Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/1-u7nt_8nCUVg2nSDJdPDWYjPLsU.roa
File: 1-u7nt_8nCUVg2nSDJdPDWYjPLsU.roa (raw, json)
Hash identifier: ZmsWBa2sDsKk6pQC3ZN2pnnIQJ7+ugLYM+7sK34kNNg=
Subject key identifier: FA:EE:E7:B7:FF:27:09:45:60:DA:74:83:25:D3:C3:59:88:CF:2E:C5
Certificate issuer: /CN=37b8e01522959517f2fc7a9b02f7c32f9c21ead0
Certificate serial: 018CC26CF92A1FBF054815405E297AB00F51
Authority key identifier: 37:B8:E0:15:22:95:95:17:F2:FC:7A:9B:02:F7:C3:2F:9C:21:EA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7jgFSKVlRfy_HqbAvfDL5wh6tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/1-u7nt_8nCUVg2nSDJdPDWYjPLsU.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211309
IP address blocks: 195.64.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f9:2a:1f:bf:05:48:15:40:5e:29:7a:b0:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8e01522959517f2fc7a9b02f7c32f9c21ead0
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faeee7b7ff27094560da748325d3c35988cf2ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:51:7a:04:a9:b8:c4:7b:b6:4d:a6:2d:4d:
c6:29:bf:a5:99:47:95:5c:a3:0f:66:e9:a7:52:19:
5e:83:6d:23:2f:f8:93:b4:91:45:97:0d:31:28:86:
63:c4:90:f4:7e:20:fd:03:13:f6:e8:c8:f4:fa:60:
11:e3:4b:7b:8f:0f:81:26:5f:32:df:da:8e:f3:14:
7f:8f:b8:24:cc:a4:c3:8c:11:34:d8:13:30:4b:f2:
f5:68:4d:54:e3:4e:22:0f:f3:5f:19:18:a4:7d:e3:
66:d5:ed:59:73:3b:f0:0c:13:ce:26:dd:a3:bc:82:
aa:6e:86:42:2b:27:a0:38:aa:0b:5a:52:c1:07:41:
7f:9f:b2:73:9c:46:3a:93:2f:46:f8:24:1d:c2:6d:
63:24:0b:3e:85:5f:e8:82:11:f3:ee:43:8d:00:da:
93:26:fe:85:cb:01:a9:35:c7:aa:b9:93:9a:e9:6c:
c8:1a:d8:e8:00:3e:bf:0c:6e:83:b5:73:14:3f:54:
96:9d:0e:27:40:b0:00:cf:6c:ea:d9:bf:a5:4f:e7:
17:32:e6:9c:a1:1d:4f:23:17:e2:82:dd:76:b4:4a:
11:3f:41:e3:c2:89:b0:17:46:b4:d7:e9:d5:ca:08:
3f:58:80:ac:57:9c:6c:56:ce:50:b5:55:d7:14:f3:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:E7:B7:FF:27:09:45:60:DA:74:83:25:D3:C3:59:88:CF:2E:C5
X509v3 Authority Key Identifier:
keyid:37:B8:E0:15:22:95:95:17:F2:FC:7A:9B:02:F7:C3:2F:9C:21:EA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7jgFSKVlRfy_HqbAvfDL5wh6tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/1-u7nt_8nCUVg2nSDJdPDWYjPLsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/N7jgFSKVlRfy_HqbAvfDL5wh6tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:eb:5f:2d:0f:14:ae:ab:33:2f:90:01:81:ac:af:e9:76:8d:
e7:d0:9f:76:83:8d:3d:5e:83:97:26:ae:3a:d0:63:db:00:01:
e9:1c:7c:c4:a1:b4:bb:51:e8:5a:6d:67:c3:67:43:9f:45:d8:
c8:1a:d9:00:59:56:63:4f:de:0f:33:93:ce:a9:00:91:b2:69:
4b:47:c6:83:d2:fd:4a:dc:b1:4f:fe:4d:a6:76:35:4b:d8:46:
2b:9a:94:cd:ef:43:4f:35:1f:de:53:1e:3b:36:1d:7a:c6:f0:
e3:a5:fb:c6:1e:ae:82:b2:f8:6b:c3:be:72:89:36:80:e1:d0:
e9:59:98:5a:0e:93:ea:6d:ad:09:aa:1d:35:56:ee:c9:49:03:
72:e2:b8:f5:38:eb:d0:c0:19:f8:a2:c3:04:00:f3:6e:75:51:
5f:87:e1:64:97:87:0e:d7:39:a5:e7:af:3e:cc:13:b8:f5:2f:
9e:03:1d:ac:d2:dd:01:6c:ab:26:5c:12:a3:ff:f5:69:10:8c:
b8:3e:53:33:a1:30:9d:02:84:0d:63:06:aa:2f:81:5c:f5:2f:
40:74:12:e6:85:9c:58:9c:e0:c5:96:df:a7:6f:65:9a:c4:4f:
27:52:7a:d8:14:0c:e7:8e:98:a4:67:03:f5:8a:7c:58:1e:4b:
1f:5f:c5:51
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzCbPkqH78FSBVAXil6sA9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YjhlMDE1MjI5NTk1MTdmMmZjN2E5YjAyZjdjMzJmOWMy
MWVhZDAwHhcNMjQwMTAxMDAyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWVlZTdiN2ZmMjcwOTQ1NjBkYTc0ODMyNWQzYzM1OTg4Y2YyZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr15RegSpuMR7tk2mLU3GKb+lmUeV
XKMPZumnUhleg20jL/iTtJFFlw0xKIZjxJD0fiD9AxP26Mj0+mAR40t7jw+BJl8y
39qO8xR/j7gkzKTDjBE02BMwS/L1aE1U404iD/NfGRikfeNm1e1ZczvwDBPOJt2j
vIKqboZCKyegOKoLWlLBB0F/n7JznEY6ky9G+CQdwm1jJAs+hV/oghHz7kONANqT
Jv6FywGpNcequZOa6WzIGtjoAD6/DG6DtXMUP1SWnQ4nQLAAz2zq2b+lT+cXMuac
oR1PIxfigt12tEoRP0HjwomwF0a01+nVygg/WICsV5xsVs5QtVXXFPOU4wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPru57f/JwlFYNp0gyXTw1mIzy7FMB8GA1UdIwQY
MBaAFDe44BUilZUX8vx6mwL3wy+cIerQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjdqZ0ZTS1ZsUmZ5X0hxYkF2ZkRMNXdoNnRBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wMDI2ZmQtYTI3My00ZmZhLWIxNjAt
N2Y4MmY3OTAxMWIyLzEvMS11N250XzhuQ1VWZzJuU0RKZFBEV1lqUExzVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDMvMDAyNmZkLWEyNzMtNGZmYS1iMTYwLTdmODJmNzkwMTFi
Mi8xL043amdGU0tWbFJmeV9IcWJBdmZETDV3aDZ0QS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNAdjAN
BgkqhkiG9w0BAQsFAAOCAQEAoutfLQ8UrqszL5ABgayv6XaN59CfdoONPV6Dlyau
OtBj2wAB6Rx8xKG0u1HoWm1nw2dDn0XYyBrZAFlWY0/eDzOTzqkAkbJpS0fGg9L9
StyxT/5NpnY1S9hGK5qUze9DTzUf3lMeOzYdesbw46X7xh6ugrL4a8O+cok2gOHQ
6VmYWg6T6m2tCaodNVbuyUkDcuK49Tjr0MAZ+KLDBADzbnVRX4fhZJeHDtc5peev
PswTuPUvngMdrNLdAWyrJlwSo//1aRCMuD5TM6EwnQKEDWMGqi+BXPUvQHQS5oWc
WJzgxZbfp29lmsRPJ1J62BQM546YpGcD9Yp8WB5LH1/FUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org