Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/blV0PoyS7a4eJtdf2-B7PmHKZhY.roa
File: blV0PoyS7a4eJtdf2-B7PmHKZhY.roa (raw, json)
Hash identifier: jjqp3/FqkhbOC36XFl9/+7/DFO7IMYNtVlBTqn9Svuk=
Subject key identifier: 6E:55:74:3E:8C:92:ED:AE:1E:26:D7:5F:DB:E0:7B:3E:61:CA:66:16
Certificate issuer: /CN=344f5eb0efc517d6caaeb7c74a847f965c0e14d9
Certificate serial: 01856B4A1C26A4A3C3A5C1F397C2B0BB5AEC
Authority key identifier: 34:4F:5E:B0:EF:C5:17:D6:CA:AE:B7:C7:4A:84:7F:96:5C:0E:14:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE9esO_FF9bKrrfHSoR_llwOFNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/blV0PoyS7a4eJtdf2-B7PmHKZhY.roa
Signing time: Sun 01 Jan 2023 03:04:56 +0000
ROA not before: Sun 01 Jan 2023 03:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201295
IP address blocks: 185.252.28.0/24 maxlen: 24
185.252.30.0/24 maxlen: 24
185.252.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:1c:26:a4:a3:c3:a5:c1:f3:97:c2:b0:bb:5a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344f5eb0efc517d6caaeb7c74a847f965c0e14d9
Validity
Not Before: Jan 1 03:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e55743e8c92edae1e26d75fdbe07b3e61ca6616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:a7:df:65:f2:5a:d0:60:a4:53:9b:06:8a:
a9:bc:df:da:56:a8:d4:95:fc:29:87:73:ff:ca:5c:
c3:74:9c:34:57:ea:eb:3d:52:3c:6a:4b:a7:7f:4e:
10:4a:0c:1b:6f:ed:b0:11:26:a9:ce:2f:eb:49:2b:
11:06:7f:26:53:9b:fb:38:48:64:9f:bc:63:9f:f7:
79:9e:54:56:2c:93:f1:24:8b:15:b6:fb:b3:85:78:
a3:ab:66:d8:0c:ba:12:2f:20:0f:b9:31:ed:3e:77:
11:01:8a:ba:60:80:51:ef:67:ae:c2:fd:32:09:44:
4a:a0:d4:a7:55:a2:a6:40:4a:c9:91:df:12:45:ef:
bf:20:9d:6e:bd:23:34:23:fa:cc:86:a5:2d:0e:62:
85:c6:b6:99:bf:26:63:6a:e5:2a:a6:f7:d6:33:aa:
d1:6c:8a:84:53:b8:b9:b1:79:9e:fa:99:c0:ce:d2:
c5:f6:b4:b7:86:88:ea:fe:4f:87:10:90:60:72:ec:
82:a6:ff:93:77:35:b8:db:eb:46:29:d1:b5:7b:7e:
82:c3:59:82:36:0f:97:77:8d:c6:ca:a2:5c:e4:65:
60:19:b5:aa:75:78:f0:48:ec:7c:24:df:a7:d4:aa:
89:e3:e2:77:f5:a5:4b:2a:b6:bb:65:a8:da:76:70:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:55:74:3E:8C:92:ED:AE:1E:26:D7:5F:DB:E0:7B:3E:61:CA:66:16
X509v3 Authority Key Identifier:
keyid:34:4F:5E:B0:EF:C5:17:D6:CA:AE:B7:C7:4A:84:7F:96:5C:0E:14:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE9esO_FF9bKrrfHSoR_llwOFNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/blV0PoyS7a4eJtdf2-B7PmHKZhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.28.0-185.252.30.255
Signature Algorithm: sha256WithRSAEncryption
69:39:c8:e7:69:3d:ae:80:ba:a0:e5:1c:57:43:75:86:70:7e:
f3:6b:6f:4a:48:ec:42:a4:51:d0:29:f8:b8:9c:1a:7b:d9:51:
0c:5b:91:7f:e8:b7:ac:d6:97:28:7f:5b:a9:00:51:46:b1:99:
cc:8c:06:1e:9e:81:bf:35:89:3b:a6:49:93:fc:c6:d7:3e:97:
ba:16:16:2c:4b:d7:f6:bf:3b:0c:d9:50:42:44:98:8c:b9:70:
90:18:a7:54:8f:b9:9b:20:56:b6:f9:1d:9a:4e:71:7d:77:06:
98:cf:bb:4e:2e:75:82:29:64:07:15:fc:0b:bb:99:15:0f:17:
88:1f:59:7d:85:64:1b:3e:66:88:2e:a7:1d:37:70:e0:e1:e2:
39:13:09:f8:25:a5:65:cc:af:9c:f7:40:f3:47:60:6d:e3:c5:
85:8b:c8:bc:e0:3b:d0:7d:42:27:9e:00:c1:b8:fd:7f:6f:70:
a1:8a:1d:09:57:1c:06:26:ff:03:15:15:4a:45:77:44:bc:be:
98:1b:ae:c1:49:bc:a7:a7:b4:eb:98:4e:d5:40:f7:11:e9:3f:
3d:b4:f3:c8:40:58:2c:3f:ea:e6:c2:14:99:f0:0d:6d:d5:b8:
7d:4f:74:c5:b0:51:24:19:9f:4d:c0:f1:50:06:27:5c:44:70:
a0:58:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:49:08 2023 by rpki-client on console-fra.rpki-client.org