Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/tAQWZRF3-alfsDd49cUs_dAHiZU.roa
File: tAQWZRF3-alfsDd49cUs_dAHiZU.roa (raw, json)
Hash identifier: mNahYU5bSbbU8hWRfe59G8C/TITpX+fK8xFO+zWIIQU=
Subject key identifier: B4:04:16:65:11:77:F9:A9:5F:B0:37:78:F5:C5:2C:FD:D0:07:89:95
Certificate issuer: /CN=96c13990efdaeb986d9afda82c5dfce822b4f930
Certificate serial: 01BD63DA
Authority key identifier: 96:C1:39:90:EF:DA:EB:98:6D:9A:FD:A8:2C:5D:FC:E8:22:B4:F9:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsE5kO_a65htmv2oLF386CK0-TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/tAQWZRF3-alfsDd49cUs_dAHiZU.roa
Signing time: Sat 01 Jan 2022 03:53:36 +0000
ROA not before: Sat 01 Jan 2022 03:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13045
IP address blocks: 195.8.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29189082 (0x1bd63da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c13990efdaeb986d9afda82c5dfce822b4f930
Validity
Not Before: Jan 1 03:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b40416651177f9a95fb03778f5c52cfdd0078995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:f1:25:93:20:b9:9c:64:33:5d:99:09:69:
8d:bf:7a:1e:99:ee:85:5c:ce:0b:5e:79:2b:47:d2:
01:98:f0:69:bd:ed:3c:8b:99:24:93:5b:74:7e:7f:
c3:f3:56:38:85:fa:03:b1:f2:84:92:95:41:92:65:
d1:56:32:fa:f3:6c:51:8d:e6:f9:dc:61:e1:e9:ff:
a5:6c:e1:65:ae:d3:ff:58:8d:42:77:33:8f:83:ec:
10:55:c6:2a:e6:24:31:93:41:3e:db:0e:85:cd:6c:
d6:a2:72:99:84:a0:0c:16:68:63:17:c4:42:0c:7d:
0f:7f:30:a6:34:5d:a9:74:98:6e:a5:e4:59:05:14:
0d:0a:33:32:bf:8d:31:4a:52:e5:fc:73:79:a6:38:
04:c2:2e:f5:4f:cc:af:25:f2:20:63:b1:51:93:c0:
e9:77:44:dd:ac:f3:98:e2:ea:c9:5d:21:e7:84:3a:
c9:84:33:57:76:ba:f9:92:e7:9a:52:24:ae:f6:bd:
ec:a2:f1:4c:7f:08:d2:47:73:42:8c:54:a1:f7:94:
3d:8a:72:82:08:2c:88:b8:2e:dd:94:79:44:3e:67:
ca:fd:a3:e6:ce:33:ed:a6:09:d7:a3:b7:9c:6a:36:
a1:7d:79:d0:cf:5b:6a:69:22:a3:2a:f8:19:e6:a3:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:16:65:11:77:F9:A9:5F:B0:37:78:F5:C5:2C:FD:D0:07:89:95
X509v3 Authority Key Identifier:
keyid:96:C1:39:90:EF:DA:EB:98:6D:9A:FD:A8:2C:5D:FC:E8:22:B4:F9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsE5kO_a65htmv2oLF386CK0-TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/tAQWZRF3-alfsDd49cUs_dAHiZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/lsE5kO_a65htmv2oLF386CK0-TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.104.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5d:a9:d1:83:04:12:f1:41:81:4e:97:2e:7e:90:70:5b:07:
bd:a5:65:60:fd:80:d1:68:e8:c0:98:d1:3a:d2:4f:3d:e4:cf:
20:1c:91:ce:b3:95:17:d4:83:92:65:78:17:23:db:5b:95:a0:
0b:f7:36:81:b5:96:f5:4a:be:38:17:db:ae:ea:c6:23:03:fa:
63:3e:c8:d0:94:e5:3e:a5:a1:04:b5:7b:55:e8:b5:f7:e0:ee:
82:d1:3e:cc:be:5e:25:e5:63:65:41:4d:3e:62:ce:f1:c7:0b:
c3:77:fd:d7:94:3e:4a:6d:88:9f:b1:03:9f:1d:9c:c2:09:70:
c0:40:95:a8:e0:05:05:e8:4a:91:d4:0e:81:05:a1:32:18:2d:
57:f6:35:8f:3c:6e:da:67:80:3e:91:1a:33:60:62:40:49:15:
8c:e7:6e:40:a8:00:c7:d9:62:2a:99:58:89:4c:3e:cc:38:3a:
13:05:1a:72:2e:0f:fa:9d:94:1e:a4:a3:35:64:bb:3e:f3:82:
ff:03:82:e4:ff:ad:fe:a8:10:3a:0a:ae:81:34:65:f2:74:b8:
3f:5c:6e:22:47:2a:2c:9f:c3:4e:b8:e0:79:0d:3e:aa:0b:af:
67:13:02:1b:dc:b9:bf:b3:da:f7:77:ce:73:ca:9f:d8:89:fc:
3b:6b:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:26 2024 by rpki-client on console-fra.rpki-client.org