Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/BMOLMUEBO37SmfA_IzJLsam6fbQ.roa
File: BMOLMUEBO37SmfA_IzJLsam6fbQ.roa (raw, json)
Hash identifier: Tr62pJXmvxuq2GsQCSWsww8Ll+U0XjgmnNMATiFf9VI=
Subject key identifier: 04:C3:8B:31:41:01:3B:7E:D2:99:F0:3F:23:32:4B:B1:A9:BA:7D:B4
Certificate issuer: /CN=8f08e61a111b6eef527f9acc601e54500e434c6f
Certificate serial: 018CC9BCF3F6109083CEB212404862BA8C9E
Authority key identifier: 8F:08:E6:1A:11:1B:6E:EF:52:7F:9A:CC:60:1E:54:50:0E:43:4C:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/BMOLMUEBO37SmfA_IzJLsam6fbQ.roa
Signing time: Tue 02 Jan 2024 10:34:12 +0000
ROA not before: Tue 02 Jan 2024 10:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 195.64.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f3:f6:10:90:83:ce:b2:12:40:48:62:ba:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f08e61a111b6eef527f9acc601e54500e434c6f
Validity
Not Before: Jan 2 10:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04c38b3141013b7ed299f03f23324bb1a9ba7db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:e1:cf:6a:e1:94:ca:e1:08:19:60:bd:f8:
d5:ef:1e:fc:0d:27:a4:9f:23:83:1f:c7:21:5f:b9:
10:f4:4c:0b:27:52:7b:83:51:21:99:6b:d6:42:36:
c5:a2:ac:49:d1:51:54:bd:7d:5c:26:f5:c4:90:29:
ac:42:bf:47:d9:bf:b3:27:e8:1d:61:31:52:eb:62:
9a:65:67:c1:c4:e4:10:b0:a1:99:bc:e9:07:8f:c6:
80:1c:7e:73:0b:5c:fd:93:f5:20:62:84:aa:74:d2:
32:5a:40:eb:a9:ff:46:55:bb:14:06:78:e5:ca:00:
5c:a0:cf:48:b2:d0:0b:90:7f:2b:b9:90:41:92:03:
62:c9:f0:cb:66:84:3c:f0:a7:67:26:43:1c:f4:79:
7a:c8:64:b7:ab:48:e9:ee:e6:cc:17:95:90:54:fd:
9a:36:a3:3e:c5:f1:49:97:a0:48:ea:c3:33:b2:44:
f0:c0:dc:b8:90:35:de:ae:35:37:9d:a6:aa:48:77:
4a:24:a5:9b:18:6e:0a:64:44:be:4f:ee:17:e5:6d:
ff:3e:a9:c9:b9:44:b1:be:f6:2a:50:92:fb:cc:c4:
6d:04:7a:a7:33:ac:6e:d9:d2:fd:73:b9:59:2f:94:
d5:99:89:f7:4f:9b:10:8b:8e:ed:d5:eb:47:ad:0e:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C3:8B:31:41:01:3B:7E:D2:99:F0:3F:23:32:4B:B1:A9:BA:7D:B4
X509v3 Authority Key Identifier:
keyid:8F:08:E6:1A:11:1B:6E:EF:52:7F:9A:CC:60:1E:54:50:0E:43:4C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/BMOLMUEBO37SmfA_IzJLsam6fbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.113.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e7:1f:6f:e4:3d:40:0a:e7:2b:e0:66:06:df:3c:c4:88:e4:
23:0b:9e:a0:90:8b:4d:2f:3f:d0:bb:99:96:0e:76:84:75:1e:
b8:d9:9b:58:06:dc:fa:ee:5f:f6:7e:fb:f8:d9:6e:80:89:34:
a3:55:e7:7c:38:86:f7:96:65:23:5b:42:16:b4:30:28:d5:9d:
5a:85:a0:b7:6c:8c:a8:89:68:fd:42:63:b0:33:09:0d:46:f9:
91:f1:09:1e:84:ab:7d:0f:f0:a5:52:07:35:55:7c:25:a7:4f:
4d:67:1b:d2:9a:3a:9c:3b:25:f0:2d:0e:54:e2:9e:94:0f:d8:
3f:45:ba:98:29:83:ec:bd:b7:03:2a:72:e4:7f:29:98:47:f8:
4c:30:49:7e:40:e9:8d:89:2c:23:ea:01:9a:91:98:59:b4:b6:
b6:6e:79:a1:9a:4e:ba:c0:f0:21:90:d1:f0:1b:7e:8e:a6:df:
2a:3f:20:07:50:4c:d4:45:e6:f8:e6:52:10:df:3e:da:21:6d:
10:83:7b:cf:ac:77:69:39:63:7e:49:99:a5:80:d7:8f:ff:a9:
06:ee:53:00:60:d4:6a:dc:94:76:0f:db:a9:02:6e:6f:4e:37:
7c:e7:48:1f:37:55:48:02:df:da:8f:c2:58:9c:62:a9:ad:d3:
00:35:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:49 2024 by rpki-client on console-ams.rpki-client.org