Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/u7bVOntk2xIneGxd7tqSBKbCBsY.roa
File: u7bVOntk2xIneGxd7tqSBKbCBsY.roa (raw, json)
Hash identifier: vf6I0+pygT01OEPCpZgrE3wWHnut83k2fupzqPRZjGc=
Subject key identifier: BB:B6:D5:3A:7B:64:DB:12:27:78:6C:5D:EE:DA:92:04:A6:C2:06:C6
Certificate issuer: /CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Certificate serial: 01856FA7174B41DCC5CBF6D6B6B6A0F00365
Authority key identifier: AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/u7bVOntk2xIneGxd7tqSBKbCBsY.roa
Signing time: Sun 01 Jan 2023 23:24:59 +0000
ROA not before: Sun 01 Jan 2023 23:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211847
IP address blocks: 185.41.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:17:4b:41:dc:c5:cb:f6:d6:b6:b6:a0:f0:03:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Validity
Not Before: Jan 1 23:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbb6d53a7b64db1227786c5deeda9204a6c206c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:be:4c:72:f1:5d:f3:32:b9:df:7c:7c:4f:
83:26:4d:12:76:0e:49:f8:59:46:0d:a5:e3:e6:0e:
09:46:c4:39:24:e7:89:e7:72:08:50:59:29:9a:f6:
e4:39:7a:5b:ed:e3:72:cf:f6:3f:66:bc:08:28:96:
41:a0:6e:74:80:36:fc:d0:68:8e:fa:a8:f7:37:8f:
5b:f0:d4:aa:00:86:b4:67:bd:b8:63:fd:8a:a4:e1:
62:b9:aa:65:97:8a:29:8c:85:0e:a9:ef:84:a3:64:
59:58:58:bf:85:f6:54:d6:03:10:bc:83:38:6c:20:
d0:07:32:74:e3:de:c1:46:9e:0d:66:0b:5a:08:e5:
95:76:de:bb:ee:56:e9:ff:de:95:4a:bc:27:6b:6f:
7b:23:52:eb:42:c0:29:bc:1b:50:47:f7:b2:29:b9:
e0:f1:91:02:28:8a:9b:2f:42:64:f0:24:36:e3:3f:
2d:81:5c:41:fd:08:bc:ff:e1:4a:c3:49:30:bb:5b:
03:2d:af:14:98:b2:6e:ef:4a:87:dc:5b:9a:9f:7b:
c2:42:a0:9c:26:ca:df:01:e9:55:79:61:41:9f:a5:
f1:db:03:a1:07:83:1d:1b:2f:fb:6f:13:ef:67:a5:
31:ff:0b:1e:5a:f5:d9:06:03:66:9f:98:20:5c:41:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:D5:3A:7B:64:DB:12:27:78:6C:5D:EE:DA:92:04:A6:C2:06:C6
X509v3 Authority Key Identifier:
keyid:AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/u7bVOntk2xIneGxd7tqSBKbCBsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.53.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a8:80:3f:d5:07:66:d8:de:6f:7d:91:22:34:f0:97:44:91:
01:4e:99:a7:c4:3c:01:cb:23:79:38:bb:4c:b9:dd:38:37:b6:
fa:dc:b5:cc:1c:e5:30:f8:55:37:6a:6a:1a:22:12:2f:73:37:
a1:3b:bd:d6:93:2c:ea:5b:ec:e3:33:41:53:c8:03:0a:75:ad:
71:0c:d5:9a:d3:b1:9b:14:13:a1:db:16:af:02:4f:bd:1f:c5:
be:62:c1:2f:63:1a:41:e9:94:c2:a0:7f:6a:a4:b8:da:cf:bb:
d6:03:18:b7:05:10:3b:03:de:ad:6f:6c:2e:d2:af:61:a5:01:
31:6a:6a:69:33:1b:cd:03:52:d1:57:71:7f:a0:a5:a4:a8:dc:
3b:1c:e1:8d:c7:7f:f7:f7:20:6e:56:fa:b4:d1:29:76:1f:0f:
1a:c9:b0:2e:3a:80:06:ae:b6:68:f4:4c:15:6d:5c:1e:14:fc:
c1:87:6a:a5:27:80:d2:1e:90:6d:48:25:f0:16:8e:53:c3:4a:
22:ce:6b:a3:62:e9:4d:f8:59:ec:53:ae:ca:9d:9e:34:df:27:
dc:68:88:48:b3:ab:39:90:8b:9f:98:cf:d3:8b:4f:38:f1:b7:
f2:4e:6a:6a:74:3b:be:db:63:d5:d6:dc:07:6f:7e:4f:df:70:
4e:19:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:20 2024 by rpki-client on console-fra.rpki-client.org