Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/yfgCOgHnJcOjn_IbEeIkM0wtFSE.roa
File: yfgCOgHnJcOjn_IbEeIkM0wtFSE.roa (raw, json)
Hash identifier: ieWkKD5tHLEmXi5phnNmLJvEoNobXprjBYJhuAShncU=
Subject key identifier: C9:F8:02:3A:01:E7:25:C3:A3:9F:F2:1B:11:E2:24:33:4C:2D:15:21
Certificate issuer: /CN=e9fd155b08ee1a0df3ca418575ea3af901a82853
Certificate serial: 0188FCC0D993C4C4FF92E88DB36F62A4EFA2
Authority key identifier: E9:FD:15:5B:08:EE:1A:0D:F3:CA:41:85:75:EA:3A:F9:01:A8:28:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f0VWwjuGg3zykGFdeo6-QGoKFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/yfgCOgHnJcOjn_IbEeIkM0wtFSE.roa
Signing time: Tue 27 Jun 2023 12:07:57 +0000
ROA not before: Tue 27 Jun 2023 12:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 195.191.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:c0:d9:93:c4:c4:ff:92:e8:8d:b3:6f:62:a4:ef:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fd155b08ee1a0df3ca418575ea3af901a82853
Validity
Not Before: Jun 27 12:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9f8023a01e725c3a39ff21b11e224334c2d1521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:a0:60:66:03:bf:a7:df:36:68:ac:bd:de:
91:cc:4c:c9:1f:b7:2c:86:88:f8:2a:5c:8a:3a:75:
69:5d:c6:ce:68:cc:89:f7:d7:5a:92:7e:ed:d9:1d:
0e:2f:e8:5e:e5:d1:8d:d1:a8:af:9e:a8:41:af:e1:
38:c2:f9:bf:97:9b:ea:c0:db:fb:6b:33:08:e0:a2:
40:dd:3e:f4:8d:da:5e:26:0c:8b:65:44:a5:4a:ac:
cf:c4:8d:34:4d:e5:56:93:9c:51:a9:35:31:00:e9:
6c:16:34:b7:19:50:d6:4c:51:b1:07:e6:d2:c9:4a:
1b:3d:e4:12:db:99:2e:d5:7d:b0:73:b3:48:2c:c3:
42:44:99:95:8e:8c:1e:5c:7d:95:c7:f6:0a:e7:80:
0c:2f:4c:71:53:90:6b:fd:02:d1:ee:23:8f:f2:2a:
42:fd:d7:d1:92:6a:4e:71:a3:b0:ff:00:12:de:85:
ae:fa:df:d9:03:25:0d:d6:6c:6e:5f:c3:33:ac:c8:
fe:8d:43:51:82:3c:a0:87:c9:6c:bc:35:d2:c7:34:
8d:86:4a:42:8c:e2:59:fd:af:06:9e:e0:b3:86:d1:
8b:ae:6d:aa:79:7b:74:9e:5a:c6:ba:eb:c6:c4:1d:
75:c5:da:cf:fa:f1:6f:03:4c:0e:f7:84:96:9e:d4:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:02:3A:01:E7:25:C3:A3:9F:F2:1B:11:E2:24:33:4C:2D:15:21
X509v3 Authority Key Identifier:
keyid:E9:FD:15:5B:08:EE:1A:0D:F3:CA:41:85:75:EA:3A:F9:01:A8:28:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0VWwjuGg3zykGFdeo6-QGoKFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/yfgCOgHnJcOjn_IbEeIkM0wtFSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/6f0VWwjuGg3zykGFdeo6-QGoKFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.144.0/24
Signature Algorithm: sha256WithRSAEncryption
80:dd:83:2c:32:40:4d:dc:1d:88:8d:40:36:6c:20:8c:77:f8:
fe:cd:e4:57:cc:5c:be:84:26:45:03:cd:f0:6f:58:7e:21:56:
9d:e5:b5:c5:9c:7c:0a:ee:92:a2:e5:fe:d8:41:75:dd:18:ec:
ef:96:9d:a4:53:42:ee:ad:7f:a2:24:93:ac:73:4c:ea:84:0b:
fa:15:7b:23:bb:8a:e8:bd:16:ee:db:1e:cf:5d:3e:26:41:30:
5e:26:3f:7c:68:9f:25:af:13:7b:fc:61:9d:17:9a:21:5d:37:
8e:53:7e:ea:c0:43:96:8c:5d:2f:d1:72:cd:eb:24:9d:3d:d5:
5d:38:48:b6:aa:41:bb:c2:10:91:aa:73:3b:41:23:46:2a:9c:
cf:3f:0a:34:87:53:ab:3a:7e:8e:b0:a1:c5:0c:3b:5b:c6:38:
d1:b6:b4:8c:f7:ae:d4:8c:30:5a:e0:83:8d:91:d0:b1:15:fd:
83:bc:8e:22:e4:c5:7c:42:e5:b9:85:21:72:5f:81:4e:0e:72:
11:92:aa:35:f6:53:62:91:d5:aa:5d:43:44:9d:08:f2:60:d9:
d9:c9:f6:06:70:7b:5f:3a:93:24:92:c0:0f:4e:eb:93:ba:e1:
e1:be:10:2c:cc:d9:2d:85:bb:5c:a4:c8:25:62:0b:3e:ec:b7:
f8:f5:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:20 2024 by rpki-client on console-fra.rpki-client.org