Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/nHv4qEVzNqdaRlspY6PdI5CNZ1I.roa
File: nHv4qEVzNqdaRlspY6PdI5CNZ1I.roa (raw, json)
Hash identifier: FH5OwOR2G/9uNVAs7JPM2Tgs2I6umwMWDcZyp4AbBj0=
Subject key identifier: 9C:7B:F8:A8:45:73:36:A7:5A:46:5B:29:63:A3:DD:23:90:8D:67:52
Certificate issuer: /CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Certificate serial: 018CC64B49447FD06533CBFCD3D00FE56CF0
Authority key identifier: CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/nHv4qEVzNqdaRlspY6PdI5CNZ1I.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:49:44:7f:d0:65:33:cb:fc:d3:d0:0f:e5:6c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c7bf8a8457336a75a465b2963a3dd23908d6752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:d3:0b:1f:41:c4:40:11:70:0d:39:84:da:
e2:1b:81:48:0b:1b:94:a4:2f:a2:d6:1c:b0:83:6f:
89:7a:52:97:52:b0:ee:d3:3d:be:65:1f:c3:82:90:
0c:56:f8:d0:de:4e:6f:76:4e:30:a6:a7:3c:63:80:
41:c1:da:df:7d:ef:56:c3:b9:bb:9c:ab:f6:77:21:
da:75:ad:48:84:9b:b1:0b:59:6a:77:ff:30:8a:56:
05:4f:1a:3d:af:4b:e4:37:26:c4:9b:3e:aa:e3:ba:
11:d2:28:1c:e6:20:86:aa:71:ae:02:64:40:f8:f6:
47:24:05:ec:5c:cf:6f:07:61:99:52:67:92:f5:0e:
dc:f8:e2:f2:88:67:4b:f0:74:d2:bb:db:a5:82:49:
03:04:ca:be:5d:a4:16:05:5f:ec:b6:d7:b8:f3:c6:
f3:9b:13:2e:68:40:43:bc:63:8f:ac:d1:ef:aa:8f:
36:6e:cd:96:13:39:31:c9:44:62:9d:6f:d0:74:2c:
a0:75:8d:9b:ec:c3:53:5e:e8:8b:2a:1d:6a:ed:b5:
44:48:81:dc:31:9f:f6:f1:ef:30:00:20:d5:68:31:
59:be:2b:93:6b:f6:62:5c:f7:23:93:3c:2c:8e:d7:
a6:0d:59:9f:e1:8b:2f:ce:ee:4a:0a:40:c4:27:68:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7B:F8:A8:45:73:36:A7:5A:46:5B:29:63:A3:DD:23:90:8D:67:52
X509v3 Authority Key Identifier:
keyid:CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/nHv4qEVzNqdaRlspY6PdI5CNZ1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:55:3d:b1:63:c3:20:00:b0:4d:05:0f:94:29:a7:3b:65:7e:
35:9c:14:af:5a:83:ee:f3:26:a1:6f:34:50:dc:f7:74:50:00:
fc:40:c1:fa:d5:d3:9f:19:62:a7:31:63:dc:c4:f6:8c:de:b1:
31:22:68:3b:15:f0:9c:24:08:bd:ce:bd:0c:63:50:26:57:96:
91:7d:91:19:50:19:5a:b5:6a:85:e0:03:5f:4a:b7:d0:31:8f:
0b:b7:d2:59:cc:20:37:e1:74:ac:5f:07:b4:db:07:e7:c2:3d:
da:1a:3f:59:dd:82:64:8f:62:e5:c1:27:eb:2d:fb:34:53:21:
43:95:91:31:b8:45:90:df:17:05:b3:f5:f9:b6:d1:46:71:14:
8c:be:8d:58:46:b4:9b:56:9b:f7:1f:d5:c0:22:2a:b9:68:c5:
e5:a7:f2:9b:0b:4a:3c:65:7b:a0:c2:e7:ed:2e:6c:03:cd:b5:
bd:01:69:45:a8:9f:47:02:ed:82:9d:51:12:ef:62:08:40:1d:
fe:69:06:f3:f2:6c:fa:53:0f:2f:77:58:71:3b:63:67:f9:33:
1b:86:ac:83:76:e8:a2:67:85:23:bc:56:82:b9:08:b2:d9:fa:
25:5f:75:7b:3c:91:52:70:0f:54:8e:b9:cf:af:41:ba:f1:63:
f3:f8:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org