Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c45e69-fd97-4c4f-b663-84146079d0b9/1/7arhIWKFiWu6MV9rC7t_acIOkUc.roa
File: 7arhIWKFiWu6MV9rC7t_acIOkUc.roa (raw, json)
Hash identifier: eg7u7XLMhORSXDK5nCf0v9GoYPTbeoQqUI7pfwwpINc=
Subject key identifier: ED:AA:E1:21:62:85:89:6B:BA:31:5F:6B:0B:BB:7F:69:C2:0E:91:47
Certificate issuer: /CN=a244a5c22bb0d1b72edbbedfd5a7b2607922334a
Certificate serial: 01CB32
Authority key identifier: A2:44:A5:C2:2B:B0:D1:B7:2E:DB:BE:DF:D5:A7:B2:60:79:22:33:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okSlwiuw0bcu277f1aeyYHkiM0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c45e69-fd97-4c4f-b663-84146079d0b9/1/7arhIWKFiWu6MV9rC7t_acIOkUc.roa
Signing time: Tue 18 Jan 2022 03:18:39 +0000
ROA not before: Tue 18 Jan 2022 03:18:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43594
IP address blocks: 95.215.124.0/24 maxlen: 24
95.215.125.0/24 maxlen: 24
95.215.124.0/22 maxlen: 22
95.215.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117554 (0x1cb32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a244a5c22bb0d1b72edbbedfd5a7b2607922334a
Validity
Not Before: Jan 18 03:18:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edaae1216285896bba315f6b0bbb7f69c20e9147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:9f:c3:3b:5f:9a:ec:7b:a2:88:a3:fd:0d:
c5:a1:40:4b:2f:e4:3e:f8:cc:a4:ef:85:d4:d3:f2:
93:e4:97:3d:6b:01:4c:4e:5d:a3:5d:51:02:27:e6:
e0:41:86:be:c0:b3:06:f3:09:b5:99:29:b3:41:29:
17:e5:50:95:b8:ae:cb:21:95:04:ff:c0:75:5b:97:
98:2b:f8:f3:24:f0:4f:05:46:2e:3d:b2:75:60:59:
a3:b1:99:20:5b:64:65:5e:6b:49:57:c1:23:4f:b0:
e5:ea:fc:e0:9c:79:69:10:98:29:d4:3f:87:46:66:
4f:92:8b:fd:c4:b3:3b:98:17:eb:4f:e7:28:35:4b:
97:1d:22:80:d3:24:05:fc:db:d1:58:c0:19:d0:09:
df:00:b3:6d:0f:fc:00:d4:92:55:ef:e6:3d:8e:5d:
fe:40:d0:cc:d4:86:a3:96:5e:71:24:25:9c:27:0d:
fd:e4:34:9e:7a:c5:c4:81:f9:fb:f3:6e:61:5e:e8:
0a:95:b8:82:bb:7c:d4:41:39:73:60:af:b7:0d:d1:
83:08:25:3b:1b:4c:c9:61:47:cd:f5:e9:ea:99:dd:
11:23:b4:9a:9d:60:6c:b1:0b:11:15:72:07:18:f5:
1d:43:c4:2b:19:68:9c:49:da:7e:b5:00:28:aa:08:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:E1:21:62:85:89:6B:BA:31:5F:6B:0B:BB:7F:69:C2:0E:91:47
X509v3 Authority Key Identifier:
keyid:A2:44:A5:C2:2B:B0:D1:B7:2E:DB:BE:DF:D5:A7:B2:60:79:22:33:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okSlwiuw0bcu277f1aeyYHkiM0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c45e69-fd97-4c4f-b663-84146079d0b9/1/7arhIWKFiWu6MV9rC7t_acIOkUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c45e69-fd97-4c4f-b663-84146079d0b9/1/okSlwiuw0bcu277f1aeyYHkiM0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
61:f8:62:8d:22:db:73:96:33:2a:3d:71:f1:79:d5:7f:53:95:
4c:8d:1f:ec:94:37:e1:46:3d:f9:82:f2:be:98:a3:85:c7:bb:
be:c2:85:4c:b8:9f:1e:ad:a6:1f:1a:da:f6:3a:59:e4:65:8c:
e4:0b:b7:a4:04:44:b7:b2:11:74:5f:ff:54:8c:6c:41:c8:5b:
06:2d:1b:68:f2:74:1a:2f:64:aa:de:b1:fb:7b:45:9b:cf:d1:
95:fe:04:62:95:7e:67:28:c5:68:58:a6:00:ff:c4:5d:ac:af:
c5:b3:1a:b7:7c:df:f4:96:93:5b:0f:cc:a2:82:70:4c:3a:6e:
36:e6:4a:32:a9:7e:8b:5f:ac:13:86:55:5c:14:ed:9f:33:06:
f8:35:2a:42:01:a7:15:e4:72:b3:39:4f:e4:f6:ac:fc:66:aa:
c8:9c:bb:e3:8a:49:07:6c:93:01:28:b9:a2:6c:46:1c:38:ca:
47:ad:2a:ee:80:26:b8:2a:5b:1f:d4:40:3e:55:b0:f7:b6:ac:
57:30:69:06:36:b5:d5:ed:3b:b0:32:61:58:f5:c7:17:59:1f:
e3:00:28:bc:25:eb:45:4a:67:b6:3e:15:08:a6:58:43:45:6c:
1b:68:0b:7d:da:96:c8:22:f3:a8:51:6d:fc:6f:71:17:39:68:
9d:00:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:24 2024 by rpki-client on console-ams.rpki-client.org