Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/sJCwBjMsmpD4aQkTmyLBL9IH-MA.roa
File: sJCwBjMsmpD4aQkTmyLBL9IH-MA.roa (raw, json)
Hash identifier: GxhxeBdzfzzH7Z+L478XO2FxQQse7w3xf4lMEA10R6o=
Subject key identifier: B0:90:B0:06:33:2C:9A:90:F8:69:09:13:9B:22:C1:2F:D2:07:F8:C0
Certificate issuer: /CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Certificate serial: 018413943A58773DA66CBDC8EB94D545B0A9
Authority key identifier: 67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/sJCwBjMsmpD4aQkTmyLBL9IH-MA.roa
Signing time: Wed 26 Oct 2022 09:16:32 +0000
ROA not before: Wed 26 Oct 2022 09:16:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211557
IP address blocks: 195.85.205.0/24 maxlen: 24
195.85.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:94:3a:58:77:3d:a6:6c:bd:c8:eb:94:d5:45:b0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfd7fae20d1d34b779dab669b8f0f07c9c34f8
Validity
Not Before: Oct 26 09:16:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b090b006332c9a90f86909139b22c12fd207f8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:ce:73:7f:85:27:73:11:99:71:ef:d2:6a:
97:59:4a:fc:db:0e:ca:6f:7a:90:39:d2:15:8c:d2:
8e:04:4d:12:8b:28:2c:f2:05:0d:f8:89:4c:ea:be:
b5:ed:5b:ec:18:dc:85:0e:7d:bb:a9:df:5a:f4:e5:
89:b0:29:6f:1d:6e:97:25:da:1f:ca:6e:2a:4e:4e:
7f:91:d3:85:70:7c:1a:79:08:22:30:af:de:db:d2:
27:8b:3d:09:69:81:67:8e:d4:57:44:bd:51:d4:78:
e6:20:05:b5:8d:70:a5:ca:b8:e1:11:62:ff:51:21:
66:b8:4d:af:ea:b7:22:fc:4c:c1:2c:9e:19:4d:3c:
a8:b2:2e:1e:0d:c0:8d:36:2a:c9:ca:a5:ef:a6:5c:
d3:ea:cb:a0:24:6a:25:6a:ec:67:7f:9d:6f:32:d2:
70:1f:9e:bd:62:9f:37:cf:0a:22:9e:9d:8d:e2:c0:
be:0b:08:30:66:03:a5:a5:12:43:af:4e:cc:c8:14:
74:df:0f:e5:01:f9:29:06:3d:de:b8:95:c5:43:15:
3e:56:7d:fe:95:b7:3b:5a:10:8b:c4:34:e7:89:80:
9c:e5:96:59:66:f5:b7:88:6a:db:51:9e:75:35:20:
61:f8:03:3f:34:ea:04:07:1a:5d:3f:b9:cb:ef:54:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:90:B0:06:33:2C:9A:90:F8:69:09:13:9B:22:C1:2F:D2:07:F8:C0
X509v3 Authority Key Identifier:
keyid:67:CF:D7:FA:E2:0D:1D:34:B7:79:DA:B6:69:B8:F0:F0:7C:9C:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8_X-uINHTS3edq2abjw8HycNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/sJCwBjMsmpD4aQkTmyLBL9IH-MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/62343d-d924-4378-a121-2b68ab2ad2e9/1/Z8_X-uINHTS3edq2abjw8HycNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.201.0/24
195.85.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:da:02:5a:e1:53:93:5d:89:e1:b0:e1:26:a0:c7:42:23:6a:
98:bb:c5:1b:8d:20:eb:ce:b8:6b:57:2b:fb:6d:39:19:4f:35:
85:76:23:b3:59:7c:b7:a3:da:a1:bf:52:fc:45:30:f8:71:15:
08:a2:28:26:fd:ea:81:69:62:34:81:7d:f6:53:2b:39:ed:7a:
25:4f:fc:55:df:7b:b2:c0:54:84:ac:e2:3f:0f:14:df:73:ea:
e7:ea:4c:dc:43:2d:c1:06:b4:cd:e5:73:32:f8:43:ad:46:72:
bc:50:38:a3:ae:ab:20:64:8c:24:cb:a3:42:cb:3d:44:f5:90:
f5:65:88:65:46:86:1e:e9:d5:d8:23:bb:e8:39:14:cd:ea:e2:
e6:0e:6d:49:c7:f3:97:90:d4:35:98:28:f3:95:d7:d1:6f:10:
ef:14:4e:21:df:5f:37:e7:dd:cf:7a:20:27:11:dd:71:fb:d8:
53:5a:94:28:f1:1e:eb:0d:f0:df:6f:47:94:4a:87:7b:fb:07:
19:31:e5:45:ef:78:3f:87:70:cb:d8:81:dd:ea:c1:ab:60:a0:
7b:9d:01:86:c9:9d:09:c3:66:5e:d2:d4:7f:0a:60:d1:8b:7b:
1a:5b:fe:4b:aa:2f:0c:08:23:8f:73:f6:97:3f:b2:7d:c4:77:
c1:6a:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org