Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/974238-01fa-4c15-b942-52d50b75d70c/1/iJUMCEhV4JPHqKnyW1p7ejnjW6M.roa
File: iJUMCEhV4JPHqKnyW1p7ejnjW6M.roa (raw, json)
Hash identifier: 0VpP298WZYtptcSP8ymwZ4nbUnXqnblpAHscaIdw6WY=
Subject key identifier: 88:95:0C:08:48:55:E0:93:C7:A8:A9:F2:5B:5A:7B:7A:39:E3:5B:A3
Certificate issuer: /CN=5e2f2e4b664d3edba236a8768dc9541e7d9d529c
Certificate serial: 4F3767
Authority key identifier: 5E:2F:2E:4B:66:4D:3E:DB:A2:36:A8:76:8D:C9:54:1E:7D:9D:52:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xi8uS2ZNPtuiNqh2jclUHn2dUpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/974238-01fa-4c15-b942-52d50b75d70c/1/iJUMCEhV4JPHqKnyW1p7ejnjW6M.roa
Signing time: Sat 01 Jan 2022 02:00:50 +0000
ROA not before: Sat 01 Jan 2022 02:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210876
IP address blocks: 195.96.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5191527 (0x4f3767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2f2e4b664d3edba236a8768dc9541e7d9d529c
Validity
Not Before: Jan 1 02:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88950c084855e093c7a8a9f25b5a7b7a39e35ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:98:2c:35:83:6c:e0:99:c8:04:7b:28:a4:
60:ca:c3:08:5f:f6:58:17:c7:6d:db:4f:d0:87:d9:
58:5d:7d:71:22:86:33:f2:dd:f0:2b:ce:7a:38:6e:
1b:3c:67:a4:f1:94:69:dd:8c:4f:ba:f2:f5:fa:ec:
26:7e:bf:47:d9:3e:00:73:10:cd:08:f3:ea:c1:8d:
47:10:5f:c5:ac:9c:ed:a6:7f:59:8b:d2:04:67:be:
24:ea:50:e4:61:d4:75:54:a3:71:dc:eb:72:e4:a8:
34:74:c7:06:91:a1:b9:6f:df:25:c7:4b:87:ac:d9:
7c:81:7e:5e:a4:3b:b2:c8:dd:12:e4:a0:b3:e6:bd:
2a:f3:00:a3:78:2a:8d:97:b9:2a:0b:12:3b:a9:49:
14:78:a0:55:78:e2:40:e7:90:e4:32:cc:7f:bb:99:
ff:ba:9f:b1:85:93:6f:41:48:f1:fb:ba:2d:9c:20:
62:be:91:f4:b6:7d:d5:4e:0e:dc:f3:94:88:a9:03:
cc:a9:34:62:e5:c6:7c:a4:ac:b5:d4:dd:a5:82:b3:
5c:e0:65:37:36:5c:17:9d:f9:30:62:12:99:20:98:
e7:7f:f0:f5:0c:0f:5e:85:6e:4c:c6:a3:a4:0f:e7:
cb:f9:84:a8:90:ec:bb:c4:84:a4:d7:14:56:ae:35:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:0C:08:48:55:E0:93:C7:A8:A9:F2:5B:5A:7B:7A:39:E3:5B:A3
X509v3 Authority Key Identifier:
keyid:5E:2F:2E:4B:66:4D:3E:DB:A2:36:A8:76:8D:C9:54:1E:7D:9D:52:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xi8uS2ZNPtuiNqh2jclUHn2dUpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/974238-01fa-4c15-b942-52d50b75d70c/1/iJUMCEhV4JPHqKnyW1p7ejnjW6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/974238-01fa-4c15-b942-52d50b75d70c/1/Xi8uS2ZNPtuiNqh2jclUHn2dUpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.132.0/24
Signature Algorithm: sha256WithRSAEncryption
25:39:a5:6a:72:c6:23:78:4c:c4:4d:29:f1:0e:f2:ad:7c:f2:
94:4a:65:da:60:12:f0:1a:b3:cc:25:15:26:7b:a4:c7:93:fc:
f4:47:7f:4e:f8:24:4c:17:67:02:1a:54:cd:bd:6c:65:13:8d:
67:bf:8b:1c:40:5c:8f:30:10:c3:51:8f:1d:eb:1e:60:11:97:
bb:ac:a0:4f:fb:7c:41:85:ee:e0:73:fc:4d:47:32:0a:82:8e:
04:b9:7e:12:74:7c:42:9f:e5:6e:49:28:1d:7f:5f:5c:15:ed:
b5:47:aa:9a:57:8b:39:ce:60:e2:f1:30:46:7f:ba:6d:32:31:
da:c2:8c:49:54:37:ee:7e:d5:48:f4:f1:8b:3b:79:94:f2:da:
40:29:b8:ae:4b:2c:43:08:3b:f8:d6:90:13:48:cd:44:38:a8:
ce:66:8d:43:b6:0f:e8:9f:de:26:19:7a:7a:79:11:2a:35:33:
2b:2c:5a:81:61:d2:11:d2:88:70:40:61:dd:5d:61:9a:5a:fc:
42:54:2c:0b:fb:2e:5e:03:d8:81:ce:de:46:2b:0e:70:ee:cc:
b0:a6:d9:77:1f:d8:d1:3e:3f:07:1f:7f:94:56:02:93:a8:1d:
7e:58:e9:7e:a0:65:2f:52:ba:c8:57:1d:a3:87:73:d3:0d:13:
a1:ea:66:d8
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDTzdnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
MmYyZTRiNjY0ZDNlZGJhMjM2YTg3NjhkYzk1NDFlN2Q5ZDUyOWMwHhcNMjIwMTAx
MDIwMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4ODk1MGMwODQ4NTVl
MDkzYzdhOGE5ZjI1YjVhN2I3YTM5ZTM1YmEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmXuYLDWDbOCZyAR7KKRgysMIX/ZYF8dt20/Qh9lYXX1xIoYz
8t3wK856OG4bPGek8ZRp3YxPuvL1+uwmfr9H2T4AcxDNCPPqwY1HEF/FrJztpn9Z
i9IEZ74k6lDkYdR1VKNx3Oty5Kg0dMcGkaG5b98lx0uHrNl8gX5epDuyyN0S5KCz
5r0q8wCjeCqNl7kqCxI7qUkUeKBVeOJA55DkMsx/u5n/up+xhZNvQUjx+7otnCBi
vpH0tn3VTg7c85SIqQPMqTRi5cZ8pKy11N2lgrNc4GU3NlwXnfkwYhKZIJjnf/D1
DA9ehW5MxqOkD+fL+YSokOy7xISk1xRWrjXrWwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIiVDAhIVeCTx6ip8ltae3o541ujMB8GA1UdIwQYMBaAFF4vLktmTT7bojao
do3JVB59nVKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WGk4dVMyWk5QdHVpTnFoMmpjbFVIbjJkVXB3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iNi85NzQyMzgtMDFmYS00YzE1LWI5NDItNTJkNTBiNzVkNzBjLzEv
aUpVTUNFaFY0SlBIcUtueVcxcDdlam5qVzZNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85
NzQyMzgtMDFmYS00YzE1LWI5NDItNTJkNTBiNzVkNzBjLzEvWGk4dVMyWk5QdHVp
TnFoMmpjbFVIbjJkVXB3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CEMA0GCSqGSIb3DQEBCwUAA4IB
AQAlOaVqcsYjeEzETSnxDvKtfPKUSmXaYBLwGrPMJRUme6THk/z0R39O+CRMF2cC
GlTNvWxlE41nv4scQFyPMBDDUY8d6x5gEZe7rKBP+3xBhe7gc/xNRzIKgo4EuX4S
dHxCn+VuSSgdf19cFe21R6qaV4s5zmDi8TBGf7ptMjHawoxJVDfuftVI9PGLO3mU
8tpAKbiuSyxDCDv41pATSM1EOKjOZo1Dtg/on94mGXp6eREqNTMrLFqBYdIR0ohw
QGHdXWGaWvxCVCwL+y5eA9iBzt5GKw5w7sywptl3H9jRPj8HH3+UVgKTqB1+WOl+
oGUvUrrIVx2jh3PTDROh6mbY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:02 2024 by rpki-client on console-ams.rpki-client.org