Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/807df6-d376-4eb4-8746-465d5e682208/1/_pzmsKCuYyM4TJ2lQ55YQoEyFM0.roa
File: _pzmsKCuYyM4TJ2lQ55YQoEyFM0.roa (raw, json)
Hash identifier: uUMv1jPzlAp7cTNuFuB2/dRvqkFLvuvGSEzxxw+dqwI=
Subject key identifier: FE:9C:E6:B0:A0:AE:63:23:38:4C:9D:A5:43:9E:58:42:81:32:14:CD
Certificate issuer: /CN=8963a1b1f83cb94cffb56f4dc26ec0ef97cb186e
Certificate serial: 018CC2DB2A81FD6156B208C68F74493D733A
Authority key identifier: 89:63:A1:B1:F8:3C:B9:4C:FF:B5:6F:4D:C2:6E:C0:EF:97:CB:18:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWOhsfg8uUz_tW9Nwm7A75fLGG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/807df6-d376-4eb4-8746-465d5e682208/1/_pzmsKCuYyM4TJ2lQ55YQoEyFM0.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50148
IP address blocks: 195.211.200.0/22 maxlen: 22
195.211.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2a:81:fd:61:56:b2:08:c6:8f:74:49:3d:73:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8963a1b1f83cb94cffb56f4dc26ec0ef97cb186e
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe9ce6b0a0ae6323384c9da5439e5842813214cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8a:35:f8:80:99:92:ef:95:a7:01:67:13:a5:
2f:46:02:d3:0c:85:58:02:4d:d1:44:fb:75:8c:73:
c8:dc:f9:b1:f4:25:31:ce:2e:9e:60:e7:07:f2:10:
72:59:8f:51:0c:b7:db:6b:d4:80:a8:9e:4a:f1:ee:
f2:7c:d1:2a:01:ab:a1:a9:c5:55:46:96:b1:19:c1:
41:7e:8b:c5:f0:af:92:6b:22:df:f3:22:3c:d6:25:
ac:94:ff:be:56:a3:41:1e:23:14:8e:23:31:07:89:
4f:b1:fc:0f:82:32:a6:cc:78:ec:13:41:2b:ed:84:
b5:66:12:77:d1:20:37:02:0b:c7:23:84:b8:f9:43:
a0:ea:c5:8d:c7:ee:91:d8:42:e8:46:d9:34:ea:ee:
da:04:ec:28:f0:91:47:44:75:24:1c:b4:06:c9:75:
9b:b5:c6:05:0c:58:8e:3b:a3:f8:2f:74:26:38:72:
93:e4:9e:f7:81:69:6e:37:f6:70:98:0d:e6:e1:dc:
7f:fd:57:a9:ec:3d:72:a4:58:23:df:00:90:5f:b8:
84:8d:fc:e9:dd:7e:4b:c5:16:57:3f:08:80:37:30:
3b:69:df:9c:ec:c4:6b:d4:b5:d7:a6:45:39:5c:84:
d9:9a:e7:4c:ab:4b:69:b6:58:b7:43:d5:1d:13:77:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9C:E6:B0:A0:AE:63:23:38:4C:9D:A5:43:9E:58:42:81:32:14:CD
X509v3 Authority Key Identifier:
keyid:89:63:A1:B1:F8:3C:B9:4C:FF:B5:6F:4D:C2:6E:C0:EF:97:CB:18:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWOhsfg8uUz_tW9Nwm7A75fLGG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/807df6-d376-4eb4-8746-465d5e682208/1/_pzmsKCuYyM4TJ2lQ55YQoEyFM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/807df6-d376-4eb4-8746-465d5e682208/1/iWOhsfg8uUz_tW9Nwm7A75fLGG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:89:b8:2d:c2:ee:f2:92:a7:60:5f:a2:b5:83:d1:ee:e0:87:
53:17:fb:80:78:98:63:b0:86:a9:b2:86:e9:ef:bb:da:4c:63:
9e:92:bd:ad:a2:d7:ef:f9:be:e7:b2:8c:c1:36:99:09:7d:74:
8e:1d:e5:2f:41:14:64:a3:d6:84:bb:d7:01:af:9f:4d:a2:a1:
f5:75:ae:f4:ea:64:2e:f9:29:9b:33:6f:67:90:ba:ca:7c:88:
5d:ca:0d:d0:27:85:9e:d2:7e:07:52:ec:12:e1:5a:83:cb:f6:
c2:96:a3:c2:ad:6a:d0:d6:3e:4a:f6:58:f7:b6:bf:22:69:56:
0c:26:f5:11:ac:fb:aa:45:c0:01:33:79:ac:62:b4:e2:12:11:
e0:e4:c6:5c:35:d7:f8:cb:26:13:32:0c:3f:fa:e6:c0:11:91:
30:83:4d:c6:e2:0d:35:aa:2d:b0:97:cf:5e:97:50:ef:28:23:
7c:16:d8:21:4c:09:2e:3c:4b:32:c0:f9:57:21:8e:71:35:d3:
b7:ed:2e:50:10:55:eb:05:87:45:10:fe:ea:c8:d1:53:fe:9e:
2c:72:93:a3:02:bc:5f:23:40:b8:7e:76:a5:0b:03:32:15:2c:
92:93:93:f5:a4:ba:4a:63:df:34:af:87:23:fb:35:92:0f:31:
b0:15:54:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2yqB/WFWsgjGj3RJPXM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NjNhMWIxZjgzY2I5NGNmZmI1NmY0ZGMyNmVjMGVmOTdj
YjE4NmUwHhcNMjQwMTAxMDIyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTljZTZiMGEwYWU2MzIzMzg0YzlkYTU0MzllNTg0MjgxMzIxNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoo1+ICZku+VpwFnE6UvRgLTDIVY
Ak3RRPt1jHPI3Pmx9CUxzi6eYOcH8hByWY9RDLfba9SAqJ5K8e7yfNEqAauhqcVV
RpaxGcFBfovF8K+SayLf8yI81iWslP++VqNBHiMUjiMxB4lPsfwPgjKmzHjsE0Er
7YS1ZhJ30SA3AgvHI4S4+UOg6sWNx+6R2ELoRtk06u7aBOwo8JFHRHUkHLQGyXWb
tcYFDFiOO6P4L3QmOHKT5J73gWluN/ZwmA3m4dx//Vep7D1ypFgj3wCQX7iEjfzp
3X5LxRZXPwiANzA7ad+c7MRr1LXXpkU5XITZmudMq0tptli3Q9UdE3d9EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6c5rCgrmMjOEydpUOeWEKBMhTNMB8GA1UdIwQY
MBaAFIljobH4PLlM/7VvTcJuwO+XyxhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdPaHNmZzh1VXpfdFc5TndtN0E3NWZMR0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MDdkZjYtZDM3Ni00ZWI0LTg3NDYt
NDY1ZDVlNjgyMjA4LzEvX3B6bXNLQ3VZeU00VEoybFE1NVlRb0V5Rk0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MDdkZjYtZDM3Ni00ZWI0LTg3NDYtNDY1ZDVlNjgyMjA4
LzEvaVdPaHNmZzh1VXpfdFc5TndtN0E3NWZMR0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9PIMA0G
CSqGSIb3DQEBCwUAA4IBAQBaibgtwu7ykqdgX6K1g9Hu4IdTF/uAeJhjsIapsobp
77vaTGOekr2totfv+b7nsozBNpkJfXSOHeUvQRRko9aEu9cBr59NoqH1da706mQu
+SmbM29nkLrKfIhdyg3QJ4We0n4HUuwS4VqDy/bClqPCrWrQ1j5K9lj3tr8iaVYM
JvURrPuqRcABM3msYrTiEhHg5MZcNdf4yyYTMgw/+ubAEZEwg03G4g01qi2wl89e
l1DvKCN8FtghTAkuPEsywPlXIY5xNdO37S5QEFXrBYdFEP7qyNFT/p4scpOjArxf
I0C4fnalCwMyFSySk5P1pLpKY980r4cj+zWSDzGwFVRu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:24 2024 by rpki-client on console-fra.rpki-client.org