Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/VbKwOcc__FSMY3LhU1V4CmN-SFA.roa
File: VbKwOcc__FSMY3LhU1V4CmN-SFA.roa (raw, json)
Hash identifier: Teavwop/B+r6P4hh6hf4aRceqi+hc8bCtw0OcZmFFaU=
Subject key identifier: 55:B2:B0:39:C7:3F:FC:54:8C:63:72:E1:53:55:78:0A:63:7E:48:50
Certificate issuer: /CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Certificate serial: 018CC49370F0FB6C2DCDCEA5233385797502
Authority key identifier: 46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/VbKwOcc__FSMY3LhU1V4CmN-SFA.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50304
IP address blocks: 185.73.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:70:f0:fb:6c:2d:cd:ce:a5:23:33:85:79:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55b2b039c73ffc548c6372e15355780a637e4850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:bf:06:05:a6:56:db:f8:8e:6d:58:ac:fd:
f2:b7:89:82:d9:d5:35:86:e7:8d:24:83:1e:23:e4:
db:04:07:d9:03:dc:b3:fd:b0:08:2f:7b:ac:af:76:
58:75:fe:5b:11:06:b5:b0:3a:1f:6e:43:ed:63:4f:
5d:64:9e:45:7f:2c:ac:9c:57:38:4c:fb:53:01:ee:
14:d0:fe:b3:b8:1d:76:3c:fa:50:e1:fb:17:a0:9f:
2b:4c:cb:e8:bb:ef:ef:a1:8e:01:07:4e:ff:6a:0f:
bb:4a:c1:59:20:47:9b:1e:ca:ac:91:0d:18:f8:4d:
03:5b:13:f7:7a:8b:71:f3:a6:56:b2:f6:fc:28:8f:
cc:2f:2d:98:98:62:68:23:68:da:66:10:3d:52:a2:
09:d0:7c:e9:98:a8:47:6f:d7:7d:04:23:37:c5:c7:
fb:eb:6c:0e:08:44:87:44:fb:9b:b9:1a:67:f8:2d:
f2:76:4a:7c:85:35:92:c4:ff:5a:b0:70:5e:23:15:
44:0d:8b:f0:51:9b:6f:69:2b:c1:97:b3:5f:1a:5f:
96:89:95:26:ff:88:6e:72:bb:c2:39:f6:aa:4f:ff:
75:b8:c8:b6:c9:3a:e7:6a:d9:55:57:11:b2:c9:c5:
27:e8:58:5c:28:62:b8:f9:d2:2f:d8:25:79:b2:24:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:B0:39:C7:3F:FC:54:8C:63:72:E1:53:55:78:0A:63:7E:48:50
X509v3 Authority Key Identifier:
keyid:46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/VbKwOcc__FSMY3LhU1V4CmN-SFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.135.0/24
Signature Algorithm: sha256WithRSAEncryption
16:31:04:93:5d:38:d1:84:2c:d7:13:6f:d9:2f:b9:2f:83:fd:
31:f4:dc:13:39:54:a9:69:42:7e:3b:6f:c4:9d:ae:4e:f4:bc:
0d:b5:de:8a:b4:db:d1:90:18:69:87:f8:c2:68:8e:cc:1f:b4:
96:e1:39:a9:fa:6e:fa:1c:71:18:81:1c:b7:52:c3:59:48:2c:
76:3b:6a:9e:3e:8d:1f:5e:b4:5f:bf:19:34:fe:22:88:fb:d6:
a1:84:48:f7:40:4f:68:88:d9:4c:ae:86:3c:30:b4:9b:90:64:
f5:33:f9:db:ec:4e:16:d7:7d:fa:1f:88:8f:ea:49:79:14:80:
a6:85:f0:ea:da:51:4c:22:1b:fd:fb:fb:08:7d:ba:9f:72:e0:
71:7a:05:b6:61:e5:75:a1:b9:e7:64:96:ee:cf:b6:09:84:e1:
4e:5d:e0:b2:9c:f2:69:da:b9:c2:61:05:9b:47:67:18:39:76:
e2:ab:d8:56:80:1e:26:99:e5:94:58:97:f5:84:1d:2b:b3:ae:
3b:5f:a3:a1:4d:6d:ba:6e:4f:d9:89:40:f8:3a:75:bb:4c:bc:
0d:66:d0:d9:5a:cc:35:c5:99:c2:ac:4b:16:89:e0:8c:d2:80:
83:59:a3:9c:d2:49:d8:d7:43:d2:be:71:c2:25:01:25:a9:c0:
38:92:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 09:24:08 2024 by rpki-client on console-ams.rpki-client.org