Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/8nB5WIFPyPbhOrs-L7UuXcoooo4.roa
File: 8nB5WIFPyPbhOrs-L7UuXcoooo4.roa (raw, json)
Hash identifier: EtuNg/fYrW6DJLgTlY2Q2ekCRAnzyOY/G0jJgVGrzZI=
Subject key identifier: F2:70:79:58:81:4F:C8:F6:E1:3A:BB:3E:2F:B5:2E:5D:CA:28:A2:8E
Certificate issuer: /CN=87f71826a13169a629e71a89dbae108730a2aa06
Certificate serial: 018B1B81D66C5A7DC3B13B616D69D3DC3FFE
Authority key identifier: 87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_cYJqExaaYp5xqJ264QhzCiqgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/8nB5WIFPyPbhOrs-L7UuXcoooo4.roa
Signing time: Tue 10 Oct 2023 21:32:55 +0000
ROA not before: Tue 10 Oct 2023 21:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.2.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:81:d6:6c:5a:7d:c3:b1:3b:61:6d:69:d3:dc:3f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f71826a13169a629e71a89dbae108730a2aa06
Validity
Not Before: Oct 10 21:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2707958814fc8f6e13abb3e2fb52e5dca28a28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:72:9d:b6:d1:14:52:1f:13:e2:f8:a1:23:36:
13:78:6f:e6:e4:58:38:7c:7a:09:a3:66:e7:21:12:
f2:b9:ac:1e:a9:c4:94:05:b1:1b:41:0b:6e:d4:0c:
c1:01:33:3a:c6:ad:ef:32:db:7e:08:c3:5d:40:10:
57:b2:bf:92:89:5f:28:47:db:2e:17:1c:e6:d7:1e:
77:be:6f:10:fd:24:8c:29:66:e8:4a:d2:c1:4c:5d:
56:81:d0:e2:5c:80:87:21:3e:75:85:ca:60:50:82:
9f:b5:b9:1c:a8:85:06:96:ff:80:df:2a:2f:c8:04:
3c:0b:e6:42:99:1e:24:f4:24:d3:9a:01:74:00:4f:
fb:ea:24:08:1e:db:4c:71:be:0b:05:68:af:04:54:
e5:b8:9a:9c:37:f7:3f:d7:f3:7f:59:d6:34:36:94:
66:2e:74:52:1c:95:d5:98:56:53:dc:b3:7c:07:17:
7c:b4:bd:92:ea:30:0b:47:ac:38:8d:5c:22:0e:d3:
1a:d8:ee:72:be:3e:18:0a:a5:10:15:a2:d6:69:b7:
4f:f3:dc:14:bc:b0:57:37:4c:b5:a8:83:6f:e7:2c:
38:29:60:83:0f:6d:1c:72:3b:3f:bb:42:a9:20:48:
a6:c1:ae:bf:53:70:b7:d3:2a:6a:e1:2b:d3:21:84:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:79:58:81:4F:C8:F6:E1:3A:BB:3E:2F:B5:2E:5D:CA:28:A2:8E
X509v3 Authority Key Identifier:
keyid:87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_cYJqExaaYp5xqJ264QhzCiqgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/8nB5WIFPyPbhOrs-L7UuXcoooo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a4:81:60:07:41:65:4b:58:63:45:bd:bb:4b:68:86:36:5b:
22:0c:df:11:c2:df:1c:07:5b:5b:08:09:be:da:3d:d6:a0:46:
2b:43:0f:fc:f5:a6:f5:56:73:b1:77:77:13:e5:29:28:56:d3:
be:1c:41:de:29:05:63:0f:6e:e8:53:15:12:43:e4:77:cd:be:
ed:1d:1b:e6:4c:bc:28:95:68:9d:35:13:15:5a:ef:8d:1c:92:
23:25:56:f2:c4:80:0e:2e:02:ac:36:1e:17:2e:87:46:d9:11:
e5:9e:e4:44:29:2a:1d:8e:56:6c:fa:ac:ef:9d:8b:05:fa:88:
31:db:c6:e5:80:8f:13:0f:49:11:2c:17:26:47:90:8e:c5:6a:
f4:67:ad:9c:90:ea:6e:c3:cc:ab:e9:95:c3:ac:a0:e8:b5:fe:
ab:bc:fb:b2:54:98:65:e2:30:ec:2e:4a:79:9c:04:f0:6a:57:
16:ba:c2:05:1f:b5:6f:ee:45:bf:0d:42:f2:07:f6:7c:65:26:
90:95:f4:9a:1c:39:3d:f5:97:06:91:9d:a3:fd:7f:dd:41:db:
6d:46:d6:28:88:7c:76:a5:9b:6f:e9:73:d5:98:17:71:33:2b:
f4:3a:30:f9:72:6f:98:27:2d:44:ca:fa:91:12:59:35:ca:6a:
d6:ab:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:54 2024 by rpki-client on console-ams.rpki-client.org