Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/DyCL1bSQCIADFiHN02LkN7msh3c.roa
File: DyCL1bSQCIADFiHN02LkN7msh3c.roa (raw, json)
Hash identifier: nnLekvFOsfALaEEsbLGE6y5dH+Pvb7SilFNT7lMZSAc=
Subject key identifier: 0F:20:8B:D5:B4:90:08:80:03:16:21:CD:D3:62:E4:37:B9:AC:87:77
Certificate issuer: /CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Certificate serial: 01857343B4E0B24ED8CA416A9581AF3B074C
Authority key identifier: 4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/DyCL1bSQCIADFiHN02LkN7msh3c.roa
Signing time: Mon 02 Jan 2023 16:14:54 +0000
ROA not before: Mon 02 Jan 2023 16:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 185.55.57.0/24 maxlen: 24
185.55.58.0/24 maxlen: 24
185.55.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:b4:e0:b2:4e:d8:ca:41:6a:95:81:af:3b:07:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Validity
Not Before: Jan 2 16:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f208bd5b4900880031621cdd362e437b9ac8777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:60:2a:c4:53:4a:d3:2d:57:62:9b:e3:3c:
86:38:11:d0:c3:b7:3f:99:00:d1:95:62:8c:e5:c8:
ec:e6:82:54:d2:3f:dd:92:a9:45:17:1b:f7:05:3a:
10:b3:67:0e:45:fa:b8:67:a5:62:e1:63:ec:9e:f7:
2e:94:90:72:df:88:48:13:35:86:8c:06:98:4b:3b:
39:a8:9e:dd:34:68:c4:4b:9d:22:43:e9:20:40:48:
47:20:f5:ae:c1:a5:5b:87:6e:2d:1c:4c:e0:39:62:
c2:3a:9f:b7:e2:04:65:1f:c7:70:87:64:44:25:32:
ca:bc:02:74:c4:7c:10:ca:0b:4b:40:8c:63:2c:32:
0f:60:04:73:b9:a1:d1:f5:f8:1d:52:30:57:b1:d2:
50:15:75:df:27:19:0e:be:9d:d1:52:79:6b:13:3e:
b6:23:22:a7:32:18:ec:a8:c8:de:2f:fb:be:63:9b:
83:b0:30:be:e6:16:a8:35:c4:71:da:17:79:5e:b5:
e3:45:2a:2f:fe:3c:6f:2a:f3:a0:1d:6a:6b:16:63:
e2:8b:5c:91:cd:10:33:2d:3c:8b:c7:77:88:5b:8c:
69:23:e3:d8:3c:6b:ec:fe:a1:d4:8a:e5:a9:da:b6:
2d:db:35:cf:dc:be:29:0e:5a:92:0b:a1:a5:ba:13:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:8B:D5:B4:90:08:80:03:16:21:CD:D3:62:E4:37:B9:AC:87:77
X509v3 Authority Key Identifier:
keyid:4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/DyCL1bSQCIADFiHN02LkN7msh3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.57.0-185.55.59.255
Signature Algorithm: sha256WithRSAEncryption
7e:86:14:b0:7a:f4:60:fc:43:f9:8b:11:a6:1c:0f:91:3b:f6:
53:76:7c:f3:29:d3:ac:6b:12:af:00:aa:61:7c:6b:f6:01:d1:
83:b3:9e:c6:87:5d:0e:31:00:44:c4:24:51:ef:51:b6:e2:e6:
3c:58:98:31:23:d9:f9:8d:22:17:b5:1e:c0:8e:53:c2:90:97:
86:71:97:c6:de:03:06:bf:0a:fb:f4:5c:18:b6:8b:88:3e:7f:
11:b5:45:63:f9:dd:66:25:e8:3e:22:ea:e3:44:91:b5:65:4e:
0e:0b:58:1a:7b:1b:05:51:02:a2:79:56:17:af:ff:d3:29:18:
8c:00:b3:4d:e5:de:46:93:67:4b:da:9d:c0:b2:f0:f8:46:d7:
76:ab:ac:d4:5f:95:41:52:25:99:4b:a3:b6:1c:3d:74:22:17:
d5:56:19:e4:98:59:c2:dc:e7:a5:e9:6d:60:14:eb:29:72:92:
bd:7e:80:2a:11:bc:2c:12:9e:08:b7:21:e3:94:84:da:42:9e:
57:a9:2f:4e:0a:d1:19:71:62:cc:04:6e:71:c5:7c:f0:75:cf:
93:87:bf:ba:4a:cb:7e:b0:23:94:b8:ce:a0:3c:30:60:0b:cc:
c5:2a:a0:e4:6b:18:1e:6c:9f:f6:3a:bb:b7:4c:5c:28:05:b0:
bf:72:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 08:37:22 2023 by rpki-client on console-fra.rpki-client.org