Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/brAjZ7vw9TdaH848HetQWuGUKh4.roa
File: brAjZ7vw9TdaH848HetQWuGUKh4.roa (raw, json)
Hash identifier: 1rVhpQja1309npGoWlvUJ64T+1BWbgpZXno2d8x0dDA=
Subject key identifier: 6E:B0:23:67:BB:F0:F5:37:5A:1F:CE:3C:1D:EB:50:5A:E1:94:2A:1E
Certificate issuer: /CN=4fe639ca6dfb592edd3bd160aac68f3a568a80d1
Certificate serial: 018B86028D12A1966BEA2BD1C01B5783E34F
Authority key identifier: 4F:E6:39:CA:6D:FB:59:2E:DD:3B:D1:60:AA:C6:8F:3A:56:8A:80:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-Y5ym37WS7dO9FgqsaPOlaKgNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/brAjZ7vw9TdaH848HetQWuGUKh4.roa
Signing time: Tue 31 Oct 2023 13:53:15 +0000
ROA not before: Tue 31 Oct 2023 13:53:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50612
IP address blocks: 5.42.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:02:8d:12:a1:96:6b:ea:2b:d1:c0:1b:57:83:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe639ca6dfb592edd3bd160aac68f3a568a80d1
Validity
Not Before: Oct 31 13:53:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb02367bbf0f5375a1fce3c1deb505ae1942a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:e0:97:5e:a9:13:b4:8e:28:cb:50:68:e3:
49:76:70:94:00:aa:4e:75:12:4f:5c:cd:0a:93:79:
d0:fa:7b:e3:2c:ff:05:1b:0b:de:d8:af:e6:05:53:
72:4f:18:8e:37:4f:49:27:86:de:53:b8:bd:3f:74:
a4:fe:18:ba:10:c5:31:d8:d3:f2:84:53:ec:ce:97:
e6:2f:42:16:ad:83:9a:96:84:39:1f:36:82:a3:4c:
21:fe:91:e9:4f:db:66:07:28:66:6b:10:b6:cf:0c:
be:f1:51:6b:3a:f0:e9:0d:7d:2c:b4:82:f0:54:9a:
9f:4c:d7:7d:c3:77:d2:75:29:81:af:fa:cd:c0:37:
7f:c2:5a:ec:40:2b:7f:6b:86:20:b4:55:6a:5a:6c:
84:38:e2:1a:f2:04:2f:23:a0:07:8d:ca:5b:ed:d8:
5e:d9:ed:16:fd:87:ee:1e:22:61:a9:37:4c:f6:6b:
2b:02:d7:0d:9c:e9:ce:19:89:a4:ce:81:51:04:bc:
49:13:e1:eb:ce:43:09:84:86:b6:3d:de:8a:03:cd:
67:1f:fe:d0:63:ad:02:40:68:c9:09:c2:d0:b5:b9:
88:45:1a:75:37:b8:cc:2f:2f:60:c5:a0:51:0f:35:
ce:cc:19:dc:85:db:63:91:b1:f4:40:10:b7:55:3d:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B0:23:67:BB:F0:F5:37:5A:1F:CE:3C:1D:EB:50:5A:E1:94:2A:1E
X509v3 Authority Key Identifier:
keyid:4F:E6:39:CA:6D:FB:59:2E:DD:3B:D1:60:AA:C6:8F:3A:56:8A:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-Y5ym37WS7dO9FgqsaPOlaKgNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/brAjZ7vw9TdaH848HetQWuGUKh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/T-Y5ym37WS7dO9FgqsaPOlaKgNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.215.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ac:f8:67:7b:6b:09:77:2b:c2:8a:82:2a:30:02:b5:af:96:
25:b9:db:da:20:a2:b1:53:68:dd:0f:eb:cb:8a:a9:61:1f:b1:
fd:54:62:a8:ea:c5:57:6b:e8:a3:ea:1f:d4:7d:6b:42:30:a9:
f0:5c:73:a5:6c:a8:f3:ec:5c:51:2d:2d:97:72:6a:fd:d9:4e:
f0:c2:28:dc:7f:46:5f:9f:59:0e:61:42:cb:32:f6:6d:34:2d:
0b:45:26:e8:97:77:81:5c:f3:6e:6a:c1:fe:2d:c3:fa:98:1a:
78:18:b6:fd:05:7b:11:fa:98:eb:61:aa:08:a1:00:2f:9c:e2:
47:20:e3:2d:13:a6:40:d4:ce:04:8c:f0:71:88:f9:8f:34:a2:
86:ad:00:f6:97:63:18:28:d7:9e:73:f2:5f:1f:f3:c1:68:3c:
6f:ce:c0:58:71:fc:3a:97:fc:d0:23:12:c5:57:27:ed:5b:35:
b1:9f:88:0d:a5:96:cc:f2:8d:1e:9a:21:c8:9c:6c:de:38:46:
0b:54:7c:da:76:6c:8f:bd:a7:b8:22:b4:e0:d9:7a:7e:2c:4a:
d9:c6:32:d9:46:6a:65:c1:63:5d:dd:fc:d9:0e:83:23:96:26:
c3:c8:5e:e7:ee:3c:40:1f:d7:4e:f9:f8:ef:18:f9:7f:0e:cc:
9f:3e:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:27 2024 by rpki-client on console-ams.rpki-client.org