Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d872a7-a30a-4014-ac4d-ec74b1715403/1/ArEWJfv2daeoQRMBey77BBNGWyk.roa
File: ArEWJfv2daeoQRMBey77BBNGWyk.roa (raw, json)
Hash identifier: mA0lblXZbHWRYO0HLlaEGxeyQOlh3aINa6C3AGOLYn8=
Subject key identifier: 02:B1:16:25:FB:F6:75:A7:A8:41:13:01:7B:2E:FB:04:13:46:5B:29
Certificate issuer: /CN=e9c85b341f82572d32ed500f8ae79c6e5c3d9342
Certificate serial: 07FA3BB0
Authority key identifier: E9:C8:5B:34:1F:82:57:2D:32:ED:50:0F:8A:E7:9C:6E:5C:3D:93:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6chbNB-CVy0y7VAPiuecblw9k0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d872a7-a30a-4014-ac4d-ec74b1715403/1/ArEWJfv2daeoQRMBey77BBNGWyk.roa
Signing time: Sat 01 Jan 2022 10:00:36 +0000
ROA not before: Sat 01 Jan 2022 10:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38954
IP address blocks: 195.144.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133839792 (0x7fa3bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c85b341f82572d32ed500f8ae79c6e5c3d9342
Validity
Not Before: Jan 1 10:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02b11625fbf675a7a84113017b2efb0413465b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:1b:3d:fb:78:a4:3c:79:04:de:7b:97:ce:
9f:a3:9d:77:c4:c6:c3:7e:6a:14:15:97:c9:71:5e:
a7:1c:9a:a7:1b:db:17:b2:8f:74:b0:1f:2c:1b:e3:
4f:bb:7a:1b:49:53:71:0a:4f:ac:5d:81:b2:a2:31:
fb:8a:c8:33:90:94:c4:74:c4:f1:66:a3:8f:ed:a6:
dc:ec:18:6e:80:d5:64:ce:59:12:a8:aa:11:4c:ad:
28:e6:74:6a:22:8b:cf:cd:2f:d0:37:17:0d:41:b0:
93:8d:74:86:e6:97:52:19:27:48:52:83:45:9f:be:
e7:f1:42:d7:16:93:83:bd:32:2f:d5:dc:6e:3b:ca:
33:7a:40:a4:9c:c8:11:1f:c7:bb:fa:c1:f5:e1:2a:
88:61:69:36:45:a0:e9:a2:45:3b:fb:ba:ab:e2:b0:
45:8a:44:cf:73:bc:d0:fb:3c:54:47:db:bb:7b:ac:
a4:21:50:8f:df:fb:86:ef:7e:c6:11:c9:cc:2e:af:
44:d7:a8:f9:ec:5f:b9:8a:63:5e:26:9f:88:55:27:
10:c0:ea:a9:5d:c9:97:c3:93:47:c8:15:16:c1:7c:
d5:b2:16:17:64:9c:2a:d5:e6:a2:f9:53:05:92:53:
2b:8d:3c:23:40:ef:da:85:2b:a7:ae:d3:80:69:d0:
fc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B1:16:25:FB:F6:75:A7:A8:41:13:01:7B:2E:FB:04:13:46:5B:29
X509v3 Authority Key Identifier:
keyid:E9:C8:5B:34:1F:82:57:2D:32:ED:50:0F:8A:E7:9C:6E:5C:3D:93:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6chbNB-CVy0y7VAPiuecblw9k0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d872a7-a30a-4014-ac4d-ec74b1715403/1/ArEWJfv2daeoQRMBey77BBNGWyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d872a7-a30a-4014-ac4d-ec74b1715403/1/6chbNB-CVy0y7VAPiuecblw9k0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.29.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d1:41:08:e8:fb:4f:b7:d3:db:d6:23:42:62:a3:bb:35:1b:
82:e0:dd:14:66:4f:79:5d:cb:1e:c7:65:1d:8b:a9:7e:46:79:
cc:f4:ae:cc:be:cb:b9:11:3f:aa:49:89:3b:96:c0:8d:65:4b:
a6:04:e0:17:3f:8d:71:d4:c2:2c:fa:7c:6c:02:54:81:f7:a1:
00:fc:53:3c:fa:13:dd:af:25:9a:44:33:3b:a6:82:77:41:8d:
d7:65:7b:d3:5b:b7:78:b2:79:e9:50:b4:c0:f2:5e:e6:dd:fb:
47:42:a7:95:6a:d9:d4:2a:0d:14:6b:5f:bb:23:b3:44:65:a0:
b5:07:e1:12:07:a1:e2:28:aa:4c:8b:b6:cd:16:2a:22:53:75:
e8:d4:5b:ee:90:91:65:e3:17:40:8c:95:28:ce:26:89:dd:b0:
d4:73:b5:c2:fd:37:1a:85:2b:c3:b4:11:9a:ca:be:c2:8a:5a:
31:24:e5:1c:61:a9:9e:ad:70:aa:52:66:dc:77:2a:38:d5:70:
1b:1a:9e:7b:18:89:cd:dc:85:ef:44:88:f6:e7:19:ea:d6:8a:
50:29:3e:0b:2a:d8:c9:55:23:4e:ed:86:ca:ce:6b:a2:83:55:
eb:6b:58:f4:f4:69:e0:96:97:47:5d:0f:72:2b:5b:d3:c5:e8:
eb:9a:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:52 2024 by rpki-client on console-fra.rpki-client.org