Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d83c74-49de-4e4e-84f9-8abd6834c61a/1/4ALhlXnBbteNluslnL6VmbhreHc.roa
File: 4ALhlXnBbteNluslnL6VmbhreHc.roa (raw, json)
Hash identifier: xtiUUvXI4jizBF4HocFkzNnouKymkZX0zspHBnlVMtQ=
Subject key identifier: E0:02:E1:95:79:C1:6E:D7:8D:96:EB:25:9C:BE:95:99:B8:6B:78:77
Certificate issuer: /CN=547abe92b0b91e54715d17a6e87f5e599126f750
Certificate serial: 0188208673C0501264E4D44C8FDF724F46C9
Authority key identifier: 54:7A:BE:92:B0:B9:1E:54:71:5D:17:A6:E8:7F:5E:59:91:26:F7:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHq-krC5HlRxXRem6H9eWZEm91A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d83c74-49de-4e4e-84f9-8abd6834c61a/1/4ALhlXnBbteNluslnL6VmbhreHc.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 213.173.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:73:c0:50:12:64:e4:d4:4c:8f:df:72:4f:46:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547abe92b0b91e54715d17a6e87f5e599126f750
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e002e19579c16ed78d96eb259cbe9599b86b7877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:06:2b:3b:a2:0b:c3:5e:09:80:d8:9b:68:
08:20:f7:23:83:e5:80:dc:00:1f:af:f9:64:ae:e0:
be:d0:dd:0b:b1:b7:a0:d0:62:12:2f:55:0d:e5:10:
df:98:5a:6a:5c:81:56:5a:4f:dc:3a:d5:7a:79:10:
cd:63:92:7a:3d:0d:c2:10:f8:9d:24:18:3f:7c:f5:
f8:ef:81:9b:ef:72:6a:0d:9d:20:38:39:e1:70:40:
b2:f3:1e:d4:23:2c:4e:b2:6a:e9:d7:e9:60:93:d8:
5d:c2:eb:35:66:59:b7:45:aa:4e:57:45:d4:06:5c:
30:80:45:58:b7:60:32:62:90:c1:e7:da:e3:fc:0f:
5f:4f:6f:2b:88:86:a4:5f:6b:e5:d7:e4:47:0e:92:
f2:58:fb:4f:90:92:11:f1:2d:72:26:58:91:b9:16:
2a:e0:f5:2d:16:f8:7a:b2:c8:e4:dc:64:0d:6a:28:
27:3b:f7:74:e3:08:35:12:f0:b8:a1:36:39:52:75:
55:7f:d3:77:b6:61:28:6d:af:bc:a3:e0:fe:54:37:
12:a0:c6:13:4b:43:f5:66:4a:37:a0:d8:a2:e1:98:
61:13:3b:47:19:29:be:ba:65:1c:b8:47:b6:60:20:
be:fb:9f:a8:a8:bb:24:5a:32:7b:87:82:cf:f9:f5:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:02:E1:95:79:C1:6E:D7:8D:96:EB:25:9C:BE:95:99:B8:6B:78:77
X509v3 Authority Key Identifier:
keyid:54:7A:BE:92:B0:B9:1E:54:71:5D:17:A6:E8:7F:5E:59:91:26:F7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHq-krC5HlRxXRem6H9eWZEm91A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d83c74-49de-4e4e-84f9-8abd6834c61a/1/4ALhlXnBbteNluslnL6VmbhreHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d83c74-49de-4e4e-84f9-8abd6834c61a/1/VHq-krC5HlRxXRem6H9eWZEm91A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1c:28:de:14:05:1e:e5:08:c3:b9:d9:37:91:04:d7:09:d1:
8b:d7:a4:97:b0:3f:47:ff:95:58:9a:bd:a5:3d:24:5c:60:df:
ec:f5:03:3e:c6:af:2b:a6:3a:45:f7:a4:c4:68:99:dc:7b:85:
70:0f:35:5f:b0:fb:30:bb:b9:f9:21:17:56:ed:ff:f3:60:fc:
d0:15:e3:7c:fb:f0:71:2d:3d:ba:84:8a:38:f0:51:a1:da:f7:
32:e4:eb:59:4f:70:6c:7f:7b:cc:ac:d4:70:55:a0:0d:f6:1f:
84:91:8e:7b:80:aa:f2:56:bc:e9:3a:97:73:e1:74:76:eb:18:
f5:fa:5a:f2:22:a7:a8:76:22:9c:cb:c4:54:40:8e:3f:c4:fe:
72:9b:16:9f:22:f4:01:4d:e4:4e:7d:28:54:cc:38:34:61:e9:
da:a7:3c:7d:c2:9f:bf:81:ac:29:44:f1:da:94:13:93:99:c8:
bf:cc:4f:8f:12:cf:ea:af:e3:ce:94:f7:83:e5:0b:02:74:00:
95:35:ee:b1:5d:5e:ec:e1:07:06:0c:95:77:7e:b8:99:f3:1b:
be:37:9a:69:4f:68:15:4d:3b:1f:e9:49:37:c3:3f:fa:58:9b:
aa:06:75:25:33:a4:10:df:66:2c:19:e8:bb:5b:d2:52:c6:21:
94:fc:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:25:38 2023 by rpki-client on console-fra.rpki-client.org