Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/807df6-d376-4eb4-8746-465d5e682208/1/znC1x8wYZB9dFFe4vNnOy9vQW_k.roa
File: znC1x8wYZB9dFFe4vNnOy9vQW_k.roa (raw, json)
Hash identifier: wUFi4zRRAT4yyhG/20Uvrq7yHNTh/rOOXRmlYDI/dpo=
Subject key identifier: CE:70:B5:C7:CC:18:64:1F:5D:14:57:B8:BC:D9:CE:CB:DB:D0:5B:F9
Certificate issuer: /CN=8963a1b1f83cb94cffb56f4dc26ec0ef97cb186e
Certificate serial: 018824685451C318FDDE1906DFA37659E9EE
Authority key identifier: 89:63:A1:B1:F8:3C:B9:4C:FF:B5:6F:4D:C2:6E:C0:EF:97:CB:18:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWOhsfg8uUz_tW9Nwm7A75fLGG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/807df6-d376-4eb4-8746-465d5e682208/1/znC1x8wYZB9dFFe4vNnOy9vQW_k.roa
Signing time: Tue 16 May 2023 11:53:17 +0000
ROA not before: Tue 16 May 2023 11:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50148
IP address blocks: 195.211.200.0/22 maxlen: 22
195.211.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:68:54:51:c3:18:fd:de:19:06:df:a3:76:59:e9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8963a1b1f83cb94cffb56f4dc26ec0ef97cb186e
Validity
Not Before: May 16 11:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce70b5c7cc18641f5d1457b8bcd9cecbdbd05bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:8c:fa:07:53:48:0e:a4:10:fa:5c:b0:c4:
3a:0e:61:c9:db:53:fa:4b:fc:e2:da:08:75:5d:02:
c2:fc:eb:9b:ec:bd:de:6e:90:26:8d:e1:a2:56:f0:
cd:d2:3a:30:e3:8e:d2:c3:97:4c:2b:1e:9e:fc:a5:
44:98:81:fd:22:a5:be:23:6b:d4:d9:22:3f:ad:52:
d2:47:17:86:4b:6d:78:88:53:f0:e8:1e:fe:56:e7:
fa:de:c2:87:5f:cd:99:1a:e0:02:b1:cf:65:ec:02:
08:66:e7:2b:46:f0:28:78:ec:e8:79:b9:9c:0c:6d:
09:b6:2f:d5:60:ea:5f:f4:47:36:f5:77:eb:9c:dc:
9c:ce:4f:c1:40:c6:0d:40:3a:db:22:d4:27:21:7c:
82:ff:7c:01:3d:bb:a7:be:6e:80:4f:bf:13:7f:67:
b7:fd:f6:01:cc:a4:cc:b7:85:55:0a:ea:99:31:8d:
01:4a:87:d6:7e:99:d7:21:85:d0:dd:a4:05:f7:aa:
26:68:93:0e:c5:42:6a:ec:55:b0:6c:36:a9:20:d4:
41:7c:87:81:60:8b:74:38:c0:19:6b:b5:76:b0:05:
b6:5e:b1:7c:d9:4f:75:4b:6c:14:cf:dc:e6:f1:d1:
5b:32:11:b3:10:71:97:04:67:52:c6:53:08:7e:b0:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:B5:C7:CC:18:64:1F:5D:14:57:B8:BC:D9:CE:CB:DB:D0:5B:F9
X509v3 Authority Key Identifier:
keyid:89:63:A1:B1:F8:3C:B9:4C:FF:B5:6F:4D:C2:6E:C0:EF:97:CB:18:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWOhsfg8uUz_tW9Nwm7A75fLGG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/807df6-d376-4eb4-8746-465d5e682208/1/znC1x8wYZB9dFFe4vNnOy9vQW_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/807df6-d376-4eb4-8746-465d5e682208/1/iWOhsfg8uUz_tW9Nwm7A75fLGG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.200.0/22
Signature Algorithm: sha256WithRSAEncryption
71:20:68:07:79:30:57:c3:90:20:f1:1a:dd:79:36:a0:5f:a9:
19:00:27:4b:ec:f8:45:0d:38:c3:1a:f6:c0:05:e1:c7:36:6b:
87:1d:52:34:28:fa:13:24:7f:60:5a:50:8d:4e:ee:eb:26:f4:
a0:cf:bb:23:61:68:ec:40:7c:63:ea:31:f5:cc:f0:95:f1:62:
91:9c:88:13:25:7b:d1:36:60:c5:69:c4:74:cf:d4:f2:eb:5d:
61:85:ba:cb:d3:f1:66:1b:c0:00:30:2c:05:be:67:8a:5e:42:
c7:44:71:ff:35:e2:f8:9e:3f:0a:f5:07:b7:d0:fb:46:77:3b:
56:2c:c2:b9:bd:8b:cc:25:76:b8:34:ac:63:41:67:69:0a:1d:
c6:7e:77:d4:7d:ab:8b:53:1d:62:53:cc:73:bb:31:51:fc:a7:
d3:ac:c2:96:92:4d:23:0b:3c:84:06:c2:8c:14:f7:90:45:ac:
19:09:4b:74:2f:32:61:28:75:c0:b6:89:b7:b2:f7:c3:a6:73:
45:ed:2e:23:b5:2c:57:73:76:90:de:9b:5f:6d:20:c4:91:bb:
79:6b:3b:f5:ad:a9:5d:e7:80:39:e2:a2:c0:ae:d1:9d:79:27:
36:b6:74:74:8a:45:da:e0:8a:1b:6f:6a:db:e7:4e:81:2d:cd:
e3:ec:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:24 2024 by rpki-client on console-fra.rpki-client.org