Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/X5e_IerVtAhelgDC6zO6lH_7-po.roa
File: X5e_IerVtAhelgDC6zO6lH_7-po.roa (raw, json)
Hash identifier: pK6TIL+Ue0QgzJ3FtDFTJ6VawOnundNOCGdMJr28E1M=
Subject key identifier: 5F:97:BF:21:EA:D5:B4:08:5E:96:00:C2:EB:33:BA:94:7F:FB:FA:9A
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 0182D5FA086B74113FA989C3FB511FFE0B2B
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/X5e_IerVtAhelgDC6zO6lH_7-po.roa
Signing time: Thu 25 Aug 2022 17:08:29 +0000
ROA not before: Thu 25 Aug 2022 17:08:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210531
IP address blocks: 195.8.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:fa:08:6b:74:11:3f:a9:89:c3:fb:51:1f:fe:0b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Aug 25 17:08:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f97bf21ead5b4085e9600c2eb33ba947ffbfa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:6e:bb:87:e4:e3:71:92:ee:fa:3c:f3:84:
2e:af:c1:e0:09:58:f6:56:fe:82:cb:63:e9:81:fd:
64:e5:28:6f:b6:06:b3:6d:a2:b1:3d:dd:d4:e5:2c:
40:cb:29:f3:f5:fb:7e:fd:b4:1d:b1:7d:61:37:8f:
54:03:77:62:bd:4a:ff:a0:22:fa:0f:2e:92:60:48:
22:83:70:d9:ce:f9:d1:11:ab:b8:bc:b2:af:22:49:
87:3a:da:c2:b0:49:63:22:39:f6:ea:fa:7f:b0:49:
84:e5:3f:bd:f7:51:98:2b:0c:05:4f:ab:31:96:40:
9b:a4:2a:b7:71:55:29:73:de:33:3a:13:5e:aa:b1:
eb:8f:0c:7a:d7:ba:2c:04:5a:eb:0c:d9:98:bc:e6:
82:58:0a:be:12:74:37:bc:8c:2d:96:48:03:68:00:
c1:8b:cb:81:99:85:f7:70:ae:6c:b2:c7:a4:ef:4d:
ab:01:ae:79:06:25:57:86:eb:87:2b:71:e6:3b:fb:
29:64:2a:9f:05:b7:3a:9b:10:bf:d2:cf:9e:fc:f5:
19:45:51:3e:6b:76:bc:e3:66:05:21:9d:2d:71:60:
09:54:61:08:18:57:5b:ff:63:6b:07:54:ad:67:d5:
b6:87:42:75:5c:12:5a:a7:b1:e3:bb:f4:e8:20:cd:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:97:BF:21:EA:D5:B4:08:5E:96:00:C2:EB:33:BA:94:7F:FB:FA:9A
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/X5e_IerVtAhelgDC6zO6lH_7-po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3f:50:85:6e:13:78:7d:dd:93:bd:63:80:2e:5a:c9:d8:ab:
9b:62:34:5c:94:d7:e7:16:c0:ab:f1:ba:0c:e6:78:c1:f3:d1:
9c:63:ca:d6:a7:77:72:64:00:c5:b7:90:e4:3b:f4:2e:4b:ec:
19:81:06:1f:38:46:2d:85:b6:f1:87:d4:e3:a3:e4:39:35:d4:
4a:ef:02:0e:18:7e:dc:2d:db:62:20:22:eb:c4:f8:db:41:1e:
c3:b2:ba:9d:5e:a4:fc:dc:d7:67:87:35:38:5a:4b:38:f7:34:
01:7c:ac:22:d7:a8:41:da:38:61:d0:e4:bd:7b:7c:34:e3:74:
8e:d1:3e:8d:17:ae:58:0f:ba:cb:5c:65:87:b4:c5:63:3a:d4:
86:2c:a5:10:20:3e:ff:bd:a6:e4:b4:0e:cb:22:e0:b0:e5:d9:
24:45:9f:7e:b5:bd:56:96:87:45:8f:e0:63:b3:1e:d8:3e:1d:
d7:71:21:d3:de:8a:39:bc:4a:b4:f2:28:12:a0:59:4c:0a:cc:
b7:22:3c:bc:3f:23:82:bf:d7:29:4f:73:0d:0c:bc:fb:c3:c8:
b0:a6:0c:07:10:22:21:9c:2d:a2:c1:41:c2:45:54:dd:a6:62:
cf:c0:f5:22:fe:94:6d:da:c8:2c:6a:3d:14:84:ef:af:ed:e1:
09:01:31:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net