Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/oRz8FFUs9DreszO1dM7vh0Z1HeA.roa
File: oRz8FFUs9DreszO1dM7vh0Z1HeA.roa (raw, json)
Hash identifier: c80YgrZXrpnOqBBxVdfKHSxfXFtOc9Wu1av++12wc8w=
Subject key identifier: A1:1C:FC:14:55:2C:F4:3A:DE:B3:33:B5:74:CE:EF:87:46:75:1D:E0
Certificate issuer: /CN=53427e07c67c66b195e1da470b475b1e3d8f9901
Certificate serial: 018570FBA94F804A4E3786DAA012D63C236A
Authority key identifier: 53:42:7E:07:C6:7C:66:B1:95:E1:DA:47:0B:47:5B:1E:3D:8F:99:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/oRz8FFUs9DreszO1dM7vh0Z1HeA.roa
Signing time: Mon 02 Jan 2023 05:36:59 +0000
ROA not before: Mon 02 Jan 2023 05:36:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 195.69.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:a9:4f:80:4a:4e:37:86:da:a0:12:d6:3c:23:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53427e07c67c66b195e1da470b475b1e3d8f9901
Validity
Not Before: Jan 2 05:36:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a11cfc14552cf43adeb333b574ceef8746751de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:5f:4b:bf:6d:eb:47:a4:e9:f1:cd:a9:d9:
db:b6:79:e9:a4:4f:1a:c8:82:2a:25:e8:ff:c4:8f:
5a:9b:42:4b:5e:95:5d:df:4e:a6:1e:8d:21:44:8f:
9a:95:e5:ed:4c:98:d3:ac:06:0b:6b:9c:a8:2f:1f:
a2:2c:e1:58:a6:6d:29:25:0c:cb:26:3d:ef:88:16:
11:63:13:70:a6:ce:22:01:88:3c:2a:dc:ed:2f:3d:
ff:36:a3:6e:dc:72:e5:cb:f3:c8:e8:bb:f5:4c:98:
35:85:89:3f:d1:ff:e7:74:db:94:de:ba:6e:a7:d1:
5e:f0:e6:99:d7:99:57:9b:d2:87:5a:ce:9e:8a:12:
42:b3:f5:0c:76:ef:57:e0:bf:8e:a4:41:12:1d:c0:
d1:09:88:59:e7:f8:f3:9c:ed:9c:84:ba:85:2b:08:
78:f9:20:e9:91:55:be:98:38:85:bf:32:68:01:1a:
55:e3:5e:72:6f:01:52:cc:94:75:f3:c6:cc:53:04:
d6:34:cb:35:cf:88:69:2e:60:ac:97:9e:15:6a:32:
6c:5a:8a:7e:e9:1c:a3:2c:00:bd:a8:05:88:e0:36:
f8:7e:aa:ca:21:64:d9:a2:8a:66:04:91:50:84:9c:
b8:b5:21:40:b6:e1:38:80:d5:c2:62:c4:06:fe:80:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1C:FC:14:55:2C:F4:3A:DE:B3:33:B5:74:CE:EF:87:46:75:1D:E0
X509v3 Authority Key Identifier:
keyid:53:42:7E:07:C6:7C:66:B1:95:E1:DA:47:0B:47:5B:1E:3D:8F:99:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/oRz8FFUs9DreszO1dM7vh0Z1HeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.150.0/24
Signature Algorithm: sha256WithRSAEncryption
40:18:75:39:e0:2c:93:e9:3a:3a:61:26:de:3a:24:16:25:81:
c5:0b:34:f5:ef:7d:3e:4a:8d:8f:ea:2d:50:1f:68:83:01:a3:
b4:1b:1c:3d:e4:ab:d8:2d:31:09:5e:98:0e:de:c1:fb:cb:02:
07:f6:cd:81:0c:26:c6:54:cd:52:90:48:8d:a6:cc:94:69:48:
a3:78:e7:4d:91:b0:92:df:5f:ef:dd:ad:0b:33:99:1f:95:54:
61:4d:37:46:6e:8c:8a:b5:a1:35:f0:82:0d:4d:62:4c:85:e4:
0b:03:b2:e8:e8:8c:29:ce:ca:43:ed:15:b9:12:a4:ec:c3:ad:
6b:c5:32:2f:b7:c6:d7:cb:84:ee:e9:85:9a:b3:13:6e:19:ec:
0c:ec:69:5e:bc:89:e5:3d:a8:72:56:c1:dc:65:f6:59:e1:94:
40:1b:a8:d6:95:86:8e:e8:ed:ac:37:6d:c8:aa:c4:67:42:13:
97:d6:a1:61:91:ec:f9:e0:84:86:88:5a:68:6c:60:7b:24:6c:
44:d0:67:6e:1e:ca:c9:da:6c:a9:d2:52:42:93:ff:50:16:0c:
9c:19:3f:89:1b:60:66:b0:ec:b1:d4:93:6f:88:ee:5a:db:c3:
d0:9a:8d:e8:2c:48:71:6d:3b:f4:5e:1e:d1:61:9a:42:c9:a6:
44:eb:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:05 2024 by rpki-client on console-ams.rpki-client.org