Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/n2GGlpf9cuKlmGTRCwiHYAF_NEg.roa
File: n2GGlpf9cuKlmGTRCwiHYAF_NEg.roa (raw, json)
Hash identifier: B7SUXKKlPAZvAiTtQSVISJDWYnCYrAMVb4JwQWzRAQE=
Subject key identifier: 9F:61:86:96:97:FD:72:E2:A5:98:64:D1:0B:08:87:60:01:7F:34:48
Certificate issuer: /CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Certificate serial: 018571CC265E81453D4DC788389D9C9DCAC6
Authority key identifier: 67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/n2GGlpf9cuKlmGTRCwiHYAF_NEg.roa
Signing time: Mon 02 Jan 2023 09:24:42 +0000
ROA not before: Mon 02 Jan 2023 09:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203576
IP address blocks: 195.85.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:26:5e:81:45:3d:4d:c7:88:38:9d:9c:9d:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Validity
Not Before: Jan 2 09:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f61869697fd72e2a59864d10b088760017f3448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:47:b1:e9:a8:af:8c:f4:b3:c5:57:4e:c4:
5f:aa:7f:d5:18:34:77:ae:b8:d0:6d:7b:4f:92:0a:
ce:6e:a1:f4:af:ca:51:38:47:34:d9:30:3f:ee:3f:
45:72:76:77:85:36:db:a0:b2:5a:12:7c:49:91:d5:
83:9e:19:69:c6:20:59:ca:a1:dd:93:e6:11:09:ea:
7e:a5:d5:56:e2:df:dc:b3:b2:e4:5b:c2:cd:bf:67:
55:ef:45:47:7e:c7:df:52:68:81:b9:94:e0:bf:50:
72:e4:e9:0e:c2:01:2c:40:79:33:d7:b9:26:a1:0d:
1b:2c:92:d3:83:5b:fa:0e:33:32:9c:4c:00:df:67:
7f:37:fe:34:41:b9:e3:d1:92:30:88:35:61:1f:81:
02:7c:7e:80:44:85:0f:9a:7a:5e:a0:37:a0:84:52:
94:9d:a1:d8:aa:47:42:d0:e9:09:16:d8:9a:b5:c5:
33:6a:53:be:84:f9:4b:0e:ae:fe:03:e9:f6:1c:8d:
85:eb:05:4a:99:de:53:fc:0e:6e:67:ab:b1:04:f1:
d2:95:f0:87:fc:81:3c:19:f0:4d:4d:3c:ca:5f:d4:
94:06:bb:17:4e:4a:43:e5:ea:b5:54:5e:15:2d:1a:
4d:be:56:b9:4b:ee:b0:f8:6b:ea:8f:8f:f3:14:e9:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:61:86:96:97:FD:72:E2:A5:98:64:D1:0B:08:87:60:01:7F:34:48
X509v3 Authority Key Identifier:
keyid:67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/n2GGlpf9cuKlmGTRCwiHYAF_NEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/Z8_X-uINHTS3edq2abjw8HycNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.207.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3b:73:14:63:ca:84:05:7a:02:39:12:b7:73:14:3d:b0:f2:
95:46:4d:e2:7c:0a:e1:33:d4:0f:59:5c:8d:8b:99:b0:ef:7e:
55:a1:2b:77:90:5f:6f:26:25:77:f7:db:c9:9c:ca:ff:fa:9c:
af:37:6e:2e:46:bc:10:d4:94:e1:3f:0e:36:e3:cd:38:93:54:
31:bb:db:3c:f1:e2:a5:10:04:df:a9:37:1b:7d:73:a1:1a:c9:
fb:5b:3b:15:16:af:b9:98:20:28:eb:51:ea:55:8c:32:37:6d:
b6:4a:04:94:82:5b:48:73:0a:0e:26:ed:60:19:b1:64:35:cd:
83:7d:56:d9:e1:31:b6:ab:83:b6:ea:86:84:42:35:e7:a1:5e:
d7:a1:aa:3c:4b:72:fe:4e:04:e3:ba:3e:20:9a:ef:53:c5:5f:
71:c7:3a:4a:cf:bf:7e:97:da:e5:80:31:9b:ff:4f:9f:f1:9d:
47:88:14:03:bb:39:70:a5:59:b0:ca:d5:eb:70:0a:f6:ea:7f:
a8:43:1f:5e:2b:b7:91:5d:83:bd:10:45:cd:b2:35:70:88:87:
3f:84:00:a2:cd:1a:da:2f:4b:cc:57:b0:11:9b:02:de:28:5d:
28:f8:e0:14:19:03:f3:e1:ec:f4:7e:41:a1:22:73:2d:fd:a6:
d6:11:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org