Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/t4f2MI0dIv15QDBaLmrjWmVGbkY.roa
File: t4f2MI0dIv15QDBaLmrjWmVGbkY.roa (raw, json)
Hash identifier: LthO4mQ+1RBhSWqWRdir9tDeLVY30IA6ij7IUgrMdqU=
Subject key identifier: B7:87:F6:30:8D:1D:22:FD:79:40:30:5A:2E:6A:E3:5A:65:46:6E:46
Certificate issuer: /CN=1eadd6ff8f21a9b8843729b9b256185927902329
Certificate serial: 06D5CEE9
Authority key identifier: 1E:AD:D6:FF:8F:21:A9:B8:84:37:29:B9:B2:56:18:59:27:90:23:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq3W_48hqbiENym5slYYWSeQIyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/t4f2MI0dIv15QDBaLmrjWmVGbkY.roa
Signing time: Sat 01 Jan 2022 03:55:06 +0000
ROA not before: Sat 01 Jan 2022 03:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205697
IP address blocks: 195.216.234.0/24 maxlen: 25
195.216.238.0/24 maxlen: 25
195.216.245.0/24 maxlen: 25
195.216.247.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114675433 (0x6d5cee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eadd6ff8f21a9b8843729b9b256185927902329
Validity
Not Before: Jan 1 03:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b787f6308d1d22fd7940305a2e6ae35a65466e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:a3:e0:2e:6e:91:36:c2:ff:a7:7f:6c:ad:
53:bc:44:f6:c0:ee:45:5b:89:8f:3c:5e:ec:bb:f9:
04:65:f7:58:23:33:30:d7:5a:28:d5:57:34:7e:d9:
86:f0:14:ef:3c:2c:b9:e5:9a:41:c7:5b:86:48:d6:
77:d4:ac:cf:93:39:ed:31:17:fd:f2:c1:c1:50:48:
dd:95:c7:45:de:20:55:89:c2:d9:ff:11:1d:76:26:
37:49:4e:2d:67:0b:db:e0:b2:5e:22:ce:dd:c5:41:
fa:a5:84:47:80:34:df:60:3d:22:97:f8:4e:e7:b9:
20:bd:e3:3a:61:e3:83:0e:50:42:95:44:0d:9c:cc:
f2:47:8e:1f:84:3d:de:8f:5a:79:40:65:72:a9:3f:
df:23:d4:5f:0d:98:53:19:61:68:ae:95:3c:23:d4:
23:40:ed:82:04:91:3e:ae:b4:19:ef:34:74:33:97:
fa:c0:87:bc:46:f8:de:2a:a2:84:20:a8:55:78:3f:
26:b3:f0:96:df:97:e1:ab:59:1d:ea:29:69:fe:81:
1f:9b:92:ca:0b:88:86:71:aa:7e:2f:f3:1f:da:d9:
d7:72:07:01:0a:64:8b:3d:30:f0:6a:fe:8f:68:99:
b1:97:77:b4:c3:b7:74:33:5d:a8:b6:4f:50:2d:3f:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:F6:30:8D:1D:22:FD:79:40:30:5A:2E:6A:E3:5A:65:46:6E:46
X509v3 Authority Key Identifier:
keyid:1E:AD:D6:FF:8F:21:A9:B8:84:37:29:B9:B2:56:18:59:27:90:23:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq3W_48hqbiENym5slYYWSeQIyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/t4f2MI0dIv15QDBaLmrjWmVGbkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/Hq3W_48hqbiENym5slYYWSeQIyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.234.0/24
195.216.238.0/24
195.216.245.0/24
195.216.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:77:20:03:8f:5b:1b:78:11:0c:8c:c5:54:88:38:7c:21:da:
b4:6d:83:c3:c1:b3:ce:af:0a:8f:bc:f7:44:20:f3:1c:88:8c:
8a:7d:46:36:1b:1e:cb:ea:f1:cd:cf:ea:14:5b:ba:33:06:5c:
4d:eb:f2:13:15:02:15:63:47:a6:d1:a6:86:23:fc:ee:4e:08:
96:8b:00:a8:68:63:5f:82:87:a3:17:f0:f5:f4:f2:5e:4a:a5:
bb:12:16:31:32:40:e1:47:36:3e:e1:5d:7e:63:94:ca:8b:f7:
f2:22:80:37:3c:e4:90:1a:7c:ad:14:33:c4:6b:3f:8a:8c:f5:
aa:93:e9:ea:ee:26:fa:3a:dc:ee:1e:0f:c1:91:26:b7:b5:28:
a9:0f:cc:80:6f:6c:0c:c8:e2:59:be:05:ee:e0:a8:a5:11:70:
b8:53:b8:42:f1:3a:76:ed:29:6b:cc:3c:c8:91:68:7c:28:15:
9f:29:fe:20:45:e7:0d:a6:4a:42:79:0f:7e:8f:9c:64:08:f4:
95:52:21:f0:23:43:bc:46:8d:92:74:8d:46:0a:11:7d:8b:ae:
0d:ea:e7:b6:41:08:22:7d:68:d0:1e:72:2d:ca:5b:7b:21:65:
a2:26:6a:2a:fe:ee:e8:d4:28:a3:85:e6:23:f4:c0:67:9a:10:
92:c4:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:26 2024 by rpki-client on console-fra.rpki-client.org