Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/hk6HR0CNwLdYDbAUqwNtF74dcGI.roa
File: hk6HR0CNwLdYDbAUqwNtF74dcGI.roa (raw, json)
Hash identifier: GIHIX1jovy4vPHUJNd48IyEfWPat8dok3K+osV+ssS0=
Subject key identifier: 86:4E:87:47:40:8D:C0:B7:58:0D:B0:14:AB:03:6D:17:BE:1D:70:62
Certificate issuer: /CN=37b8e01522959517f2fc7a9b02f7c32f9c21ead0
Certificate serial: 018C594E80DB4E6BD14BB952289046D9F5F1
Authority key identifier: 37:B8:E0:15:22:95:95:17:F2:FC:7A:9B:02:F7:C3:2F:9C:21:EA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7jgFSKVlRfy_HqbAvfDL5wh6tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/hk6HR0CNwLdYDbAUqwNtF74dcGI.roa
Signing time: Mon 11 Dec 2023 14:36:06 +0000
ROA not before: Mon 11 Dec 2023 14:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211309
IP address blocks: 195.64.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:4e:80:db:4e:6b:d1:4b:b9:52:28:90:46:d9:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8e01522959517f2fc7a9b02f7c32f9c21ead0
Validity
Not Before: Dec 11 14:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=864e8747408dc0b7580db014ab036d17be1d7062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:10:7a:8d:d7:42:91:c2:98:a1:0a:55:30:
a4:62:6e:9c:16:ce:ba:f6:04:2d:13:8f:87:52:b4:
b5:a5:33:31:ae:f1:00:91:14:4f:a1:d9:f2:b9:33:
bd:88:10:6e:34:8e:b4:f5:1b:bc:23:5d:da:5f:b9:
8f:50:a3:ed:16:98:1a:00:7d:c2:ea:c3:db:34:b3:
55:92:5a:ee:2b:1d:a0:30:ff:be:fc:0f:4e:23:d4:
0f:4d:8a:44:14:c2:ca:ef:11:38:dc:52:8a:a7:68:
5f:e2:97:5c:f5:20:26:d3:77:f5:7b:63:95:0b:2e:
6e:65:c9:53:1c:cb:d9:cb:81:08:82:27:ca:6c:e7:
cf:f2:fb:11:91:4b:44:df:db:a8:e0:d5:b6:8f:45:
92:4a:7d:52:a8:94:9b:79:ea:af:e2:22:77:bf:7b:
cf:7b:5d:9d:bb:31:e9:1f:16:ed:fd:f8:c3:bd:f5:
59:5a:fb:01:ae:af:c1:56:5a:86:91:38:e1:2c:78:
5c:7f:1b:db:81:68:d2:8c:d7:15:73:d1:fa:5e:d5:
48:43:94:08:ad:e7:80:b4:d8:c5:6e:a0:4e:4e:89:
4b:5f:4e:59:59:e7:f9:63:b9:58:fa:ac:63:30:4a:
91:20:1c:99:ec:1f:d1:a3:19:c1:18:42:70:02:39:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4E:87:47:40:8D:C0:B7:58:0D:B0:14:AB:03:6D:17:BE:1D:70:62
X509v3 Authority Key Identifier:
keyid:37:B8:E0:15:22:95:95:17:F2:FC:7A:9B:02:F7:C3:2F:9C:21:EA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7jgFSKVlRfy_HqbAvfDL5wh6tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/hk6HR0CNwLdYDbAUqwNtF74dcGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0026fd-a273-4ffa-b160-7f82f79011b2/1/N7jgFSKVlRfy_HqbAvfDL5wh6tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9f:80:7e:e9:56:3c:3e:3b:b7:5b:35:0a:aa:9b:3c:71:ef:
fa:0d:13:32:7a:5f:c8:cb:4c:8c:03:5d:b4:76:3e:5f:92:1f:
f9:61:b5:45:8c:90:cb:63:05:6b:db:7a:c7:de:00:61:a8:87:
7c:11:7e:8a:a7:b2:a6:e4:99:66:21:51:1c:49:46:9b:a6:18:
bb:b9:9f:8d:6d:c2:3e:e5:41:95:6b:c1:7a:d3:cb:b4:14:8c:
62:81:5a:ed:c0:bf:e8:3f:6f:86:79:e6:1e:42:15:52:02:5e:
f5:dc:b6:1f:0a:20:24:ad:4e:89:fc:e5:ca:c0:78:2b:21:96:
30:44:52:d2:7c:f3:eb:8a:95:66:42:68:ba:6e:b1:e7:d8:c2:
61:f8:44:d0:f1:38:6e:45:12:d7:6b:48:f8:59:3e:53:08:bc:
22:e0:35:b3:ea:b7:36:12:e4:81:32:44:c4:49:e0:2f:e7:9f:
45:c1:5a:da:37:10:f4:45:59:91:83:aa:ea:22:f4:05:56:79:
24:1c:c6:ed:cd:ea:45:53:b9:54:f5:f9:29:05:ca:fb:4c:60:
3f:3d:22:4a:b6:36:f5:56:9d:7e:a6:5c:a2:c3:1d:97:a0:a1:
69:91:3f:16:fb:3c:34:fb:29:2f:56:f2:ad:c2:07:16:93:0c:
d5:43:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org