Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/038d1b-840b-4772-ae7e-def03d51fea4/1/cdVsPSVdnL0q_FzvuP1Huvn-Bf8.roa
File: cdVsPSVdnL0q_FzvuP1Huvn-Bf8.roa (raw, json)
Hash identifier: /cLRNrL+xi0B6KBhLtC+VmYCMp2q4/RmSqVqvEhdiM0=
Subject key identifier: 71:D5:6C:3D:25:5D:9C:BD:2A:FC:5C:EF:B8:FD:47:BA:F9:FE:05:FF
Certificate issuer: /CN=f2f0a391aaa6d790aae280ca589b28f444f71f57
Certificate serial: 018220896D902D0B46CDFEC8363912AEC61A
Authority key identifier: F2:F0:A3:91:AA:A6:D7:90:AA:E2:80:CA:58:9B:28:F4:44:F7:1F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vCjkaqm15Cq4oDKWJso9ET3H1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/038d1b-840b-4772-ae7e-def03d51fea4/1/cdVsPSVdnL0q_FzvuP1Huvn-Bf8.roa
Signing time: Thu 21 Jul 2022 11:34:13 +0000
ROA not before: Thu 21 Jul 2022 11:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 195.96.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:89:6d:90:2d:0b:46:cd:fe:c8:36:39:12:ae:c6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f0a391aaa6d790aae280ca589b28f444f71f57
Validity
Not Before: Jul 21 11:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71d56c3d255d9cbd2afc5cefb8fd47baf9fe05ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:96:92:ee:33:3d:48:5a:42:c6:2d:68:b6:
89:48:15:f3:10:5f:ad:86:04:51:88:e1:3e:35:db:
2a:21:03:33:71:e8:8a:0d:05:82:c2:65:9a:49:2b:
57:28:0c:16:26:33:06:45:df:34:d3:63:7c:98:d5:
4b:a2:64:cd:33:3e:27:77:75:62:7e:66:33:09:64:
41:75:d1:11:e6:9c:ff:7e:09:be:51:1e:4d:0c:09:
2b:e4:fe:e9:e9:f9:6c:fe:82:47:4f:36:79:5c:c4:
e8:c1:8c:ce:f4:c3:1c:b2:d0:1d:f4:d7:fd:6a:65:
a2:1b:17:74:44:e8:e1:2b:4e:fb:18:bf:b1:77:ae:
88:69:28:a9:12:e4:03:73:a5:9f:75:4f:f3:7f:9e:
62:66:fa:6a:30:f6:4b:5d:07:9e:92:94:2c:c1:c6:
d2:1f:40:ec:44:80:77:fd:8d:4d:c7:7e:f7:d2:14:
bf:e7:ec:eb:3c:a3:83:5d:c9:ef:13:9d:81:cb:ac:
54:94:7b:3e:48:e9:6d:f6:6c:3c:a5:ad:de:1a:65:
24:2d:d3:e8:e2:d3:1b:b6:cd:a5:65:d2:34:ae:3c:
d1:87:05:0f:4c:00:e5:58:ee:fb:22:f4:19:5e:fc:
44:f3:49:53:7e:37:69:04:bb:c5:7f:d5:52:54:c0:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D5:6C:3D:25:5D:9C:BD:2A:FC:5C:EF:B8:FD:47:BA:F9:FE:05:FF
X509v3 Authority Key Identifier:
keyid:F2:F0:A3:91:AA:A6:D7:90:AA:E2:80:CA:58:9B:28:F4:44:F7:1F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vCjkaqm15Cq4oDKWJso9ET3H1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/038d1b-840b-4772-ae7e-def03d51fea4/1/cdVsPSVdnL0q_FzvuP1Huvn-Bf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/038d1b-840b-4772-ae7e-def03d51fea4/1/8vCjkaqm15Cq4oDKWJso9ET3H1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.130.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bd:73:7c:e8:80:28:dc:af:84:b5:fb:d9:29:4b:4a:3b:66:
7a:54:e7:dc:5f:fc:1f:8d:76:26:67:22:ce:dd:52:0f:0e:13:
c2:f5:98:9c:7a:43:7b:69:52:84:e7:63:dd:ba:a7:53:62:4a:
16:b0:5c:bb:61:6c:b1:bb:99:92:e4:9e:b2:a0:af:16:f4:4f:
ac:c7:f5:da:91:da:94:a0:27:dc:73:45:d8:f0:c1:e8:64:73:
b7:be:d3:45:af:61:89:18:e3:67:b2:6c:30:5d:3b:73:d8:33:
2e:08:8f:c1:07:08:86:d7:c1:d6:bf:f2:18:5c:4d:86:31:69:
84:51:e1:a1:94:37:4a:65:aa:c7:e4:29:ac:8f:f0:96:1f:b2:
07:33:45:ba:97:c3:44:32:e4:63:f4:e7:79:f0:96:81:48:a0:
42:d2:7d:47:44:ea:78:96:1e:83:51:28:c6:28:97:57:ea:3c:
8b:38:3d:f6:ba:06:83:7a:5a:9f:2d:7a:38:c9:69:b9:6e:5e:
18:1b:3f:32:d4:50:11:f3:90:7d:d7:b6:4f:e1:88:b8:56:f8:
e1:a2:8f:03:4f:9e:b3:08:21:e2:dc:c2:b7:29:fe:a2:ff:d1:
78:0c:1a:af:d4:43:91:51:8d:3f:c3:c5:dc:00:d5:a9:fb:e7:
47:c8:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org