Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6082dd-4978-4376-8187-45a4cea86a48/1/rui1LwG6YrY2MM7_gjx_Ua6yqMs.roa
File: rui1LwG6YrY2MM7_gjx_Ua6yqMs.roa (raw, json)
Hash identifier: ie8Uw+7lWZtr3kfSYh5AWcGVoiXUlZOmanpMgLfhl4A=
Subject key identifier: AE:E8:B5:2F:01:BA:62:B6:36:30:CE:FF:82:3C:7F:51:AE:B2:A8:CB
Certificate issuer: /CN=af08fbd7e1268e859d207b113c122032b91526e7
Certificate serial: 018B5B6E47DD1890020BE169CF788007E526
Authority key identifier: AF:08:FB:D7:E1:26:8E:85:9D:20:7B:11:3C:12:20:32:B9:15:26:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwj71-EmjoWdIHsRPBIgMrkVJuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6082dd-4978-4376-8187-45a4cea86a48/1/rui1LwG6YrY2MM7_gjx_Ua6yqMs.roa
Signing time: Mon 23 Oct 2023 07:27:15 +0000
ROA not before: Mon 23 Oct 2023 07:27:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29024
IP address blocks: 185.187.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:6e:47:dd:18:90:02:0b:e1:69:cf:78:80:07:e5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af08fbd7e1268e859d207b113c122032b91526e7
Validity
Not Before: Oct 23 07:27:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aee8b52f01ba62b63630ceff823c7f51aeb2a8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:db:53:99:db:e5:b4:bb:ce:4b:e8:15:f4:
e1:85:bd:d7:e2:b0:f9:de:e5:2e:c5:a8:cf:00:a6:
27:02:41:bb:d3:d5:a6:73:19:20:87:62:54:b0:1d:
9f:64:2d:3a:41:6b:66:85:ab:05:16:c8:de:e8:62:
df:65:f0:9f:3d:2c:ca:e1:d6:d7:b8:e6:4f:7e:1f:
38:b3:f7:63:69:28:9b:8b:87:54:7e:dd:a0:a3:3e:
61:08:35:c6:2f:d3:1e:2a:6e:da:74:d9:2d:00:ac:
9a:41:a1:f1:92:cf:68:bf:fe:5a:e7:fd:86:4b:f7:
a1:c0:f1:f0:12:cd:c0:41:c5:49:fd:d1:3a:45:c0:
97:ce:79:01:64:40:1a:02:77:63:12:34:9d:71:bf:
2b:32:fe:26:34:1e:02:1c:f1:c5:03:3b:be:80:64:
c5:e6:2f:41:ba:d0:34:34:6e:a5:eb:d4:0b:58:07:
3b:93:c6:9b:54:27:97:18:ba:ea:0a:f2:e7:a4:5b:
30:cf:67:19:b8:5d:2e:1c:9d:18:55:f8:11:56:cd:
31:10:43:1c:9c:12:48:0a:f2:bd:25:b2:84:ba:0b:
4b:39:12:bc:af:e8:a0:75:9e:87:fe:62:b5:3a:ca:
1f:ac:5f:db:91:2a:79:42:e3:ea:e8:98:1d:3f:3c:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:B5:2F:01:BA:62:B6:36:30:CE:FF:82:3C:7F:51:AE:B2:A8:CB
X509v3 Authority Key Identifier:
keyid:AF:08:FB:D7:E1:26:8E:85:9D:20:7B:11:3C:12:20:32:B9:15:26:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwj71-EmjoWdIHsRPBIgMrkVJuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6082dd-4978-4376-8187-45a4cea86a48/1/rui1LwG6YrY2MM7_gjx_Ua6yqMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6082dd-4978-4376-8187-45a4cea86a48/1/rwj71-EmjoWdIHsRPBIgMrkVJuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.252.0/22
Signature Algorithm: sha256WithRSAEncryption
07:20:80:01:07:f2:ec:77:f6:69:10:e8:21:40:72:83:28:59:
54:63:78:10:0b:e7:2f:49:48:61:ab:ff:b2:9d:4e:6f:e5:3f:
a2:18:46:72:32:fd:49:5f:75:ea:4d:cb:53:37:8a:4f:32:af:
f0:f3:81:ef:e9:31:74:b4:b5:e0:b4:b6:b5:62:61:53:70:37:
5c:b0:4d:02:c9:cc:d6:7e:94:08:84:00:ed:29:c4:f3:d6:9a:
a7:72:72:01:ad:c0:4a:fe:b1:fa:fa:ce:93:1e:07:22:c5:9d:
21:06:7d:26:29:09:aa:18:dd:f4:12:c6:4b:10:30:18:de:e1:
19:65:ba:bb:02:1b:2f:a0:c5:0c:e1:cf:78:84:1c:8f:b9:00:
f0:59:dc:82:38:94:84:38:41:aa:cb:36:da:bc:51:fe:9b:b0:
a1:8c:14:24:9a:97:b3:3e:1f:d5:c6:bc:de:f9:9a:55:88:d7:
0b:7a:4c:af:6d:21:b3:7a:00:05:b0:d5:3c:bb:2d:39:74:64:
f8:42:16:05:9e:24:3a:57:fe:85:80:87:c2:57:88:4f:77:41:
a1:f4:7f:9e:9e:db:e7:98:21:43:10:0a:6b:6c:e8:7d:d9:83:
d7:67:f5:b1:07:ed:66:f5:28:72:e6:95:eb:09:b5:ba:f1:e8:
91:1c:8b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 09:42:26 2023 by rpki-client on console-ams.rpki-client.org