d3:00:
81:0b:4b:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZjIzc2s4I6DCg7sOkDymVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2Q3ZDg4NWI5ZmNmMDZjODhmMGZlMmFmMTBlM2FlOTdm
ZjViNmUwHhcNMjMwMjE4MDYwODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDk2YTE5NjVmOGRmOTU2ZjdlYTBlYTIxMWZkNzVlNDlmNjRlNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEPqRQdMTtZhTXnN+yl0dXiAD9Wo
P9X568rm6wghQSGtwXDr3eQ5GKfG5n6mKr4nYcetlHjvs+/gFTBJKON7u7ssLHip
1ERr9/EgRtZsjOE3p3r5lvQLPgphlFxr5wr+EEY5auV64UR8VqWsWSa5AfBUzKFA
At8/oLG4VtAGvW0njigi0DljXSGsCuIQiD87Wsh3STcwrxMH0dt0tplo+x1m6M4a
04mqXA7lRtzor4Xug0ZUoW0nfnwGwGLjyug4iAOBnnjEOwA3z+gnCMQy/Si2/wg6
FiqWHhuUY6K13dtwf0YxMzgzDuYYjmPjIvv9excwxEI1kSvU4GB5FL4ZIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCWoZZfjflW9+oOohH9deSfZOV+MB8GA1UdIwQY
MBaAFIw9fYhbn88GyI8P4q8Q466X/1tuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakQxOWlGdWZ6d2JJandfaXJ4RGpycGZfVzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhOTItOTc2Mi00NDUwLTgzZTct
ZTBjY2E1ZTIwZjRmLzEvOEphaGxsLU4tVmIzNmc2aUVmMTE1SjlrNVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YzJhOTItOTc2Mi00NDUwLTgzZTctZTBjY2E1ZTIwZjRm
LzEvakQxOWlGdWZ6d2JJandfaXJ4RGpycGZfVzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+FiMA0G
CSqGSIb3DQEBCwUAA4IBAQBIl6UAwnHrAsx+h6yqASyiw6hXuOO4W8trYh1yvIUz
SSESOfuxCUOBc5bPs/2h5XHUCpZpke0W+2LVbN7+K/FXM0F2Y/wz+QI0Ixy5Swjp
ywJnBcKp3tjPCPVujIjmuUBTaGkeaSO6ASkdgQyUdXAYa/xp0tfZx4ZMfXa3CndS
EoObdXJLcFLPBec5XgJiVzrEeBvV849WrcpHg+qeuPlNY/Z0OwBRspcbgXJN34ub
Kaf71Udc1BzUfeEEUKOzQjSskrwj7S2lxkqwqtWbDWMnbcuuOPNkUatad/1v4Tr8
r2ZBfw3CakHOWjstHql2jMINrA2KcVufJt3+0wCBC0s2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org