Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/B-VdnWjNGj9q3MgbzCiZmAaqVKo.roa
File: B-VdnWjNGj9q3MgbzCiZmAaqVKo.roa (raw, json)
Hash identifier: xbVyf4wHkm6BPpsClguJQJVdf5Bqbq7SCrEIGSbPAIY=
Subject key identifier: 07:E5:5D:9D:68:CD:1A:3F:6A:DC:C8:1B:CC:28:99:98:06:AA:54:AA
Certificate issuer: /CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Certificate serial: 01856EAFA4410FA50F280AE204660B06C79C
Authority key identifier: 94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/B-VdnWjNGj9q3MgbzCiZmAaqVKo.roa
Signing time: Sun 01 Jan 2023 18:54:42 +0000
ROA not before: Sun 01 Jan 2023 18:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202797
IP address blocks: 195.114.14.0/23 maxlen: 24
195.114.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:a4:41:0f:a5:0f:28:0a:e2:04:66:0b:06:c7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Validity
Not Before: Jan 1 18:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07e55d9d68cd1a3f6adcc81bcc28999806aa54aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:df:31:58:29:bd:1f:e9:52:4b:5d:e3:f9:
e0:0e:fb:e7:0c:06:e6:ca:af:c0:fb:18:7d:74:7a:
71:83:50:a1:00:37:9b:63:fb:48:65:a2:2e:2a:f5:
5d:e3:ec:59:0c:83:88:f4:6c:91:aa:53:b2:38:a2:
f5:dd:fb:bd:fc:7a:b1:61:6f:bf:44:d0:cf:6f:1e:
f2:b4:92:14:28:6c:64:e1:1a:b9:bb:7f:a7:11:82:
02:e9:82:55:5c:da:a2:1e:32:14:a1:f1:d3:85:19:
19:76:c4:5c:78:d5:1d:0f:7a:fb:2f:1a:20:81:67:
ed:7c:43:69:f6:c1:27:08:61:92:93:79:2a:45:2c:
ad:c5:c6:69:45:12:87:d1:1f:4e:26:dd:e6:a5:e5:
c6:14:6c:c4:f3:3c:92:dc:32:e5:da:c7:ee:b1:a4:
bd:f9:6e:4d:8c:14:cd:1d:8d:e6:9d:5b:ed:95:16:
11:af:88:12:6e:91:68:8c:e7:85:59:be:57:b8:68:
db:06:72:ac:8b:a0:e6:f3:95:36:4c:64:e9:fe:79:
10:22:ed:6a:4d:4d:16:65:db:c5:e8:7e:75:f2:30:
95:7d:32:03:ed:9d:5d:7d:1a:c2:94:72:4d:46:b8:
b9:98:11:b5:97:b0:e5:b5:15:e7:c1:79:ab:df:86:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E5:5D:9D:68:CD:1A:3F:6A:DC:C8:1B:CC:28:99:98:06:AA:54:AA
X509v3 Authority Key Identifier:
keyid:94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/B-VdnWjNGj9q3MgbzCiZmAaqVKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/lGjkm7lTCtsIRMOGDdfvXNjkofg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.14.0/23
195.114.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:1c:99:75:2c:45:6a:7f:a8:2d:1f:bc:e0:c6:0a:45:c0:ab:
2f:60:09:63:1d:91:db:40:f0:86:6d:f1:ef:93:44:f8:07:6f:
ad:15:9e:1f:33:21:1c:50:11:ea:88:46:f2:f4:cf:cf:78:b2:
35:a1:4f:e6:0f:de:d7:a5:7b:b4:de:ff:f4:ee:3f:b4:2e:74:
c7:90:3a:58:ee:62:44:e6:54:2a:60:fa:8b:94:13:4f:15:2c:
d7:67:28:a8:a9:f0:b0:34:26:5a:83:f0:de:94:3a:3d:32:d0:
f5:1d:44:ae:78:9e:0c:d7:e5:cd:d0:ab:3d:3b:f1:33:0c:d5:
e8:2c:a4:ff:3b:b4:96:50:1f:f7:ea:32:db:4f:cf:d0:b0:e4:
f7:64:7a:25:f7:e8:cc:eb:88:64:9b:a1:b2:24:f7:d1:92:43:
0b:ba:16:68:e1:11:3a:13:82:36:03:54:8a:0b:7c:66:b6:50:
86:eb:c5:f9:ed:a8:5e:66:d8:f6:f4:ef:91:56:1c:26:55:39:
18:04:04:b8:df:44:4b:81:15:7d:95:be:93:95:33:16:8d:73:
04:5e:fe:b0:88:47:87:62:2e:27:1c:21:34:a6:db:78:23:7a:
77:38:52:35:14:60:7d:e5:a8:66:ac:3c:f4:5d:a9:31:44:c6:
f0:62:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org