Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/H_-5thzsByCEn5OaE_yfLBLpuPY.roa
File: H_-5thzsByCEn5OaE_yfLBLpuPY.roa (raw, json)
Hash identifier: JiC9aIj/FJcym08aaNIcqtnfu1AfUpF7lxy6p3SxdgI=
Subject key identifier: 1F:FF:B9:B6:1C:EC:07:20:84:9F:93:9A:13:FC:9F:2C:12:E9:B8:F6
Certificate issuer: /CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Certificate serial: 01856F54A29D8A982D6BFFD739C8D1DC3D66
Authority key identifier: CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/H_-5thzsByCEn5OaE_yfLBLpuPY.roa
Signing time: Sun 01 Jan 2023 21:54:55 +0000
ROA not before: Sun 01 Jan 2023 21:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:a2:9d:8a:98:2d:6b:ff:d7:39:c8:d1:dc:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Validity
Not Before: Jan 1 21:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fffb9b61cec0720849f939a13fc9f2c12e9b8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:3a:77:cb:44:c0:dc:b8:dc:48:0c:a7:5f:
88:0e:8d:6b:0c:5e:81:67:ab:a6:ab:2d:74:6b:93:
2b:cd:71:18:6f:95:33:c9:b0:b2:29:ea:6e:51:bb:
92:b2:e3:44:40:7d:8c:59:96:9d:df:99:13:02:03:
de:be:8c:98:1a:e6:c8:41:af:9b:a0:76:94:9b:9c:
55:69:13:d9:96:f2:bf:25:7d:fe:8d:d3:97:47:3f:
07:a1:f9:e9:eb:c5:97:8a:ee:c0:6e:82:16:04:d8:
f7:b4:ad:39:bf:b4:96:70:e6:5f:ae:b0:db:65:03:
6d:12:7a:38:52:9d:5e:bb:79:3f:88:11:75:70:96:
af:94:dd:be:56:9c:f5:16:77:78:08:09:85:ee:d0:
6e:84:81:51:6e:63:c5:7a:80:a4:1e:ba:3f:6c:f9:
c8:91:4c:a9:ac:47:26:f3:1f:6b:b2:4f:55:82:44:
bc:11:a3:f5:71:06:69:95:da:a1:3b:1c:31:ba:a1:
60:84:78:ef:6a:98:33:18:56:f2:35:f6:66:c3:88:
a9:33:b9:c1:9d:59:93:ba:90:8f:40:43:33:75:b4:
2c:a6:f2:0d:b5:8b:a6:2f:5b:e5:6f:73:78:b4:8b:
e1:2a:8e:3d:13:29:d4:50:4c:18:19:74:74:28:23:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FF:B9:B6:1C:EC:07:20:84:9F:93:9A:13:FC:9F:2C:12:E9:B8:F6
X509v3 Authority Key Identifier:
keyid:CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/H_-5thzsByCEn5OaE_yfLBLpuPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.109.0/24
Signature Algorithm: sha256WithRSAEncryption
55:23:22:12:e8:f5:ad:6a:5a:a6:3e:62:c1:59:33:8d:e1:76:
c6:89:09:d7:fd:30:5b:3e:52:c8:9e:bd:a7:7c:74:59:01:f3:
61:3f:4a:59:86:10:12:52:18:3e:5d:f8:64:16:e8:ae:3d:63:
04:16:0c:cd:53:ce:9e:e2:93:67:07:8c:98:67:66:78:4b:25:
12:86:2c:ab:84:74:d1:f7:e3:f1:90:b0:c0:a7:62:20:25:70:
0d:24:45:14:03:9b:a6:03:a4:10:96:e5:dc:1d:a9:ac:12:d4:
55:79:07:83:41:8f:41:d7:24:99:9a:3b:be:84:fc:dd:3d:94:
3d:15:66:d2:b7:5e:de:ce:53:95:a6:fc:74:ea:ce:30:f2:ef:
4f:47:26:8d:8c:52:9c:41:59:4f:f0:e4:5b:4d:94:e4:e9:0e:
fe:b4:3f:ad:65:a6:75:8b:a1:9e:0f:02:53:88:67:da:f4:5c:
05:ee:c9:28:ca:1d:f3:3a:19:f7:d8:3d:79:86:ae:09:18:c9:
94:c9:db:45:9c:e4:5f:c3:c7:12:09:ba:35:7b:5b:53:5e:ce:
45:bf:aa:73:a1:3e:df:82:cc:06:56:e3:68:88:3a:07:eb:b3:
9a:90:fc:6e:cf:36:40:a1:01:b9:8f:c5:4f:87:e9:0b:6c:7c:
9e:30:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org