Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Bx6czrtktar9thHagszzpjodm3c.roa
File: Bx6czrtktar9thHagszzpjodm3c.roa (raw, json)
Hash identifier: 5rFroKQNRLZQG+P3ucyUy94m7sy7sLyUz1QoVqSPqF0=
Subject key identifier: 07:1E:9C:CE:BB:64:B5:AA:FD:B6:11:DA:82:CC:F3:A6:3A:1D:9B:77
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0AA2C077
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Bx6czrtktar9thHagszzpjodm3c.roa
Signing time: Mon 04 Jul 2022 19:59:18 +0000
ROA not before: Mon 04 Jul 2022 19:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178438263 (0xaa2c077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jul 4 19:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=071e9ccebb64b5aafdb611da82ccf3a63a1d9b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:28:6d:bc:d3:e9:c0:1d:5a:cb:82:c1:c5:
10:af:d6:47:07:32:5f:4e:42:cb:5c:e8:a5:d2:02:
e8:05:ce:82:95:a2:49:0b:50:df:92:f9:97:75:fc:
b2:7b:a4:27:8b:e1:8d:61:8e:fe:47:4c:fc:86:59:
b6:c3:30:70:db:a7:dc:c1:c0:e2:e6:b6:64:b1:ee:
03:91:c5:5e:58:6f:63:87:87:b3:bf:a6:70:3d:0f:
ed:ed:1f:2d:f1:7c:4d:ca:a4:b4:db:12:76:d0:41:
15:98:94:d4:c3:63:64:61:bd:1e:51:10:20:84:58:
44:08:7f:88:c8:80:61:3e:cc:a9:bb:fc:5c:12:5c:
54:43:2f:da:c3:77:d5:45:0e:f7:93:75:21:7e:3d:
cd:14:52:d3:79:d1:ea:62:79:4d:7d:b7:25:2e:94:
9a:f1:95:31:25:27:07:a1:cf:21:7d:bb:ae:d0:52:
97:81:6d:d1:42:c4:a9:4d:3b:bb:fe:61:a9:25:9e:
cc:06:56:fc:a2:cd:c9:7e:4c:b6:15:d2:96:08:cf:
f7:1d:ba:1f:02:62:79:54:72:ab:41:a3:6d:38:b7:
36:9e:92:6b:9d:fa:bd:d9:9f:60:69:dc:fc:9c:79:
b9:c4:45:9b:20:ff:c5:31:03:fc:62:f1:99:02:e6:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:9C:CE:BB:64:B5:AA:FD:B6:11:DA:82:CC:F3:A6:3A:1D:9B:77
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Bx6czrtktar9thHagszzpjodm3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.92.0/24
95.214.95.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e5:3d:7d:e8:09:33:7f:49:19:51:aa:26:97:22:b1:29:f1:
56:8c:3d:b6:53:69:aa:62:39:e5:5d:01:40:33:2c:f9:78:ac:
6b:0a:de:86:3f:2c:0e:a3:c0:eb:79:5e:8e:d5:68:20:68:d7:
d5:c4:82:73:01:5d:dc:7e:50:ce:29:ca:87:2e:4f:f7:9e:01:
c8:27:08:67:fc:be:2c:46:70:d4:41:d9:5b:95:f9:38:1d:3a:
f7:68:30:1f:15:94:3c:a6:1c:fd:e6:29:64:2f:0c:ea:42:1e:
f3:e4:91:ae:88:f0:4a:ab:94:05:7e:00:07:0f:0b:0b:d9:06:
45:9b:8a:3f:be:13:09:79:e1:cd:c2:6a:01:74:17:77:f9:5b:
68:08:7e:2e:11:09:a0:23:52:57:ff:38:b0:ef:95:77:f4:ab:
5c:83:78:5a:fd:bb:a9:e5:8f:43:88:91:88:cd:01:37:1f:a0:
b8:5f:84:ff:d1:45:cb:5e:2e:5c:36:18:54:e1:90:76:07:cf:
c0:d2:94:01:cb:89:da:99:fd:02:f9:47:9a:27:9a:a7:ee:30:
60:f8:7c:da:0f:89:a7:18:bb:f9:ca:d6:91:5d:c8:64:a2:05:
32:4f:b6:d5:4c:b0:3a:57:66:ff:1d:ea:ff:8b:9f:de:ee:c8:
8b:49:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org