Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/0uLewEWzYSDMaPibUchnjKcsIAw.roa
File: 0uLewEWzYSDMaPibUchnjKcsIAw.roa (raw, json)
Hash identifier: ufMsdax7tticHisfa+fSkTnhR6LZH/JNvVfrQkfziSE=
Subject key identifier: D2:E2:DE:C0:45:B3:61:20:CC:68:F8:9B:51:C8:67:8C:A7:2C:20:0C
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 0187217546FBE70F171E6A555EE69379E047
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/0uLewEWzYSDMaPibUchnjKcsIAw.roa
Signing time: Mon 27 Mar 2023 05:05:46 +0000
ROA not before: Mon 27 Mar 2023 05:05:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.184.92.0/23 maxlen: 24
193.37.236.0/24 maxlen: 24
185.2.163.0/24 maxlen: 24
185.2.162.0/24 maxlen: 24
185.2.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:75:46:fb:e7:0f:17:1e:6a:55:5e:e6:93:79:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Mar 27 05:05:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2e2dec045b36120cc68f89b51c8678ca72c200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:72:bf:ae:9f:70:ac:16:3e:c1:13:01:dd:
38:fb:23:7e:92:d9:a8:e5:64:f4:73:85:29:92:d3:
39:44:c4:8c:c5:1e:14:c9:56:60:ea:f0:dc:e6:1d:
2c:34:9d:6d:b5:1b:93:91:5b:5d:90:f2:ed:24:5f:
22:f4:4f:7c:b5:cf:d5:2d:8d:fe:ab:d0:e3:84:e2:
64:d7:3d:ca:d9:35:35:ea:64:ec:b4:25:f3:dd:b5:
3f:06:91:c6:ac:3c:b4:58:6a:23:81:51:67:c2:9d:
f3:d6:1e:9f:d7:ee:2e:a7:13:46:00:99:d9:8e:32:
98:31:28:66:c3:3f:72:3c:07:10:00:60:9e:04:79:
38:79:0b:bb:9b:c3:90:c5:6e:c7:4f:82:a6:29:d1:
0a:a7:5e:75:69:c8:4d:2d:45:e6:f0:25:3c:2a:66:
d6:65:e7:af:78:a8:b0:85:1c:26:23:a6:39:bf:46:
75:48:6e:13:61:85:33:86:94:2b:de:76:b9:6f:e5:
69:28:16:01:13:ac:b9:5e:f5:d9:28:f4:9e:a6:be:
c1:de:07:8a:d7:3f:11:d7:72:be:8d:5f:08:4f:ef:
35:6e:28:77:19:82:8a:af:fe:b1:93:38:c9:a7:13:
d9:1f:09:73:e0:86:4a:b4:c2:39:60:a2:9c:dc:f2:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E2:DE:C0:45:B3:61:20:CC:68:F8:9B:51:C8:67:8C:A7:2C:20:0C
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/0uLewEWzYSDMaPibUchnjKcsIAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/23
193.37.236.0/24
195.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:57:6e:29:a4:16:18:bd:c4:76:16:34:5a:3b:77:41:58:8f:
4d:df:eb:dd:b8:db:8d:ba:b3:a0:63:61:99:6e:1a:f1:20:1e:
2e:ea:66:e5:a7:56:2e:9a:40:a7:d5:fe:57:91:63:16:4b:20:
47:24:bd:01:d0:bf:92:0c:18:b1:77:70:9c:49:2c:68:a3:e1:
93:2c:e0:6b:b0:db:5d:0e:01:48:c9:07:3c:ff:c6:46:93:ec:
d8:52:97:22:5a:44:5c:1d:4a:82:72:40:d4:2b:4c:40:03:fb:
cb:be:a7:e0:c8:17:c3:94:6e:f0:07:dc:7d:86:ca:8f:f0:c0:
57:5c:42:ef:2e:58:94:a3:36:7c:98:c3:62:e0:63:cc:c9:1e:
75:2b:d8:95:5d:12:54:12:d2:d6:94:29:52:c6:41:66:a5:ce:
3b:2a:f2:f5:b0:06:85:64:90:35:f0:c9:e1:58:7a:8d:ba:7d:
5a:17:5b:8b:71:7c:0f:a1:68:2c:5f:f2:3c:4c:de:55:fd:49:
c1:34:ac:eb:be:18:d7:12:6e:dd:90:a4:ea:5c:5d:24:60:9b:
08:20:f3:17:70:73:29:f7:6e:21:9e:ab:00:f5:db:14:6f:6b:
95:16:80:5d:d6:e8:b1:90:60:73:65:f9:37:e2:0b:ae:87:c4:
bb:71:9d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org