Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/RYVbfC5cPHGdCrUu2d7rAlbj5i4.roa
File: RYVbfC5cPHGdCrUu2d7rAlbj5i4.roa (raw, json)
Hash identifier: jApfBXs2szRhBHdvRE6P/Z9V4zsJqtJpu0tERvbpATI=
Subject key identifier: 45:85:5B:7C:2E:5C:3C:71:9D:0A:B5:2E:D9:DE:EB:02:56:E3:E6:2E
Certificate issuer: /CN=986b772dc18934e51f27b52cbe65b3241261bf65
Certificate serial: 01856F9DAA79A689BA7E431363426FA7C01A
Authority key identifier: 98:6B:77:2D:C1:89:34:E5:1F:27:B5:2C:BE:65:B3:24:12:61:BF:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/RYVbfC5cPHGdCrUu2d7rAlbj5i4.roa
Signing time: Sun 01 Jan 2023 23:14:41 +0000
ROA not before: Sun 01 Jan 2023 23:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 195.96.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:aa:79:a6:89:ba:7e:43:13:63:42:6f:a7:c0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986b772dc18934e51f27b52cbe65b3241261bf65
Validity
Not Before: Jan 1 23:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45855b7c2e5c3c719d0ab52ed9deeb0256e3e62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:6f:81:d8:b4:15:11:bf:61:40:b8:b5:e3:
b0:9f:9b:87:a0:34:23:5f:06:8d:4d:6f:78:fd:9f:
56:59:70:fa:ff:b7:46:7a:5f:54:f6:ed:81:b4:0a:
36:e5:0b:33:80:08:2c:b0:4e:8e:89:41:93:e2:a4:
8d:b9:89:df:83:bb:a5:ae:1d:6a:85:1c:7d:42:e9:
4c:36:a0:95:26:7a:f1:da:39:5e:ab:89:f0:d2:1b:
2e:9c:27:a8:33:fe:0b:1b:43:72:21:98:78:95:27:
d5:d4:88:c9:65:4c:5d:ad:d6:56:30:75:2e:ac:cb:
93:c1:03:0b:fe:92:6b:93:31:f6:81:b8:63:0e:a9:
16:c9:65:ee:cc:bb:c1:b7:6e:a9:e0:16:d4:4c:99:
ee:da:02:ce:f1:d5:7c:57:a8:09:f8:c0:6e:ec:7e:
9e:4b:ee:14:1c:60:89:0b:44:8c:9c:5f:6f:e5:78:
94:51:0b:b5:8d:f1:aa:85:68:cd:32:5a:9a:0a:e5:
fd:09:4a:15:19:86:ba:e6:7c:b2:21:70:01:37:f8:
41:89:96:cb:a1:37:bf:4a:9a:4c:b3:7f:13:59:cb:
2e:52:35:54:bf:9b:c5:e0:8c:56:d2:a0:5a:21:03:
29:dc:4e:d1:3b:c5:7d:15:a2:cf:d4:2c:2e:e8:43:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:5B:7C:2E:5C:3C:71:9D:0A:B5:2E:D9:DE:EB:02:56:E3:E6:2E
X509v3 Authority Key Identifier:
keyid:98:6B:77:2D:C1:89:34:E5:1F:27:B5:2C:BE:65:B3:24:12:61:BF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/RYVbfC5cPHGdCrUu2d7rAlbj5i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:da:2b:c9:c3:bc:70:56:8f:23:12:da:12:df:b2:dd:9b:43:
e8:0d:f4:29:bc:cd:81:77:7b:26:fd:ca:bb:33:58:7c:43:fb:
f1:fe:e1:1a:a2:ab:27:79:c5:f9:d1:4c:7e:a6:99:71:84:15:
c7:db:1b:e2:be:9b:9c:f4:dc:d6:f8:64:d1:b7:92:f6:aa:ef:
71:2d:90:99:be:3d:e7:bf:23:56:a3:f8:4c:bd:fc:be:f7:4c:
50:c5:a8:6a:78:27:9f:54:8b:bd:bd:85:68:0c:33:13:47:23:
d8:d7:71:b5:98:97:70:f3:49:97:e1:56:a9:40:c7:ff:e7:b0:
e1:97:fe:17:01:51:8b:65:14:6e:2f:78:dd:33:3e:94:75:1a:
ef:02:c4:6f:5d:66:45:d1:89:02:81:74:b0:16:cf:fc:94:c2:
1c:86:83:47:45:a4:b6:9f:e2:81:75:81:44:e9:1b:d8:a1:2f:
f0:91:bf:21:31:36:e0:4f:c1:3a:c9:3d:56:5d:b5:de:66:e5:
19:14:89:88:28:d9:ff:6f:3c:c1:30:fb:ad:d0:87:4e:7a:40:
fd:09:36:a0:c2:67:88:02:b7:c0:ad:67:2b:f1:3c:5e:b6:b0:
99:7f:fc:60:46:bb:e7:14:a3:a0:35:a1:35:3b:56:2b:6d:98:
9c:97:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:48 2024 by rpki-client on console-fra.rpki-client.org