Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/x6tHgqsFaNRpV9gu_5WAwz6p7NI.roa
File: x6tHgqsFaNRpV9gu_5WAwz6p7NI.roa (raw, json)
Hash identifier: 99maKn7ZwFuC6wRLrRdEWFvJedPad6GvjZVVvVPBbpY=
Subject key identifier: C7:AB:47:82:AB:05:68:D4:69:57:D8:2E:FF:95:80:C3:3E:A9:EC:D2
Certificate issuer: /CN=6c11fc8d6e7301a679b8cdbea905596411640883
Certificate serial: 0189654AC44022C1AC54F0DE7CC0AD3F9267
Authority key identifier: 6C:11:FC:8D:6E:73:01:A6:79:B8:CD:BE:A9:05:59:64:11:64:08:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/x6tHgqsFaNRpV9gu_5WAwz6p7NI.roa
Signing time: Mon 17 Jul 2023 19:19:05 +0000
ROA not before: Mon 17 Jul 2023 19:19:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 195.225.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c4:40:22:c1:ac:54:f0:de:7c:c0:ad:3f:92:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c11fc8d6e7301a679b8cdbea905596411640883
Validity
Not Before: Jul 17 19:19:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7ab4782ab0568d46957d82eff9580c33ea9ecd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:95:6e:09:a3:e9:29:ed:da:9d:45:b5:ae:02:
ac:3a:e0:cf:85:40:42:a8:4a:74:25:1d:23:c3:21:
f1:75:1a:b0:9a:dc:63:ee:e1:55:f7:32:2d:7d:06:
41:8c:c2:9a:67:e6:ef:31:62:3a:cb:8f:5f:de:3b:
46:d1:e8:5f:d6:91:65:02:06:fb:58:a1:8f:b7:8a:
9d:a4:ad:83:93:35:38:ab:6a:86:0a:32:66:f2:1b:
72:87:22:9b:ad:00:a6:66:50:ef:39:81:12:cf:c1:
d0:b2:1f:2b:82:ff:51:92:97:68:d6:95:5b:66:af:
73:ef:26:45:a4:ba:d1:68:05:0e:f5:59:48:01:d8:
84:8a:48:9e:68:38:84:0e:d0:d3:ed:70:f0:89:30:
c4:66:5c:fc:6d:bf:8f:52:16:90:7f:62:ac:50:ba:
a5:ae:35:23:1a:66:3d:0c:d5:d1:f7:76:f3:71:52:
c3:7f:b4:36:5f:d8:6c:6e:de:2f:2f:d5:92:1d:5c:
88:10:17:8e:3a:16:17:38:d9:70:78:1b:af:67:6b:
8e:b2:6f:02:49:1f:45:d4:e0:7e:e0:fa:96:d5:79:
90:71:0d:28:04:3e:46:f3:b5:b3:3e:76:7d:3b:03:
22:67:84:ca:2a:7d:77:80:2a:91:84:0d:7a:ea:b3:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:47:82:AB:05:68:D4:69:57:D8:2E:FF:95:80:C3:3E:A9:EC:D2
X509v3 Authority Key Identifier:
keyid:6C:11:FC:8D:6E:73:01:A6:79:B8:CD:BE:A9:05:59:64:11:64:08:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/x6tHgqsFaNRpV9gu_5WAwz6p7NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e7:2a:3e:0a:28:46:50:9e:79:c3:c1:ec:d5:ff:40:9e:8e:
8c:20:73:ba:fc:a2:9a:ad:90:aa:72:cc:f3:21:b6:79:bc:61:
f5:4b:b7:11:1d:77:a7:1c:9b:95:7c:0b:c5:e0:1e:1b:08:43:
d7:7a:db:e5:77:76:2f:86:ea:5b:3a:63:29:51:e9:58:1f:8f:
f9:47:d9:01:33:04:9e:46:74:05:06:2b:48:81:0d:88:7f:70:
bd:f2:5e:2e:12:82:43:8a:ea:05:41:23:bb:d5:17:81:b4:c1:
88:b4:a1:1c:0a:07:f4:fb:e8:f8:91:a6:64:fb:99:10:56:15:
64:f9:28:e8:03:12:b3:91:8c:c2:a1:9f:91:11:7a:bc:00:f5:
51:81:b6:9d:4a:02:18:1a:88:70:cf:3f:5e:94:b3:0d:0f:45:
00:fb:8e:01:fa:e8:a4:6f:e2:39:a4:4a:54:b8:d9:b3:69:0c:
f4:55:c9:37:5c:45:93:32:e5:fb:ca:67:02:6b:5a:18:6d:c0:
11:a0:3f:74:f8:25:b4:46:68:fa:48:48:d0:83:a5:2e:6f:69:
ac:57:9c:4b:3b:e4:3d:38:f6:ff:7b:52:fc:3b:0a:70:0e:e8:
68:af:b9:ec:eb:da:3b:5b:aa:59:f8:99:74:72:ab:35:00:0d:
a1:ad:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org