Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/l_m6OUxyZBFOPaqTXVAUtkvAnM8.roa
File: l_m6OUxyZBFOPaqTXVAUtkvAnM8.roa (raw, json)
Hash identifier: UxAeiUuOaXaiGbV+2P2mcxbx8P/GsRdSCQZ3xsYDP4c=
Subject key identifier: 97:F9:BA:39:4C:72:64:11:4E:3D:AA:93:5D:50:14:B6:4B:C0:9C:CF
Certificate issuer: /CN=d14db33cecad1ee1068cdfb11e61673b2140c37e
Certificate serial: 057D0972
Authority key identifier: D1:4D:B3:3C:EC:AD:1E:E1:06:8C:DF:B1:1E:61:67:3B:21:40:C3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0U2zPOytHuEGjN-xHmFnOyFAw34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/l_m6OUxyZBFOPaqTXVAUtkvAnM8.roa
Signing time: Sat 01 Jan 2022 06:56:50 +0000
ROA not before: Sat 01 Jan 2022 06:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56376
IP address blocks: 195.177.115.0/24 maxlen: 24
195.177.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92080498 (0x57d0972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14db33cecad1ee1068cdfb11e61673b2140c37e
Validity
Not Before: Jan 1 06:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97f9ba394c7264114e3daa935d5014b64bc09ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:66:99:8b:8d:2f:07:4d:b3:ec:83:cc:39:74:
c7:c8:89:04:bb:6b:d5:f8:d6:4a:96:4b:3c:2d:43:
19:5d:cf:dc:67:c3:b5:fe:8d:7b:17:c5:af:55:db:
55:5e:02:76:5e:79:10:4a:8b:9f:26:46:73:87:ec:
d8:4b:62:41:a7:05:25:a4:e9:d7:7d:d2:e4:64:1d:
57:e3:ac:e6:84:e8:9c:77:c0:a0:4a:ad:0d:3e:d2:
8c:22:92:c0:f7:07:6b:f2:3f:d2:47:e1:f8:7d:94:
6f:6a:5d:5f:84:b8:d6:83:0c:30:58:f0:5b:a8:ed:
93:5d:46:cb:de:38:99:54:07:18:af:a0:4b:62:6b:
77:0e:fa:77:02:66:a3:52:65:54:47:aa:a1:8c:6d:
fb:cc:f5:52:24:4e:ac:a6:02:5c:6a:45:b4:c5:4b:
56:32:e3:4e:a8:de:e6:41:a3:5b:80:96:75:5b:32:
dc:64:30:5e:c4:5b:19:59:bb:e9:d0:32:52:84:4b:
1f:22:28:4e:ff:fc:86:1d:2c:76:df:0e:73:56:29:
af:63:27:d0:d1:fa:04:fd:2e:4a:91:71:c9:45:5b:
ad:1e:19:14:28:f6:62:02:ca:c3:47:58:1a:52:55:
da:9c:dd:e3:b7:a5:26:b7:48:ba:50:73:a7:2b:e7:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F9:BA:39:4C:72:64:11:4E:3D:AA:93:5D:50:14:B6:4B:C0:9C:CF
X509v3 Authority Key Identifier:
keyid:D1:4D:B3:3C:EC:AD:1E:E1:06:8C:DF:B1:1E:61:67:3B:21:40:C3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0U2zPOytHuEGjN-xHmFnOyFAw34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/l_m6OUxyZBFOPaqTXVAUtkvAnM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.113.0/24
195.177.115.0/24
Signature Algorithm: sha256WithRSAEncryption
74:49:30:67:8c:7a:5f:a9:df:d5:ae:6f:49:e7:75:80:39:c1:
14:11:74:f4:e1:08:d0:2e:3f:33:2f:8a:e3:34:33:8c:39:ff:
ba:1d:38:d2:23:e3:bd:e8:d3:a8:fa:ce:4a:d4:2f:aa:d2:44:
de:e3:19:0c:2c:03:bd:ca:b7:b1:19:a5:ea:44:8b:2f:e2:f5:
a7:10:dc:e9:f3:da:b3:7e:fd:e9:6c:38:2c:b9:51:4a:bc:4c:
e9:60:76:17:47:1d:fb:18:22:9a:4d:a9:60:c9:12:5d:89:92:
ba:0c:40:01:fb:c5:64:02:40:aa:74:02:aa:47:9e:a5:43:63:
a7:d3:41:61:ce:30:04:c0:94:93:2a:20:9e:e4:3c:52:61:24:
83:f2:ef:0a:52:b9:fc:2b:8a:19:9d:c1:07:75:b8:8f:39:aa:
ea:62:34:7c:37:a6:73:20:cf:29:ea:ce:0a:5e:71:e3:07:a4:
6b:47:c6:46:e1:90:52:93:9c:67:69:c5:a0:82:6e:8e:0e:02:
3d:0d:04:71:94:9d:b9:62:da:d7:9a:96:bd:e0:36:eb:66:86:
35:ef:0f:a7:d4:19:9a:be:bd:01:b5:e9:38:d0:1e:63:f6:51:
8b:3c:c6:0e:0b:15:bb:4b:1e:ec:08:81:41:af:ab:c3:b5:0f:
58:6d:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:50 2023 by rpki-client on console-ams.rpki-client.org