Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/cUVmGvc_rvfn0bEvIrlwPGeXPZI.roa
File: cUVmGvc_rvfn0bEvIrlwPGeXPZI.roa (raw, json)
Hash identifier: L0iApaQ1pin03+2roOkan+XktEiv5YANoGnMvmUuJs0=
Subject key identifier: 71:45:66:1A:F7:3F:AE:F7:E7:D1:B1:2F:22:B9:70:3C:67:97:3D:92
Certificate issuer: /CN=31c4aa21f29036d202eece103154181712830636
Certificate serial: 018570F0876BC27CD055A8274F4A2EB54C0C
Authority key identifier: 31:C4:AA:21:F2:90:36:D2:02:EE:CE:10:31:54:18:17:12:83:06:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McSqIfKQNtIC7s4QMVQYFxKDBjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/cUVmGvc_rvfn0bEvIrlwPGeXPZI.roa
Signing time: Mon 02 Jan 2023 05:24:49 +0000
ROA not before: Mon 02 Jan 2023 05:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43641
IP address blocks: 195.128.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:87:6b:c2:7c:d0:55:a8:27:4f:4a:2e:b5:4c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c4aa21f29036d202eece103154181712830636
Validity
Not Before: Jan 2 05:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7145661af73faef7e7d1b12f22b9703c67973d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:69:2f:b6:a5:95:c2:86:f1:48:0f:41:e5:
2b:17:2e:da:a1:6f:7e:69:b5:c8:a3:8c:8a:2b:05:
f2:54:3b:31:84:04:8d:5d:e9:75:dd:70:31:78:32:
6a:d4:b2:1f:3e:32:c5:d5:de:34:bf:d4:21:ff:67:
30:2a:2f:9f:53:7c:aa:6e:7b:6a:42:fd:a4:23:74:
2a:b8:b4:ad:cc:17:78:b6:ed:c5:1d:c6:c9:cd:96:
36:db:0c:ef:4f:88:53:9c:7a:5e:49:37:68:fe:f1:
81:03:4e:af:43:7f:ff:45:2d:27:c0:a4:26:33:63:
8a:94:a6:ad:e7:c5:76:6e:5d:7d:00:66:05:f9:93:
d6:9f:d6:11:05:41:5b:43:c6:f7:1f:02:2e:a0:9b:
0e:08:06:90:32:39:0d:5d:c7:36:4a:6c:26:fb:9d:
98:2e:76:86:92:f0:9e:66:b2:7c:31:3f:41:a5:b1:
b7:b7:cf:4e:b6:79:bb:65:a1:9a:f9:02:28:7d:c0:
92:fa:b3:a4:2c:90:82:a3:b0:41:69:f4:5e:b5:fb:
f5:f6:fb:98:65:68:11:5c:d8:8f:7d:dd:35:6a:9a:
47:67:b9:dd:99:e7:5f:78:e8:da:64:ac:3a:66:25:
81:82:ae:b5:0f:8e:e6:f3:40:cb:25:de:2c:d6:a9:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:66:1A:F7:3F:AE:F7:E7:D1:B1:2F:22:B9:70:3C:67:97:3D:92
X509v3 Authority Key Identifier:
keyid:31:C4:AA:21:F2:90:36:D2:02:EE:CE:10:31:54:18:17:12:83:06:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McSqIfKQNtIC7s4QMVQYFxKDBjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/cUVmGvc_rvfn0bEvIrlwPGeXPZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/8ba8f4-5c46-4648-a0c9-1d8f37fe4739/1/McSqIfKQNtIC7s4QMVQYFxKDBjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.248.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:b9:49:9e:dd:b7:2c:46:fb:fc:40:ec:6b:47:6d:09:c5:b5:
1b:7f:f6:0d:57:58:b9:75:c4:6c:44:c7:fd:1b:a7:4e:7e:3c:
50:50:fa:d1:80:62:98:ec:72:7c:07:4e:c6:85:31:bd:7a:b9:
8a:49:72:a7:3a:fc:c7:93:e0:84:7e:61:00:e6:ac:90:d7:6f:
42:41:34:75:2e:ac:57:0a:a6:f1:85:62:82:40:c1:ed:bd:58:
f6:53:52:24:ee:13:92:26:fc:49:e5:69:fd:f0:85:af:9b:ae:
65:6e:9f:ca:45:b7:21:14:a5:9a:0e:6c:3a:a8:60:7f:88:64:
d6:a6:96:76:60:34:4a:68:f4:41:f4:c4:fc:da:14:2a:5d:6c:
d5:63:94:3e:3c:2d:06:5f:19:af:81:a3:04:f3:f0:7d:ab:37:
af:78:43:73:cb:4a:49:33:33:eb:e1:ac:8f:c9:dc:15:1d:cf:
8a:e1:14:6f:b2:7d:f1:96:ea:2b:37:f4:3c:56:b9:f0:bb:ed:
1b:11:40:84:9c:68:e6:1b:4f:76:dd:64:24:4a:0b:61:43:7d:
88:66:d5:4c:44:95:7c:9d:b4:a8:e0:16:8b:48:ea:c7:71:89:
f6:51:fb:ed:ff:2b:78:49:8d:c6:5b:15:f6:9b:0f:9f:b3:fe:
d1:4b:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:08 2024 by rpki-client on console-ams.rpki-client.org