Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z6cQWMPKtg5YcmSupgMHyKh4uW0.roa
File: z6cQWMPKtg5YcmSupgMHyKh4uW0.roa (raw, json)
Hash identifier: wRHO3YiB9Lr35EEDPMsVOiJtPWQK5pIrJzVWgxmrkuE=
Subject key identifier: CF:A7:10:58:C3:CA:B6:0E:58:72:64:AE:A6:03:07:C8:A8:78:B9:6D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018410341A48A2CBB4D46832C3DEDA626F14
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z6cQWMPKtg5YcmSupgMHyKh4uW0.roa
Signing time: Tue 25 Oct 2022 17:32:40 +0000
ROA not before: Tue 25 Oct 2022 17:32:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142111
IP address blocks: 152.89.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:34:1a:48:a2:cb:b4:d4:68:32:c3:de:da:62:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 25 17:32:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfa71058c3cab60e587264aea60307c8a878b96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:65:7e:97:27:33:a2:9d:f0:95:cf:c4:9f:
0e:b6:ca:d1:09:18:dd:d2:11:85:11:6e:b0:da:d8:
73:ec:42:e5:f5:f3:0e:32:a7:fa:d4:49:bc:b4:ce:
78:d7:11:7b:96:95:1d:3b:00:b7:ad:82:d1:f1:9a:
32:76:f5:ca:66:46:a0:e2:3b:5e:6a:c4:ea:7c:09:
6d:e6:ee:e4:e5:25:b0:a4:02:c2:8c:7a:f1:23:15:
b2:b7:38:57:9e:c6:8a:bd:b2:39:75:5b:ca:4c:5f:
b4:bc:48:9e:a9:08:86:c9:a8:bc:6e:65:f0:3d:f2:
e0:ef:68:41:07:4c:f5:3b:6c:ca:bb:27:ba:3b:ae:
2b:36:1e:22:e9:fb:53:ac:8d:2a:9d:3e:8e:ad:2c:
43:8b:07:c3:9b:ea:c0:f9:6d:82:e6:2c:ec:34:1c:
97:60:07:86:07:d8:49:1f:36:ee:df:d1:3f:8b:55:
f3:32:51:40:67:5d:d8:de:99:0f:22:45:4c:9a:09:
32:5a:8b:b3:1b:59:36:52:03:de:cc:27:37:81:e2:
41:a3:2d:ba:32:43:8a:b5:1e:40:20:cd:cc:1a:bd:
46:02:c5:5f:ef:f9:12:9c:9f:11:52:7d:d2:07:b2:
b7:db:f7:c6:b5:e4:39:c2:d8:9d:cd:af:be:7e:49:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A7:10:58:C3:CA:B6:0E:58:72:64:AE:A6:03:07:C8:A8:78:B9:6D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z6cQWMPKtg5YcmSupgMHyKh4uW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.250.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e3:49:1f:1e:48:b1:fe:a0:8e:b0:ce:e8:76:e3:13:7e:80:
c4:6b:f1:75:a7:2c:1b:87:3b:a5:5d:7c:61:9e:13:ff:c0:33:
c2:a4:1f:48:83:df:3d:39:5d:68:5a:0b:f0:c3:c2:f8:dd:1c:
74:91:97:93:6c:de:fd:a1:ad:2b:97:c2:c8:ce:b5:19:db:c0:
0e:7d:b0:24:67:fb:92:4b:04:d2:82:bb:c0:2a:00:46:c0:46:
8e:93:8b:09:47:8d:50:2a:18:bc:99:6d:0d:5e:9c:95:c2:71:
7b:de:ff:99:d6:46:f6:60:56:dd:36:55:7e:2c:a8:de:92:78:
8f:dc:29:f1:5b:a1:ad:14:93:ba:da:e3:26:3d:ed:16:91:42:
39:1c:c2:59:9f:0d:44:2c:ed:30:86:17:55:fe:cb:24:f7:8e:
c1:03:f5:71:08:3d:56:40:ef:55:f4:07:3f:64:9f:40:d2:0a:
84:2e:09:54:c6:fd:7d:05:0c:77:66:42:d1:19:a5:d7:44:a2:
ec:a4:db:0a:30:d0:8f:63:43:b8:0a:7c:c1:9f:85:68:35:89:
54:6f:3f:72:88:77:0e:c4:eb:cc:77:e8:18:71:97:f1:02:71:
64:62:06:7b:a9:1f:43:a8:0b:96:2e:83:11:53:45:2d:63:c4:
0d:65:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org