Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/pxahEAt_LdfbdSaAGcS8o5LLvTU.roa
File: pxahEAt_LdfbdSaAGcS8o5LLvTU.roa (raw, json)
Hash identifier: BuVaiDE5TzHEppUj7cvvTh3Aokw57dwdKc92S5XE4I8=
Subject key identifier: A7:16:A1:10:0B:7F:2D:D7:DB:75:26:80:19:C4:BC:A3:92:CB:BD:35
Certificate issuer: /CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Certificate serial: 018D2D73AD68EDE36567715D36DB73583F14
Authority key identifier: 0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/pxahEAt_LdfbdSaAGcS8o5LLvTU.roa
Signing time: Sun 21 Jan 2024 19:16:12 +0000
ROA not before: Sun 21 Jan 2024 19:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 195.69.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:73:ad:68:ed:e3:65:67:71:5d:36:db:73:58:3f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Validity
Not Before: Jan 21 19:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a716a1100b7f2dd7db75268019c4bca392cbbd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:e5:0e:ea:61:ff:33:0b:54:84:5a:4c:99:
ce:ac:77:8b:8a:af:c5:7b:08:be:1d:44:90:74:b1:
c1:7f:c4:e6:d7:48:5c:d6:21:95:56:49:38:f3:13:
d1:f2:4f:0b:af:cb:16:d1:55:90:31:86:6a:12:a2:
1a:5d:17:72:89:07:18:9d:74:38:0a:32:ed:47:e1:
8a:ec:2f:b7:cb:87:aa:0a:13:12:5e:51:5b:ca:3f:
3b:d3:08:48:57:51:18:39:54:d1:78:aa:48:5c:34:
a6:61:56:e6:21:76:fc:2d:9d:2e:b2:40:06:76:0b:
28:9f:dc:b2:f7:22:ea:32:d8:87:85:fa:12:8d:77:
eb:8e:e8:e9:4a:36:29:d9:71:22:fc:00:11:4f:b5:
7e:d6:d7:8b:4a:95:51:7e:9c:10:a3:c4:64:b7:8d:
4b:58:d1:50:44:c9:20:11:3f:c9:fe:8e:dd:7b:42:
1a:36:71:af:d0:f1:ab:69:e0:9e:d6:72:25:32:d4:
3c:e8:a4:09:d3:8f:06:b8:7c:12:10:9f:8d:b6:07:
1b:47:c6:1c:4e:3a:75:83:e4:1a:7f:0e:dc:c0:f9:
fb:c0:9a:37:96:f7:8b:18:d1:8b:0c:aa:c5:15:a7:
f3:51:8f:8b:a5:2b:c2:6b:bf:8f:80:da:9c:d5:bf:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:16:A1:10:0B:7F:2D:D7:DB:75:26:80:19:C4:BC:A3:92:CB:BD:35
X509v3 Authority Key Identifier:
keyid:0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/pxahEAt_LdfbdSaAGcS8o5LLvTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/DroFQi1N1HjI8kt_QwIhO_-CdPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.150.0/24
Signature Algorithm: sha256WithRSAEncryption
91:22:a8:bb:25:1b:2c:7b:4f:34:62:57:f5:a9:90:a9:9c:0c:
34:0f:37:b3:e3:47:dc:90:2b:01:3a:53:fa:d5:a1:f8:ba:b3:
4d:0a:ed:be:3b:ac:72:7f:08:5e:66:0f:2c:cb:93:d8:39:22:
0a:d7:fc:fd:4a:88:6a:8e:91:46:5a:97:60:28:0d:ae:a7:7f:
3b:ac:0e:56:1f:88:33:ba:c1:4e:ad:74:fa:f1:a6:49:c1:17:
87:d9:f1:8a:ab:55:6b:b2:fb:df:1b:27:d4:d8:e1:3e:f6:81:
a5:72:fa:c4:88:b7:3d:c5:59:6f:4d:3b:71:ed:f7:17:81:23:
ef:e4:8e:8e:4c:ca:88:5e:f8:34:13:76:5b:0d:aa:10:b3:e8:
3b:d6:81:1b:06:f9:d3:05:e6:71:5d:49:c7:14:06:ba:0c:b8:
a2:2c:39:36:66:34:fb:2d:4b:d3:6c:f3:53:00:ab:3e:14:42:
5a:aa:96:8f:03:53:f2:bf:7a:0d:26:8d:6f:70:6d:f0:5c:b8:
46:0e:ed:01:9e:40:af:2a:c1:11:59:bb:98:f4:d0:3b:7a:e0:
ed:94:cc:94:17:a4:74:18:8f:45:ef:42:a3:8d:bd:17:db:78:
fe:a5:b7:37:40:13:9e:a3:47:a6:9f:1a:b2:e2:d0:24:c9:63:
4f:73:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 11:50:15 2024 by rpki-client on console-ams.rpki-client.org