Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/L3uNFY7YGDH4Xauarn-LwWOK0to.roa
File: L3uNFY7YGDH4Xauarn-LwWOK0to.roa (raw, json)
Hash identifier: f2x1msBKAaTcP11KlYgwco66HwGlJb25oZVX4TjFH3A=
Subject key identifier: 2F:7B:8D:15:8E:D8:18:31:F8:5D:AB:9A:AE:7F:8B:C1:63:8A:D2:DA
Certificate issuer: /CN=4456921693e31d6c96f671bea7341d0d58dfffe9
Certificate serial: 0183AD53CAA7C12F6370417EA95FBD9E57B2
Authority key identifier: 44:56:92:16:93:E3:1D:6C:96:F6:71:BE:A7:34:1D:0D:58:DF:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFaSFpPjHWyW9nG-pzQdDVjf_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/L3uNFY7YGDH4Xauarn-LwWOK0to.roa
Signing time: Thu 06 Oct 2022 12:44:53 +0000
ROA not before: Thu 06 Oct 2022 12:44:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51679
IP address blocks: 185.253.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:53:ca:a7:c1:2f:63:70:41:7e:a9:5f:bd:9e:57:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456921693e31d6c96f671bea7341d0d58dfffe9
Validity
Not Before: Oct 6 12:44:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f7b8d158ed81831f85dab9aae7f8bc1638ad2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:26:49:09:84:34:58:78:88:a1:79:ef:b2:
64:73:1c:79:29:87:a9:ee:7b:ef:77:c4:1d:45:8d:
87:93:3e:24:05:e3:24:16:cc:c0:9a:17:e1:c3:20:
6d:ae:49:32:40:7f:d7:eb:06:19:3b:2a:9b:b0:09:
5b:12:77:5e:e9:45:90:40:26:0d:f0:e6:da:70:64:
b2:db:4b:27:4a:4c:53:a1:d1:62:22:b4:93:29:9c:
28:11:22:b2:4e:5d:0e:a5:57:0f:30:6e:a2:2b:e7:
97:f5:fb:5c:e7:05:d2:b4:1c:ab:21:2b:3d:c8:d0:
a2:41:f6:7e:2a:e4:d5:2f:81:cb:0c:d4:56:c0:09:
c0:d3:4a:f6:4b:50:56:46:b8:b3:09:1b:5a:ae:ea:
65:c1:f2:31:c0:80:86:17:2d:aa:b8:ff:91:1b:6f:
d8:83:52:f7:8c:91:5f:95:9d:41:50:0a:e9:50:e2:
e0:0b:d9:c5:e7:12:11:be:43:5d:b2:d8:72:f2:f9:
17:02:90:ba:96:7d:e1:2a:e3:8f:81:d5:ad:a6:72:
ca:a2:0e:29:72:d0:ad:f4:d9:18:ac:fe:72:14:4a:
49:07:1c:02:67:37:da:e3:22:6b:aa:14:fd:1d:70:
8d:43:9e:c6:39:fe:fb:81:7f:e6:96:9a:74:f0:a6:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:8D:15:8E:D8:18:31:F8:5D:AB:9A:AE:7F:8B:C1:63:8A:D2:DA
X509v3 Authority Key Identifier:
keyid:44:56:92:16:93:E3:1D:6C:96:F6:71:BE:A7:34:1D:0D:58:DF:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFaSFpPjHWyW9nG-pzQdDVjf_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/L3uNFY7YGDH4Xauarn-LwWOK0to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/RFaSFpPjHWyW9nG-pzQdDVjf_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.53.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6e:db:4a:8c:60:84:69:83:9e:f8:59:84:d4:08:a9:8c:93:
64:39:83:b2:7d:a5:9f:cb:54:87:98:1a:ee:67:bb:d5:58:50:
d5:b4:3a:3c:89:10:d2:58:6c:fc:bb:3d:75:8c:cb:56:a1:18:
3a:bb:42:ae:6d:5d:ca:b8:66:f4:75:8c:63:8c:95:91:64:20:
da:2f:cc:e3:89:11:62:eb:09:72:84:c9:4f:3e:a1:55:c0:e2:
d5:e1:7c:09:ed:4e:4d:3a:1b:ed:f3:1f:45:8a:d6:78:34:8b:
d4:e5:07:8c:d3:4a:03:0f:57:49:58:64:8e:33:10:5f:7b:be:
8b:e8:1b:a3:de:0c:c6:a4:c8:90:b1:1e:9f:62:b9:dc:84:1a:
20:17:ce:f6:48:65:0d:43:95:ce:4a:85:34:20:8b:d8:cc:36:
7a:6b:6e:17:da:14:cf:5b:0a:f2:31:c7:0e:c2:58:b5:83:55:
50:eb:4d:2c:22:d8:82:f5:4d:22:18:ad:ee:7f:9d:e6:22:18:
ad:a8:c8:f4:02:25:b0:07:18:30:51:4e:20:44:0f:86:66:4b:
e5:cb:8a:a0:51:1a:64:39:f5:fc:0d:ec:e8:66:00:d9:bb:a6:
47:e0:7d:a7:18:46:61:cc:9f:32:8e:2b:94:d9:fd:98:63:e3:
0a:12:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:50 2023 by rpki-client on console-fra.rpki-client.org