Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d67dd5-afbe-4c66-bc19-f2d79c8c046e/1/7PtSb87z6c5o3LsNAWarH_VgDVk.roa
File: 7PtSb87z6c5o3LsNAWarH_VgDVk.roa (raw, json)
Hash identifier: x9Lnx6f+Iee+Z59MCCl8BfCSbMOsXVMiGh+WptGkfTs=
Subject key identifier: EC:FB:52:6F:CE:F3:E9:CE:68:DC:BB:0D:01:66:AB:1F:F5:60:0D:59
Certificate issuer: /CN=e12b5d0d85b1eee9187f987a4209a94d8bf31af0
Certificate serial: 01856B4A0B929B84CA5A3E1DB55C82DEF745
Authority key identifier: E1:2B:5D:0D:85:B1:EE:E9:18:7F:98:7A:42:09:A9:4D:8B:F3:1A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4StdDYWx7ukYf5h6QgmpTYvzGvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d67dd5-afbe-4c66-bc19-f2d79c8c046e/1/7PtSb87z6c5o3LsNAWarH_VgDVk.roa
Signing time: Sun 01 Jan 2023 03:04:52 +0000
ROA not before: Sun 01 Jan 2023 03:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58075
IP address blocks: 195.96.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:0b:92:9b:84:ca:5a:3e:1d:b5:5c:82:de:f7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12b5d0d85b1eee9187f987a4209a94d8bf31af0
Validity
Not Before: Jan 1 03:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecfb526fcef3e9ce68dcbb0d0166ab1ff5600d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:f0:b8:71:bd:7f:5c:ab:e3:1c:32:6e:45:
c2:4c:8a:2b:80:f6:76:6e:fe:a6:b6:47:97:3a:b3:
34:42:98:6a:01:b5:74:46:4d:a2:b6:f6:e4:4b:ee:
a0:4e:d2:f6:bf:43:96:65:c6:18:2d:fe:b9:8e:b9:
aa:41:e5:16:44:f6:21:3f:47:38:e1:e4:0e:ec:a0:
93:ef:15:9c:f6:95:3a:0c:11:71:0f:07:50:f7:76:
3b:98:1a:48:8b:21:db:5e:95:4d:07:6f:2a:5a:f3:
ad:f1:dc:1e:f1:33:a3:88:61:50:df:c9:e3:79:34:
7d:5a:37:af:d1:9a:8b:5f:4a:74:b5:ad:96:ef:82:
68:0a:b4:71:86:d8:bf:29:f9:04:11:13:0f:2a:e2:
74:dd:a3:1e:95:48:e8:c3:53:c7:76:da:53:6e:74:
dd:87:1e:f7:b6:a4:e9:b8:2d:c5:40:5d:2d:31:ce:
ef:71:2e:9f:ed:1f:0a:0a:29:ec:54:7d:92:07:96:
4b:74:bc:ed:77:5c:1a:fa:68:8f:da:e6:2f:6e:77:
98:29:85:1a:3a:01:00:d8:6d:e1:a3:b2:14:90:22:
06:c3:7f:f1:9d:03:cd:e4:91:1f:1e:24:cc:d4:37:
19:e3:cd:dc:34:87:49:1f:fe:48:be:9c:3a:e8:97:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FB:52:6F:CE:F3:E9:CE:68:DC:BB:0D:01:66:AB:1F:F5:60:0D:59
X509v3 Authority Key Identifier:
keyid:E1:2B:5D:0D:85:B1:EE:E9:18:7F:98:7A:42:09:A9:4D:8B:F3:1A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4StdDYWx7ukYf5h6QgmpTYvzGvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d67dd5-afbe-4c66-bc19-f2d79c8c046e/1/7PtSb87z6c5o3LsNAWarH_VgDVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d67dd5-afbe-4c66-bc19-f2d79c8c046e/1/4StdDYWx7ukYf5h6QgmpTYvzGvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.158.0/24
Signature Algorithm: sha256WithRSAEncryption
24:81:10:95:16:3a:26:d1:58:75:69:93:8c:54:ca:d3:ff:60:
8f:8f:3b:51:bc:14:04:7c:40:b9:bb:bd:35:4b:d0:fa:c5:b7:
66:10:29:df:47:b0:49:6b:9f:a6:d9:c5:e3:5a:5f:c5:92:ca:
25:8f:6b:94:64:84:d4:9a:28:99:61:3d:67:9c:84:de:11:5c:
55:1c:8c:a1:96:f0:06:82:5e:ea:b4:74:9f:8f:05:c5:3c:67:
e2:6a:a4:c9:13:47:3c:5d:3e:20:bf:83:d9:a8:da:73:43:86:
10:bf:ca:70:c6:ce:33:24:45:db:7b:60:26:1d:f3:5a:5f:d4:
c1:32:6a:2c:94:c1:7b:c7:c4:0c:97:0a:79:bb:b4:82:26:3c:
9b:17:17:ac:0f:a3:0a:7e:d6:7f:c9:16:3b:87:3a:c0:50:53:
13:32:0e:91:10:a0:cb:f9:9a:e7:04:22:1a:d4:d7:cf:73:8f:
e9:6d:1f:1a:ce:e3:06:eb:0d:c2:76:38:75:e2:5c:09:6b:ca:
df:cb:6f:3e:37:d2:f9:68:fe:52:b3:a0:1a:2e:49:36:16:75:
f1:1b:33:29:5c:2c:20:be:ce:05:c6:c5:6c:28:18:a8:57:ba:
94:86:7c:98:70:47:55:e8:a9:c2:cf:b7:a8:f4:94:b5:05:eb:
37:2a:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 09:42:27 2023 by rpki-client on console-ams.rpki-client.org