Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/038d1b-840b-4772-ae7e-def03d51fea4/1/VLXAHCjYi1IiDa2OPtaLAZ53I_I.roa
File: VLXAHCjYi1IiDa2OPtaLAZ53I_I.roa (raw, json)
Hash identifier: 8KekLAsc0SXMMPgn2l4gFBNWK+o6s5cZYgP5xlDHwsg=
Subject key identifier: 54:B5:C0:1C:28:D8:8B:52:22:0D:AD:8E:3E:D6:8B:01:9E:77:23:F2
Certificate issuer: /CN=f2f0a391aaa6d790aae280ca589b28f444f71f57
Certificate serial: 0185730CA7F5F29766BE7BD7265EDB692387
Authority key identifier: F2:F0:A3:91:AA:A6:D7:90:AA:E2:80:CA:58:9B:28:F4:44:F7:1F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vCjkaqm15Cq4oDKWJso9ET3H1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/038d1b-840b-4772-ae7e-def03d51fea4/1/VLXAHCjYi1IiDa2OPtaLAZ53I_I.roa
Signing time: Mon 02 Jan 2023 15:14:47 +0000
ROA not before: Mon 02 Jan 2023 15:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 195.96.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:a7:f5:f2:97:66:be:7b:d7:26:5e:db:69:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f0a391aaa6d790aae280ca589b28f444f71f57
Validity
Not Before: Jan 2 15:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54b5c01c28d88b52220dad8e3ed68b019e7723f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:a5:5e:4c:00:5f:fa:cf:4c:48:68:d6:a2:
a1:86:50:6b:14:f2:49:95:f9:98:58:53:fa:fd:13:
44:4a:b6:2f:d2:48:3a:6c:e4:c1:41:ca:7d:71:3f:
fd:8c:8c:14:58:23:fe:e3:34:ea:2a:49:51:29:9a:
c6:cf:9b:08:fa:16:76:7a:11:e0:ba:6c:98:03:a8:
a6:ae:a5:3b:33:fc:c6:b7:e9:db:07:89:c7:e3:ba:
9f:a1:7f:50:6f:62:be:2a:44:91:f7:51:0f:b1:39:
e2:32:36:2f:77:ec:06:bd:08:65:21:bd:fc:16:3e:
27:56:d3:5f:3b:ec:61:16:c8:74:50:3e:d2:37:fd:
25:36:61:89:c1:3f:42:bc:6a:e2:07:a3:94:b9:ab:
cc:da:39:6f:11:b0:3a:3f:b6:e0:70:9a:47:ee:cc:
23:08:bd:f3:09:18:e2:af:f5:f9:f6:60:a7:14:1a:
c4:47:92:aa:68:ef:37:39:e2:e0:4f:5e:90:08:ab:
25:9e:46:94:d2:6c:a3:7d:2c:83:16:05:c3:55:b1:
2b:0a:76:1f:40:a8:bb:84:5b:8e:7e:05:e1:d1:00:
a5:eb:2e:9e:cf:b1:5b:db:b1:0b:83:3d:0d:6f:50:
fb:ab:08:71:37:22:eb:d2:46:08:59:56:4e:69:c0:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:C0:1C:28:D8:8B:52:22:0D:AD:8E:3E:D6:8B:01:9E:77:23:F2
X509v3 Authority Key Identifier:
keyid:F2:F0:A3:91:AA:A6:D7:90:AA:E2:80:CA:58:9B:28:F4:44:F7:1F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vCjkaqm15Cq4oDKWJso9ET3H1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/038d1b-840b-4772-ae7e-def03d51fea4/1/VLXAHCjYi1IiDa2OPtaLAZ53I_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/038d1b-840b-4772-ae7e-def03d51fea4/1/8vCjkaqm15Cq4oDKWJso9ET3H1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:05:44:0b:7a:5e:da:69:d5:59:af:19:9d:f5:cc:7d:45:13:
25:16:30:0b:f3:da:d4:b8:0e:de:0d:e3:3b:c3:21:d2:af:f2:
30:62:94:a2:dd:1f:95:e8:98:84:79:39:18:23:b8:b8:67:18:
98:50:2e:b2:92:ea:56:70:dd:eb:ac:ad:1d:d4:5a:9b:59:0a:
08:1d:25:6e:56:37:3c:67:39:aa:5f:11:73:52:06:91:21:43:
5a:4c:6f:76:51:aa:5a:53:d6:93:9b:e1:de:98:70:72:26:9a:
f7:65:db:5b:18:50:85:17:0e:06:3d:c3:b6:37:ba:25:13:57:
f7:19:03:f2:53:47:ce:e7:33:1a:92:c3:37:2e:f3:17:7c:46:
d9:02:d8:69:eb:30:15:ed:dc:69:f7:0c:78:61:16:25:82:6f:
8d:a2:5e:1b:aa:e1:b1:d2:7b:95:3d:ef:4e:2e:af:27:4e:49:
f9:5c:cd:fe:2e:24:9a:6f:81:f6:d7:93:ff:1d:d8:cd:13:4e:
5c:f1:7c:94:8e:e0:7f:dc:a0:62:33:f5:44:e7:5a:34:38:70:
cd:6a:0d:1d:be:23:1f:5d:dc:75:36:ed:16:17:35:3a:26:b7:
49:f0:fd:21:8c:3e:64:07:47:f7:b7:50:9d:84:b7:55:81:d8:
58:87:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org