Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/UVuDgF0KF2ppqIOJExJZnZHOICs.roa
File: UVuDgF0KF2ppqIOJExJZnZHOICs.roa (raw, json)
Hash identifier: DeyoeGIJiaT0PYO+uG4rxe0/VDSK21IYP/5P6iLE6L0=
Subject key identifier: 51:5B:83:80:5D:0A:17:6A:69:A8:83:89:13:12:59:9D:91:CE:20:2B
Certificate issuer: /CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Certificate serial: 018571CC278E677265C08EC48A466D700014
Authority key identifier: 67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/UVuDgF0KF2ppqIOJExJZnZHOICs.roa
Signing time: Mon 02 Jan 2023 09:24:42 +0000
ROA not before: Mon 02 Jan 2023 09:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211557
IP address blocks: 195.85.205.0/24 maxlen: 24
195.85.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:27:8e:67:72:65:c0:8e:c4:8a:46:6d:70:00:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Validity
Not Before: Jan 2 09:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=515b83805d0a176a69a883891312599d91ce202b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:ea:51:0c:63:7c:0a:84:99:2c:08:6e:ce:
0a:ab:31:ed:9b:e3:28:ee:ca:20:b0:fe:25:e2:c7:
b1:a7:25:99:b5:7a:c8:fe:9f:c3:d8:d8:e9:ee:13:
74:db:8e:6f:84:57:2a:0e:22:b3:b0:e0:29:97:fc:
c4:7c:0b:55:34:c0:5c:26:72:d1:7e:7d:a6:16:20:
37:a2:0f:d3:08:a2:eb:7c:42:5d:40:3d:3a:77:18:
4c:35:7a:ff:7e:b7:e1:c8:8b:a9:2d:27:dc:65:52:
8c:0b:94:29:80:d7:26:d8:cd:ed:7f:7d:f1:b6:7f:
7b:ff:19:40:9c:0d:d4:03:74:88:03:64:44:27:09:
76:94:9b:3d:88:cc:fc:d8:a0:0d:87:08:4f:eb:aa:
2a:d1:89:8f:3a:2e:f9:8a:d7:59:a0:02:7e:72:a2:
e9:c8:26:1a:5f:cf:29:1d:67:d2:38:b1:60:1d:63:
86:98:8b:9e:3c:af:f4:4f:68:e4:f2:13:49:bd:1c:
08:3f:5b:35:16:e2:1c:86:2d:5e:78:be:97:a8:ca:
50:cd:46:eb:5e:52:c2:72:84:36:13:bc:d3:f2:fa:
14:24:8a:8c:54:50:65:75:b7:41:d5:31:7b:85:42:
b3:cc:2c:d3:19:67:00:ce:00:1c:d4:ce:61:4e:f4:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5B:83:80:5D:0A:17:6A:69:A8:83:89:13:12:59:9D:91:CE:20:2B
X509v3 Authority Key Identifier:
keyid:67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/UVuDgF0KF2ppqIOJExJZnZHOICs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/Z8_X-uINHTS3edq2abjw8HycNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.201.0/24
195.85.205.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fc:3f:87:8e:47:e3:78:91:c0:da:fb:22:45:2f:a2:69:17:
04:1b:24:04:3f:b9:e3:e6:36:c5:4a:d4:72:2d:43:06:74:f0:
bd:8c:33:fc:d9:ad:a4:d5:21:ea:46:ea:8e:fe:da:38:20:01:
b9:d3:13:b3:04:81:58:20:8d:fd:5f:ce:a7:3a:40:8a:53:df:
ef:f9:33:1a:8e:82:4e:11:fa:b7:0f:51:7f:a4:29:bc:90:97:
6a:00:b8:5c:80:a2:8f:34:10:70:35:e2:24:10:46:de:96:26:
27:60:b3:6d:db:27:1a:b0:14:c8:01:51:f6:64:3d:c7:ea:17:
10:ff:f3:0b:93:c7:44:2d:a2:7a:70:58:b8:8c:f9:a8:de:ec:
bf:31:a5:dc:f1:46:64:4f:fe:df:8a:9c:5b:14:cf:c0:bf:17:
1e:c7:99:ee:0c:2a:2e:2f:a9:33:ca:95:8c:69:6b:44:60:76:
d6:16:27:b8:6f:25:31:d4:ed:1f:2f:0c:12:f1:d4:b3:fa:48:
27:0c:11:1d:e3:0f:10:65:6d:7b:c6:f4:d6:73:f7:9c:3f:54:
29:ca:08:07:5d:b6:ea:97:fb:3a:87:72:75:86:71:c8:5e:e5:
77:e1:28:65:d8:74:3c:8f:bc:fc:37:45:a6:37:34:fb:11:66:
db:08:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org