Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/C_JzV4t_jDw3KWc_urd8ZGtmuPI.roa
File: C_JzV4t_jDw3KWc_urd8ZGtmuPI.roa (raw, json)
Hash identifier: BNcQHm29UaVuzA3YSf1sBx8E1nqoYnvCfiOywD8imvk=
Subject key identifier: 0B:F2:73:57:8B:7F:8C:3C:37:29:67:3F:BA:B7:7C:64:6B:66:B8:F2
Certificate issuer: /CN=37b8e01522959517f2fc7a9b02f7c32f9c21ead0
Certificate serial: 01856D4A95D191C3477C814A1BD92D954E0F
Authority key identifier: 37:B8:E0:15:22:95:95:17:F2:FC:7A:9B:02:F7:C3:2F:9C:21:EA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7jgFSKVlRfy_HqbAvfDL5wh6tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/C_JzV4t_jDw3KWc_urd8ZGtmuPI.roa
Signing time: Sun 01 Jan 2023 12:24:42 +0000
ROA not before: Sun 01 Jan 2023 12:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206774
IP address blocks: 195.64.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:95:d1:91:c3:47:7c:81:4a:1b:d9:2d:95:4e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8e01522959517f2fc7a9b02f7c32f9c21ead0
Validity
Not Before: Jan 1 12:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bf273578b7f8c3c3729673fbab77c646b66b8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:e8:31:12:a6:0c:99:9b:db:7d:81:2d:bb:
ef:70:d6:62:da:78:d3:54:1c:bc:35:6c:1a:96:ab:
14:6b:e3:8b:76:31:35:e0:ed:ba:eb:94:d4:92:35:
bd:00:e3:62:e6:8c:d6:73:4f:d6:05:ef:bb:13:43:
c3:30:26:74:1b:a1:e3:59:f6:03:19:ef:08:1f:f4:
97:23:36:1b:bf:a2:ca:db:39:3f:5a:e4:f3:9f:71:
bf:2e:aa:9d:57:85:a3:18:47:eb:15:4c:4a:5f:37:
48:d9:2a:12:70:a3:a8:b9:a3:95:25:30:32:ec:69:
d4:a1:9b:1e:4c:f0:5b:ff:e6:df:fc:e7:b2:fe:45:
e8:d6:af:c1:a1:3f:60:49:bf:4b:2e:f8:45:43:45:
b2:40:fb:a6:d4:74:da:69:41:cb:72:67:f0:fa:8c:
29:e3:c4:31:d8:c5:d9:7d:24:3b:a0:13:3b:dd:01:
de:3d:d6:3c:f4:05:2f:6c:f0:5d:55:f3:19:bb:b4:
19:4a:88:bb:9d:fd:06:1f:c4:f7:92:54:76:1b:c3:
70:72:95:37:b1:96:be:94:57:ee:1d:0b:fb:cf:74:
e6:9e:d8:7d:52:63:3c:b0:4d:67:56:a5:2e:00:43:
eb:34:a3:b4:d2:65:ba:3b:79:ad:29:db:3d:71:1e:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:73:57:8B:7F:8C:3C:37:29:67:3F:BA:B7:7C:64:6B:66:B8:F2
X509v3 Authority Key Identifier:
keyid:37:B8:E0:15:22:95:95:17:F2:FC:7A:9B:02:F7:C3:2F:9C:21:EA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7jgFSKVlRfy_HqbAvfDL5wh6tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/C_JzV4t_jDw3KWc_urd8ZGtmuPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/N7jgFSKVlRfy_HqbAvfDL5wh6tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.118.0/24
Signature Algorithm: sha256WithRSAEncryption
83:50:55:e7:74:1f:ff:ee:b1:b7:27:14:c8:ff:bb:5c:19:9b:
2a:28:f0:1f:43:05:e0:09:fd:1d:90:34:fa:31:25:ec:f7:48:
83:cd:d1:c1:5b:26:f7:8e:08:fe:14:0a:3c:43:1b:e6:8b:8a:
2a:08:4c:ba:d3:6b:97:70:1c:14:ba:27:3a:1d:59:d9:40:07:
46:c7:b5:52:3e:3d:dd:28:e9:95:ac:e3:f8:97:b7:ab:9b:2d:
ff:b4:a1:82:59:91:47:98:fd:56:3b:3b:d9:a4:75:1c:d7:35:
52:a1:cf:4c:00:5d:01:e8:dc:ef:e7:56:e3:6c:6a:98:84:16:
73:3b:fb:82:e0:8d:36:0d:a9:8e:cf:3b:bd:3a:42:0d:40:1c:
35:a8:a9:62:49:75:82:da:dc:0d:61:aa:35:e6:20:92:fb:0d:
cb:fe:95:7c:8a:90:df:79:30:8d:4a:ff:0e:7f:c1:89:6e:8f:
cc:25:83:04:3b:fc:00:ec:3a:f8:03:a5:8b:c8:21:ad:31:4e:
34:b9:37:08:97:41:9d:66:6f:cd:33:a9:86:85:c6:99:11:3a:
2b:30:9f:31:6b:2e:98:fa:59:15:d9:e0:9d:7a:6e:62:7c:2e:
6f:50:cf:87:4b:08:9a:12:42:c4:98:f1:d0:2b:ab:f6:0d:8b:
e6:99:e8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:01 2024 by rpki-client on console-ams.rpki-client.org