Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/d2dw-xV9rsdargsp1pz-Ijm4ss0.roa
File: d2dw-xV9rsdargsp1pz-Ijm4ss0.roa (raw, json)
Hash identifier: pTY2oiRtwGz916Izs+rIxhQyWYAuAWHcvqjl2Y/cWgw=
Subject key identifier: 77:67:70:FB:15:7D:AE:C7:5A:AE:0B:29:D6:9C:FE:22:39:B8:B2:CD
Certificate issuer: /CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Certificate serial: 018D13D7EFFD732DA234AA759BA238E1A890
Authority key identifier: 0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/d2dw-xV9rsdargsp1pz-Ijm4ss0.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 195.69.150.0/24 maxlen: 24
212.18.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ef:fd:73:2d:a2:34:aa:75:9b:a2:38:e1:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=776770fb157daec75aae0b29d69cfe2239b8b2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:37:cf:05:db:d1:74:0e:e1:73:ce:55:cd:
46:08:58:c8:37:35:a6:85:b5:00:81:6c:22:f9:3e:
c4:f9:0e:66:ad:d2:84:88:61:00:4e:76:6b:0e:2f:
03:42:4e:81:3b:ae:78:90:dc:d0:cb:84:f4:16:e1:
78:f0:38:08:b9:34:e3:1a:ca:9e:09:a5:dc:61:4d:
6a:c3:b4:ff:49:4e:e2:4d:02:1f:80:ac:8e:f1:3f:
b1:5b:cc:83:2f:74:24:92:d9:f5:2e:46:d6:40:ca:
10:51:76:4a:50:97:40:00:a9:92:fe:c4:6f:46:06:
91:fc:ee:5c:d4:fc:7e:d5:39:fc:94:87:fe:6b:15:
ec:63:ec:ab:ed:cb:8f:ea:9b:bf:f9:9a:c1:ad:0e:
ea:04:ea:21:b5:f3:c8:c3:20:57:9f:01:7b:75:ba:
9b:48:98:8c:06:00:01:49:f1:cb:2c:f9:dd:86:f8:
14:09:d2:ca:4e:d5:4e:b6:d7:94:43:a8:d8:f5:90:
a7:a7:26:0b:9b:25:c6:f7:d2:8c:86:80:c3:4e:cf:
dd:64:89:48:66:97:1c:73:6f:8d:48:04:66:99:b7:
56:d9:80:45:25:11:08:b2:fd:37:34:f2:81:32:ec:
56:54:75:b2:69:d2:60:f7:26:ae:91:64:f7:08:5f:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:67:70:FB:15:7D:AE:C7:5A:AE:0B:29:D6:9C:FE:22:39:B8:B2:CD
X509v3 Authority Key Identifier:
keyid:0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/d2dw-xV9rsdargsp1pz-Ijm4ss0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/DroFQi1N1HjI8kt_QwIhO_-CdPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.150.0/24
212.18.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f2:ac:74:7b:e5:9e:e2:43:cd:9c:e3:8d:20:e4:7d:f2:7f:
41:0b:bb:ce:e8:ce:48:73:ab:c6:3b:b2:a9:f4:2a:68:a7:22:
88:f3:5e:78:39:fe:19:17:90:c2:7e:a3:24:87:3e:ff:df:8a:
96:02:81:bb:f0:af:34:e1:c9:90:bc:08:ac:3c:00:3a:b3:35:
eb:14:98:63:ac:b0:93:36:c4:f5:12:19:c2:6b:a9:68:f7:89:
8c:77:1b:08:e3:24:5f:f8:13:ed:bd:ca:30:04:70:fa:d8:78:
a2:f6:ad:53:6c:31:e8:3c:b7:69:da:d9:a7:13:57:00:96:49:
1e:53:82:00:ed:eb:b2:a2:e1:16:4b:b4:be:54:26:c9:5d:a3:
4f:b9:8f:06:be:5a:a0:81:8e:43:a4:ec:80:60:14:21:db:ba:
bd:a4:bd:70:63:ee:b4:5f:a9:92:17:95:28:b4:f8:88:d6:4f:
60:49:11:6d:e3:a6:99:56:f3:33:f1:f3:e1:7d:0d:ff:47:62:
be:5f:1c:d3:c3:77:ab:a6:98:03:a7:e2:24:e3:34:bc:19:12:
01:74:d7:f8:c5:ce:f0:eb:21:a7:b8:11:b3:b9:8b:13:dc:45:
fb:de:db:a8:eb:29:d7:52:36:ca:34:61:9c:f6:fb:0c:fb:8c:
33:0d:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 11:50:15 2024 by rpki-client on console-ams.rpki-client.org