Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/Y0V0PQKDgLLjdZ3yl5FxrzVxKns.roa
File: Y0V0PQKDgLLjdZ3yl5FxrzVxKns.roa (raw, json)
Hash identifier: nfgzDVKjDk995DcN+NJyOjdgmIJCPhyJEFwi5oCz+DE=
Subject key identifier: 63:45:74:3D:02:83:80:B2:E3:75:9D:F2:97:91:71:AF:35:71:2A:7B
Certificate issuer: /CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Certificate serial: 0190EE6C2ADBF6BD68BA946110E1CD7B5216
Authority key identifier: F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/Y0V0PQKDgLLjdZ3yl5FxrzVxKns.roa
Signing time: Fri 26 Jul 2024 09:43:04 +0000
ROA not before: Fri 26 Jul 2024 09:43:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210619
IP address blocks: 195.54.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:6c:2a:db:f6:bd:68:ba:94:61:10:e1:cd:7b:52:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Validity
Not Before: Jul 26 09:43:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6345743d028380b2e3759df2979171af35712a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:1f:a3:b1:6c:62:98:01:bb:15:81:56:93:
94:92:51:30:e8:89:af:3c:8f:94:c2:12:42:ab:db:
a7:ea:8f:ad:e8:2a:a6:c8:36:6d:0c:35:9c:f4:7b:
58:44:d6:06:49:5e:b0:ed:79:68:87:dd:31:a4:6d:
f2:11:13:8e:30:a7:46:7f:b7:f0:9c:fb:94:22:51:
df:dd:9b:c3:ee:e4:e5:bd:98:78:a1:1c:68:2d:94:
4a:60:2e:6e:ae:76:be:fc:dd:58:37:be:91:db:0d:
97:88:c4:bc:3b:2c:ac:5b:3a:48:cf:16:ac:04:96:
01:93:f2:b4:3b:7e:33:db:2e:3f:75:0e:28:49:66:
20:5f:32:c6:41:5a:f1:bb:5d:05:8f:80:93:33:3a:
ba:af:db:bb:08:00:23:dc:e3:07:d4:11:be:74:b3:
29:d0:e0:91:d4:03:9a:da:08:18:c0:88:a8:1b:33:
56:2f:68:34:60:50:8c:c0:1e:24:bb:b7:aa:4f:35:
31:1b:cb:9a:f4:0f:2e:c4:3f:ad:ef:b5:fd:fa:fc:
4a:5c:ff:bd:fc:64:a9:3c:6d:42:63:e0:14:dc:4e:
55:5e:67:b1:67:8d:72:a5:b0:4f:fa:92:1e:2e:ea:
66:7a:55:3b:88:93:0a:0f:c2:cf:e7:54:1f:75:8e:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:45:74:3D:02:83:80:B2:E3:75:9D:F2:97:91:71:AF:35:71:2A:7B
X509v3 Authority Key Identifier:
keyid:F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/Y0V0PQKDgLLjdZ3yl5FxrzVxKns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.59.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3c:5c:c4:74:25:a2:22:e1:75:44:ba:6d:1e:4e:1d:59:b1:
6a:24:76:41:86:b2:96:7d:a7:d1:9e:5d:74:d3:15:ad:0c:26:
09:7f:f3:9f:d2:d6:c4:45:65:d1:85:77:1b:c5:1b:a2:d9:ec:
16:95:eb:3b:5b:22:ec:6b:a9:db:03:fb:c5:37:fd:cd:96:67:
03:9b:da:cf:7c:74:ec:36:1d:64:9a:6d:a4:44:5b:73:5e:5b:
92:37:22:22:66:90:22:a8:ca:2e:e6:70:de:5d:53:c4:6b:37:
b2:63:29:42:c1:c0:83:a4:62:8e:cd:d4:44:ea:28:e1:99:e8:
37:99:14:0a:fd:d7:b1:5a:76:15:0b:c4:af:6c:4b:11:9b:59:
b4:96:84:bf:15:fa:fa:93:ed:13:e0:d2:ba:ce:4e:0b:72:d9:
ac:a1:37:c0:fb:9b:b5:00:11:5b:d1:c5:d3:13:05:8f:20:10:
0a:ff:ae:05:4f:41:c8:7f:53:7d:62:34:42:6c:8f:1d:a6:2e:
92:ec:fb:06:a5:7b:0f:f8:76:7f:d5:c4:dd:8f:f4:17:3e:08:
e1:84:48:a8:da:e4:a9:75:42:89:8f:ff:b1:68:0f:89:b5:ba:
74:ee:f4:70:51:27:e4:1f:79:b6:24:21:c9:a3:8c:8d:a3:5c:
4f:43:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 13:21:08 2024 by rpki-client on console-fra.rpki-client.org