Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9e9f54-7cff-45b1-b7b0-f1118aa2df4a/1/m5Z96DPj-V8lkhzDiWPJeVkIADo.roa
File: m5Z96DPj-V8lkhzDiWPJeVkIADo.roa (raw, json)
Hash identifier: NsiQFM/ll4ueQO2CFRwzTdExjUw0FO1UZ/YglGPNs6k=
Subject key identifier: 9B:96:7D:E8:33:E3:F9:5F:25:92:1C:C3:89:63:C9:79:59:08:00:3A
Certificate issuer: /CN=57273137f308df5d28fff89cb5bdb71b64b5760a
Certificate serial: 05302538
Authority key identifier: 57:27:31:37:F3:08:DF:5D:28:FF:F8:9C:B5:BD:B7:1B:64:B5:76:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VycxN_MI310o__ictb23G2S1dgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9e9f54-7cff-45b1-b7b0-f1118aa2df4a/1/m5Z96DPj-V8lkhzDiWPJeVkIADo.roa
Signing time: Sat 01 Jan 2022 03:54:02 +0000
ROA not before: Sat 01 Jan 2022 03:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213302
IP address blocks: 195.200.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87041336 (0x5302538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57273137f308df5d28fff89cb5bdb71b64b5760a
Validity
Not Before: Jan 1 03:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b967de833e3f95f25921cc38963c9795908003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:0e:68:a3:7c:eb:09:7a:59:ca:4c:1f:5b:
ce:dc:59:eb:52:3e:cd:a8:ad:da:da:51:d4:af:d2:
5b:80:47:4e:06:e1:17:c7:36:1c:b5:21:f7:09:e2:
09:f9:90:d8:77:f1:37:96:a9:26:a3:e1:b6:fd:8a:
73:63:ce:57:3a:43:9f:82:9c:dc:5c:78:db:1c:27:
1a:2b:ab:e8:b7:fd:49:83:ab:a3:68:c7:b4:32:47:
73:43:07:07:3c:16:62:75:78:a1:92:df:db:cd:f1:
1e:5f:d0:e2:1e:53:b4:60:c6:bd:8c:b9:94:65:cc:
b5:47:1e:35:d5:b0:a3:d6:71:43:fc:58:22:d4:e8:
f8:8b:a2:ab:d0:f1:79:df:d1:96:b7:90:b9:f2:57:
7c:db:e6:07:96:0c:91:31:e1:15:24:76:22:19:82:
ca:f3:61:53:1c:6e:bf:4e:e0:12:6b:80:f8:21:f8:
0e:30:05:30:cd:a9:65:7f:fb:9f:57:a5:3a:47:ff:
f6:4d:21:ba:92:ac:cd:93:9f:63:48:36:7a:d0:0c:
f5:88:c1:b8:40:29:34:09:d0:e1:97:1e:f4:ee:60:
6a:cd:af:b7:e2:7f:41:9c:2a:d8:dd:84:28:82:26:
d4:d7:da:cf:a2:10:76:55:3d:e7:9c:db:ba:25:b5:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:96:7D:E8:33:E3:F9:5F:25:92:1C:C3:89:63:C9:79:59:08:00:3A
X509v3 Authority Key Identifier:
keyid:57:27:31:37:F3:08:DF:5D:28:FF:F8:9C:B5:BD:B7:1B:64:B5:76:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VycxN_MI310o__ictb23G2S1dgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9e9f54-7cff-45b1-b7b0-f1118aa2df4a/1/m5Z96DPj-V8lkhzDiWPJeVkIADo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9e9f54-7cff-45b1-b7b0-f1118aa2df4a/1/VycxN_MI310o__ictb23G2S1dgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.235.0/24
Signature Algorithm: sha256WithRSAEncryption
25:aa:c4:c8:3d:28:77:95:b2:4f:5b:6d:58:2f:0e:9d:7e:86:
a3:db:9f:00:2d:54:50:e0:9b:34:c9:2a:bc:df:7b:c0:8d:5e:
8b:df:92:67:53:86:5a:65:28:4d:e1:f8:89:30:f2:d5:f8:49:
3b:15:ab:f2:67:e0:f8:7d:f3:f5:30:d3:a9:e5:17:fd:72:d3:
66:c4:e7:87:83:30:37:b9:b6:e8:f7:69:f8:6e:a8:00:e3:9a:
bd:1d:ad:50:8c:86:f7:bb:d2:a0:27:46:64:b0:cf:fc:d1:3c:
f0:ec:8c:ee:a2:62:eb:b6:18:01:bd:34:6f:61:51:dc:5d:e4:
a7:9c:54:3e:5d:9f:c2:db:0d:8d:d6:cf:21:db:b8:79:7c:e6:
5f:5d:a2:07:cf:b8:ba:6f:85:f9:cc:08:e4:1c:16:f7:da:4e:
02:75:73:ba:e2:3d:e1:2b:ae:dc:ca:4c:6e:34:3b:d2:db:5e:
97:70:34:4e:78:d7:d2:a9:4c:99:ae:f0:1b:af:c4:dc:71:f4:
e0:89:23:f8:4b:9f:7c:84:52:2e:91:8f:7a:a3:e4:bb:76:1a:
ca:21:88:48:2f:40:50:23:9c:de:1b:23:f8:7f:49:72:13:78:
19:be:fe:11:50:00:b0:d8:d6:dd:f9:b4:d8:c6:74:8c:9a:49:
e9:62:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org