Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/1-pO7Sph6mrOgGw7JcN8eoO9ei_M.roa
File: 1-pO7Sph6mrOgGw7JcN8eoO9ei_M.roa (raw, json)
Hash identifier: aXuIi0LFXEzT5HT9MBcQIIfvJ3f16v1chiDkDWJ7m8I=
Subject key identifier: FA:93:BB:4A:98:7A:9A:B3:A0:1B:0E:C9:70:DF:1E:A0:EF:5E:8B:F3
Certificate issuer: /CN=ba4118a5581913706a1cde2d713737c70628818f
Certificate serial: 018CC348E0AA0A133A4F3BC7C29D53E5B595
Authority key identifier: BA:41:18:A5:58:19:13:70:6A:1C:DE:2D:71:37:37:C7:06:28:81:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukEYpVgZE3BqHN4tcTc3xwYogY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/1-pO7Sph6mrOgGw7JcN8eoO9ei_M.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48347
IP address blocks: 195.85.231.0/24 maxlen: 24
195.47.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e0:aa:0a:13:3a:4f:3b:c7:c2:9d:53:e5:b5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4118a5581913706a1cde2d713737c70628818f
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa93bb4a987a9ab3a01b0ec970df1ea0ef5e8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:3d:ba:f0:cf:97:a8:1f:10:79:9d:8e:fd:
3f:5b:17:0d:05:52:87:37:f3:48:6d:b1:31:a2:cd:
0b:ea:a4:ed:1d:81:5e:c8:34:93:87:cf:33:b7:78:
7d:3b:b2:67:d7:db:51:41:49:39:b6:dc:af:c1:f5:
8c:6f:4f:db:db:12:43:6f:31:18:24:a5:8a:1b:cf:
2b:6e:51:f8:46:65:f7:36:c2:18:48:51:c6:01:66:
84:48:f6:66:7b:f2:61:50:45:07:6e:4e:55:04:65:
3e:7d:96:c5:1b:04:b4:b8:c5:39:e9:c4:cc:04:f6:
48:6a:db:b1:6b:67:f2:c5:25:d6:16:f9:95:93:bf:
cc:a4:dd:b7:84:ab:f1:48:b2:0b:a6:82:46:9d:b7:
3a:27:2d:40:b2:6f:ea:07:3a:03:a6:f6:17:a1:46:
3b:62:50:83:43:17:93:78:42:9b:0e:50:a8:4a:de:
c7:0b:4d:b7:d0:10:6a:0d:72:54:56:32:bf:dc:6d:
67:c5:13:85:bf:86:fb:09:f0:10:74:7c:bd:18:98:
c2:b2:dc:4b:1a:5c:bb:c6:f8:6b:53:6b:0a:fe:05:
81:f0:05:61:2a:9f:48:af:f1:33:01:82:e1:5b:d9:
6a:8c:58:3e:70:d9:07:d2:77:4a:81:58:87:fb:ba:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:BB:4A:98:7A:9A:B3:A0:1B:0E:C9:70:DF:1E:A0:EF:5E:8B:F3
X509v3 Authority Key Identifier:
keyid:BA:41:18:A5:58:19:13:70:6A:1C:DE:2D:71:37:37:C7:06:28:81:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukEYpVgZE3BqHN4tcTc3xwYogY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/1-pO7Sph6mrOgGw7JcN8eoO9ei_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/ukEYpVgZE3BqHN4tcTc3xwYogY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.196.0/24
195.85.231.0/24
Signature Algorithm: sha256WithRSAEncryption
51:99:51:6e:87:98:4d:52:ba:83:f6:37:06:57:6f:6d:11:8d:
95:e4:26:b8:16:80:e3:da:95:e6:8e:b4:d1:b2:2d:0a:e7:b2:
b8:e4:eb:42:64:36:79:85:2d:5b:3b:0f:39:e8:a1:0a:3a:3a:
bd:56:48:ff:cb:39:e0:a7:92:5e:0b:ef:82:dc:de:13:ac:72:
1b:d7:66:dd:d4:41:63:03:37:4d:18:a7:56:81:54:32:cf:b0:
83:56:4d:b4:cc:bc:ce:cc:c8:90:ce:24:0b:0b:25:2f:4a:82:
d8:5f:f9:0e:a8:f7:ca:2e:8a:1e:fb:72:ab:98:3c:7b:5e:43:
cd:15:5b:7e:05:39:83:c1:c7:9b:35:fb:a9:20:a6:20:16:07:
3f:7f:c2:33:29:19:be:93:d2:e3:6b:f9:79:d8:75:0f:d4:e5:
a1:4f:87:e9:c6:d7:2e:c2:7e:0e:25:59:b2:c9:78:91:9a:61:
6f:95:27:fb:b3:2c:02:64:82:70:b8:8f:4b:82:99:cd:29:50:
d9:b9:bb:64:46:e5:3c:02:0a:9a:8e:29:f2:67:7b:b8:ea:31:
68:f9:25:e3:d9:64:0f:8b:06:2a:04:4f:ff:2c:12:fb:ea:50:
d7:14:6d:6b:08:6a:7b:ad:14:b7:14:78:3f:6a:eb:65:bc:29:
55:95:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:33 2024 by rpki-client on console-fra.rpki-client.org