Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/S8UZq1MIpTDs6FpmU6NIYz-jgsE.roa
File: S8UZq1MIpTDs6FpmU6NIYz-jgsE.roa (raw, json)
Hash identifier: A1/tVXJLY6SjWSSuqpp166dTxfmQo/9VaF/t66Dx1nM=
Subject key identifier: 4B:C5:19:AB:53:08:A5:30:EC:E8:5A:66:53:A3:48:63:3F:A3:82:C1
Certificate issuer: /CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Certificate serial: E6D9F5
Authority key identifier: CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/S8UZq1MIpTDs6FpmU6NIYz-jgsE.roa
Signing time: Thu 05 May 2022 13:27:39 +0000
ROA not before: Thu 05 May 2022 13:27:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15129077 (0xe6d9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Validity
Not Before: May 5 13:27:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bc519ab5308a530ece85a6653a348633fa382c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:af:0b:6a:89:94:45:9b:36:af:c1:5c:94:
b1:e5:11:77:76:f8:0c:a3:dd:e1:10:90:bd:36:66:
ee:5e:c2:c3:0d:06:45:58:c3:31:72:fb:5e:a2:61:
c2:fd:92:90:b3:a4:4c:a0:67:1a:c3:7d:ed:95:dd:
2e:e2:17:60:43:41:73:16:c7:17:c6:61:bb:ab:fe:
72:e6:76:67:36:32:52:1e:a6:db:ce:94:4d:a0:e9:
9b:b9:c5:42:5c:08:50:f7:00:2d:cf:12:44:6e:13:
5e:ef:7b:33:f2:50:fb:c7:19:8a:97:26:8f:73:75:
6a:e0:c9:0b:38:bf:2d:4b:46:6a:f2:72:73:fe:6a:
a6:71:33:2d:11:b6:09:f1:b1:15:66:37:33:04:93:
b0:f2:51:07:39:b6:79:55:a4:2a:9b:2c:05:5d:50:
06:06:c1:e0:3c:f8:5a:ef:31:98:91:1b:4a:a5:bd:
ca:b8:46:98:ea:bd:2a:03:ea:c8:d8:70:8a:d0:fb:
d2:9e:56:8f:a3:10:48:43:56:6e:f9:c5:40:28:90:
09:d8:ed:79:60:d2:1f:b8:df:91:86:2c:93:3d:19:
6d:83:b3:f4:ff:68:97:45:47:b1:9e:10:95:fe:60:
eb:44:93:d9:35:92:a4:9e:96:6b:a4:8a:52:52:61:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:19:AB:53:08:A5:30:EC:E8:5A:66:53:A3:48:63:3F:A3:82:C1
X509v3 Authority Key Identifier:
keyid:CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/S8UZq1MIpTDs6FpmU6NIYz-jgsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.109.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:05:83:1a:cd:ef:c1:a9:86:48:3f:55:75:93:cd:64:06:e8:
de:56:7e:d5:ba:aa:ea:c9:95:c0:8f:cb:fa:d9:ee:8f:70:c5:
cb:6c:1e:8e:5d:f7:e0:af:eb:2a:41:7b:be:10:0c:16:ef:88:
3e:8a:42:3c:38:70:3a:0e:8c:5a:5e:8e:a1:0f:c4:73:fe:27:
a8:81:ca:cf:30:d0:78:1c:d5:11:9d:c1:b9:6f:5b:57:e7:6b:
13:f3:e6:56:3a:16:0c:a2:0a:f8:48:d4:50:8a:f5:7e:f0:6e:
60:31:14:1d:1d:45:f6:db:b4:b9:24:ac:50:c4:30:c5:be:a9:
2f:59:8d:97:1e:8d:d7:80:7c:e9:9e:f4:f0:b8:d4:86:14:35:
4c:6d:6e:3a:bd:60:e8:a6:c5:1c:38:b0:20:56:c9:52:fe:d6:
62:fe:48:88:1e:58:d0:bc:48:53:bc:e3:d5:ff:0a:21:66:14:
c7:a1:73:47:b4:38:07:13:5e:b0:93:4a:f4:51:5e:c5:d9:e6:
ac:c6:15:61:52:60:9b:56:d1:30:c0:48:50:87:8a:80:6b:39:
f4:41:b6:d7:ef:9c:ee:bf:29:f2:2c:09:f8:21:03:fd:4d:e1:
18:c3:1a:2d:d1:b9:c9:03:23:25:9d:ff:8f:39:6e:20:c5:a3:
bb:89:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org