Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fbadd4-e370-40ff-b461-2b0c851302b4/1/bu1_fzHE-4E2gRutuZBU9oiRouo.roa
File: bu1_fzHE-4E2gRutuZBU9oiRouo.roa (raw, json)
Hash identifier: Xmzbeaiv//JeQPGRjvkSajWSCuMCPYsuMHjPZbAc1Fk=
Subject key identifier: 6E:ED:7F:7F:31:C4:FB:81:36:81:1B:AD:B9:90:54:F6:88:91:A2:EA
Certificate issuer: /CN=cc04ccbb587a6c2615c131b1b849130d9de92e41
Certificate serial: 0186DBA11B4439EFE45EFCDAB877C2BEA49F
Authority key identifier: CC:04:CC:BB:58:7A:6C:26:15:C1:31:B1:B8:49:13:0D:9D:E9:2E:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zATMu1h6bCYVwTGxuEkTDZ3pLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fbadd4-e370-40ff-b461-2b0c851302b4/1/bu1_fzHE-4E2gRutuZBU9oiRouo.roa
Signing time: Mon 13 Mar 2023 15:40:13 +0000
ROA not before: Mon 13 Mar 2023 15:40:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43201
IP address blocks: 5.42.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:a1:1b:44:39:ef:e4:5e:fc:da:b8:77:c2:be:a4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc04ccbb587a6c2615c131b1b849130d9de92e41
Validity
Not Before: Mar 13 15:40:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eed7f7f31c4fb8136811badb99054f68891a2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:b3:6f:ed:fa:fe:bb:b0:27:33:be:d5:a9:
3a:36:96:7d:9e:58:8d:83:a3:3e:2b:4b:47:3e:68:
71:e9:95:a0:2f:9b:83:1c:5f:82:a9:fd:ce:8e:87:
08:a1:53:4b:d8:7f:e8:72:2e:1c:19:e8:89:85:cf:
d0:0a:f7:f5:88:c4:96:50:33:a4:ab:ca:2a:10:79:
ab:3f:b1:fd:d4:04:50:87:2e:88:1c:65:89:b8:00:
c3:26:07:d2:c7:23:6a:37:1a:de:45:5f:e8:71:c7:
fe:38:4f:dc:51:40:f5:ad:63:3c:4f:43:96:2a:bb:
27:da:e3:d8:c6:94:fa:dc:57:d5:67:3d:9d:14:07:
9b:54:1b:0c:2f:ce:e7:23:9f:3b:39:fb:75:8b:cd:
39:15:2a:1a:9e:aa:ae:8e:04:10:e3:69:ee:e8:79:
99:aa:c5:46:e3:40:44:8a:76:ad:96:41:a0:37:7c:
96:eb:e3:9f:f9:2b:aa:4a:b9:1a:2a:37:eb:69:b2:
57:d0:6f:59:43:9f:ec:7c:cf:75:0e:29:47:a0:6b:
f1:32:dc:6c:ad:f6:63:c6:45:75:ee:69:1a:8c:4a:
72:b6:da:17:43:f0:a9:4e:a8:5c:c0:8b:b5:85:a1:
e0:7e:93:f8:ed:dc:19:34:97:77:76:2a:cf:6f:1c:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:ED:7F:7F:31:C4:FB:81:36:81:1B:AD:B9:90:54:F6:88:91:A2:EA
X509v3 Authority Key Identifier:
keyid:CC:04:CC:BB:58:7A:6C:26:15:C1:31:B1:B8:49:13:0D:9D:E9:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zATMu1h6bCYVwTGxuEkTDZ3pLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fbadd4-e370-40ff-b461-2b0c851302b4/1/bu1_fzHE-4E2gRutuZBU9oiRouo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fbadd4-e370-40ff-b461-2b0c851302b4/1/zATMu1h6bCYVwTGxuEkTDZ3pLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d1:1f:93:3c:0a:ea:bc:5f:e3:66:02:aa:da:2b:7b:2b:2e:
4d:3d:7b:4a:fc:8b:23:2f:d1:02:f5:bb:19:8c:af:58:6c:4d:
c9:8c:f8:ae:25:3c:84:65:99:88:1e:bd:93:79:a4:ef:96:11:
f4:46:d0:57:c3:fe:fb:5f:b5:ac:ae:b0:7c:14:a3:1e:49:c4:
d7:7c:0e:14:c0:8f:52:03:e3:86:bc:13:1d:3c:35:e9:3f:bf:
44:bb:25:f2:50:68:7f:b6:aa:db:d3:93:51:ca:3b:f0:97:ca:
14:12:f6:5d:88:af:2a:10:cb:11:46:cd:7f:fe:83:d7:a6:ab:
e7:c7:10:4a:f5:17:5f:52:ab:8d:43:d9:6d:64:9a:72:3a:90:
13:b7:14:b9:5a:65:0d:54:c7:f6:ec:73:91:17:b6:d5:50:1b:
5c:ec:bf:c9:d4:24:25:b5:67:54:0b:2d:c6:75:8b:48:ff:09:
e5:c7:c7:0a:2f:f7:2a:a3:4a:17:9e:52:23:0e:14:25:6a:66:
65:62:99:fa:b5:69:a1:19:04:e0:46:9a:dd:d5:14:9e:11:58:
37:46:81:5a:c7:48:39:7b:12:45:be:55:c1:ab:79:81:7b:f2:
22:79:45:89:ab:ab:08:d6:ec:1a:f6:95:51:b6:a6:0f:2e:7a:
52:eb:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:14 2024 by rpki-client on console-fra.rpki-client.org