Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/kU3pQ5fymt_VjrIhP3O1Q5Q92C4.roa
File: kU3pQ5fymt_VjrIhP3O1Q5Q92C4.roa (raw, json)
Hash identifier: ayvWFeprvjrZHYLmvLHzz97fOWf1Gs5WPr1kVUFWWOE=
Subject key identifier: 91:4D:E9:43:97:F2:9A:DF:D5:8E:B2:21:3F:73:B5:43:94:3D:D8:2E
Certificate issuer: /CN=975151222dc563076f931a41497eb87c6acfdfcd
Certificate serial: 018573839D67CE2B1BB37C57F696EC929A33
Authority key identifier: 97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/kU3pQ5fymt_VjrIhP3O1Q5Q92C4.roa
Signing time: Mon 02 Jan 2023 17:24:43 +0000
ROA not before: Mon 02 Jan 2023 17:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48345
IP address blocks: 185.168.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:83:9d:67:ce:2b:1b:b3:7c:57:f6:96:ec:92:9a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975151222dc563076f931a41497eb87c6acfdfcd
Validity
Not Before: Jan 2 17:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=914de94397f29adfd58eb2213f73b543943dd82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:21:6a:96:9f:a7:a2:4f:32:56:b3:e6:7a:
40:c6:6f:67:0f:dd:c4:98:61:d2:93:5b:cf:e5:82:
14:62:5b:41:d3:8e:ab:ac:f6:8d:bc:9d:99:c0:bb:
86:a2:5e:7f:c0:36:e2:06:fc:4d:c2:8c:70:90:4d:
26:99:39:67:d3:61:e0:aa:13:20:d5:c7:77:1d:c9:
de:ea:28:de:19:78:fc:a3:a0:b3:df:f1:9a:12:59:
69:18:16:8d:94:d1:97:f8:c3:93:0e:fb:fa:7b:8e:
5e:e9:83:1d:2c:f9:be:76:fc:b6:77:5e:b7:70:50:
8f:79:27:1c:93:ae:64:79:f3:08:02:73:88:32:37:
ae:eb:d3:c9:e4:fa:d5:e2:25:6c:b5:ec:31:7d:91:
5b:a6:b4:64:cd:2b:d9:d9:e0:43:13:40:39:2d:18:
e5:28:2c:19:d6:6f:46:2e:a2:72:01:f3:70:b2:c9:
87:22:7a:97:7c:e7:89:bc:87:70:df:08:35:42:47:
10:6e:ee:a2:7c:06:1e:b0:1d:f5:3e:1a:a9:f3:ed:
57:0d:90:1f:aa:2f:14:b3:08:60:51:9f:3e:d2:f1:
2c:b9:cc:e4:9b:b7:f4:49:3f:ca:3a:a3:51:72:af:
c6:e4:42:53:5c:89:38:e6:2b:7f:b0:31:04:fa:b0:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4D:E9:43:97:F2:9A:DF:D5:8E:B2:21:3F:73:B5:43:94:3D:D8:2E
X509v3 Authority Key Identifier:
keyid:97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/kU3pQ5fymt_VjrIhP3O1Q5Q92C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.169.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9b:c9:50:35:c0:58:6c:e6:c6:b3:b9:8d:63:62:52:63:e9:
cd:5a:09:1d:d6:9f:88:b3:42:90:59:f9:42:0c:28:65:b9:76:
b8:c6:cc:d8:18:1c:9f:79:07:9c:5e:38:a2:23:7a:62:4e:18:
78:f3:0e:ea:4e:2e:d2:a5:92:90:b3:c5:52:26:be:af:ba:bf:
59:68:a9:f2:84:53:95:59:23:a0:d7:4b:a2:06:2a:83:b8:d1:
45:18:9f:75:a8:5b:9a:ae:d0:ed:e0:ef:42:0e:72:9b:1f:83:
73:1a:08:6b:99:b3:fa:2c:53:4f:1e:6d:71:ec:92:3f:dd:9d:
5f:a4:87:01:df:72:57:65:58:17:9d:7d:b7:9a:6e:cf:54:82:
ef:d8:0c:e4:0a:a1:e5:d1:99:29:c2:75:2e:70:a6:e0:b4:5d:
c0:66:a5:b5:eb:c9:8d:00:95:45:77:4b:f7:27:11:27:24:18:
fc:d4:eb:3b:75:57:5a:a0:52:5f:f0:2d:06:a0:13:65:6b:96:
5f:1e:67:ef:c1:72:c2:dc:45:f2:95:0f:33:2a:30:7f:d3:6b:
c9:ef:c0:d4:17:b5:f1:18:c5:87:43:6e:3f:0c:4f:43:b5:1e:
d0:52:ad:f4:e4:84:73:d5:01:5f:c3:ec:3c:6a:57:1f:65:ba:
66:0f:a1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org