Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/tJkZEQITWz83YSNNkHww2AnRB5k.roa
File: tJkZEQITWz83YSNNkHww2AnRB5k.roa (raw, json)
Hash identifier: dabt1KuDbU6mWd7cMw7Ux4yCHttBLMraugrOsM1FsIw=
Subject key identifier: B4:99:19:11:02:13:5B:3F:37:61:23:4D:90:7C:30:D8:09:D1:07:99
Certificate issuer: /CN=6c11fc8d6e7301a679b8cdbea905596411640883
Certificate serial: 015EFBDB
Authority key identifier: 6C:11:FC:8D:6E:73:01:A6:79:B8:CD:BE:A9:05:59:64:11:64:08:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/tJkZEQITWz83YSNNkHww2AnRB5k.roa
Signing time: Sat 01 Jan 2022 07:56:39 +0000
ROA not before: Sat 01 Jan 2022 07:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 195.225.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23002075 (0x15efbdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c11fc8d6e7301a679b8cdbea905596411640883
Validity
Not Before: Jan 1 07:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b499191102135b3f3761234d907c30d809d10799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:14:19:1a:97:bb:11:84:91:05:09:08:de:
41:d6:ee:13:53:c3:38:36:dd:ca:be:2b:15:24:6e:
d9:8d:f1:02:5d:25:25:54:30:89:d8:8d:1d:b3:5a:
c0:d7:c3:4d:57:77:6a:2b:8c:c1:a0:6c:d8:21:e1:
cf:3b:4c:a8:83:d8:f2:40:a2:d2:06:71:42:e9:c1:
51:aa:98:5f:f0:ff:fe:18:0d:08:92:38:31:a2:1a:
2c:a9:1a:1b:9f:30:a2:32:5b:c6:fc:42:0a:bb:f1:
bb:14:4b:55:c6:f0:62:86:44:fe:27:b6:89:7b:d5:
b1:ea:f3:95:89:ed:ab:12:07:4f:88:bd:21:11:1b:
ef:8c:1d:63:84:bb:1b:b6:e2:9b:ab:36:96:81:01:
8b:c8:61:e3:f7:b6:51:f8:c3:55:1f:19:d2:f7:e1:
d0:86:de:68:7c:27:b2:85:a0:af:5e:17:f2:b8:f2:
02:6d:72:04:ae:1e:ec:9a:14:72:1e:dd:eb:ee:9e:
dd:3a:8b:23:d1:32:03:17:9b:27:02:65:1d:d9:9d:
f5:9c:01:18:11:45:6b:e2:f6:a3:6f:a0:1e:87:3c:
19:c0:47:17:b2:c7:ef:09:87:76:e1:de:28:a0:2f:
37:f9:16:ab:78:9a:02:c9:87:ed:67:ae:6a:6a:89:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:19:11:02:13:5B:3F:37:61:23:4D:90:7C:30:D8:09:D1:07:99
X509v3 Authority Key Identifier:
keyid:6C:11:FC:8D:6E:73:01:A6:79:B8:CD:BE:A9:05:59:64:11:64:08:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/tJkZEQITWz83YSNNkHww2AnRB5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.99.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:19:77:e4:4f:79:0a:ed:04:4e:7f:96:a0:7d:a6:3a:9a:11:
be:3b:b5:7f:a7:67:ff:bd:e0:4b:d4:82:3c:05:7b:d9:53:07:
01:2c:b9:9b:e8:5e:31:98:3e:ce:84:07:4a:94:91:68:23:44:
06:ea:36:6e:4f:75:76:d6:af:1a:be:b6:18:e3:58:43:55:b5:
20:07:ab:e6:f7:cc:12:34:62:9d:28:2f:53:0c:ff:ca:22:9c:
01:4a:4b:1c:2e:3d:8b:de:64:b7:6d:9f:cd:29:33:bb:53:8d:
82:30:e0:3d:58:0e:d7:e1:ee:55:f5:ff:38:40:4e:b5:ec:99:
35:04:2b:32:f5:01:52:88:b1:ad:e8:36:0a:18:57:bc:af:69:
db:ae:e6:ca:cd:1f:c6:bc:2b:69:d7:67:45:5a:19:11:c1:4e:
08:2e:a5:09:fe:0a:f0:23:08:c6:49:62:76:63:11:0d:70:d6:
dd:bf:bc:07:b4:53:51:16:c2:35:c6:e6:ca:c2:f8:a5:c5:c4:
78:2b:7b:ce:8f:74:63:62:51:a5:4f:34:f8:c3:9b:0f:ea:c3:
95:c3:54:aa:27:ac:5a:77:14:e8:4a:81:7a:7c:ff:6c:47:9f:
e1:da:e9:f4:27:78:31:db:f5:ec:60:96:81:7a:28:ad:da:52:
da:0d:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org