Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/U_2mnCbQeMnYv5wWuMmhhh1VwYM.roa
File: U_2mnCbQeMnYv5wWuMmhhh1VwYM.roa (raw, json)
Hash identifier: nsplwwhNz5qXtv+ZEOXl1Ag3JWuuGlGWQkCxnc1GrXA=
Subject key identifier: 53:FD:A6:9C:26:D0:78:C9:D8:BF:9C:16:B8:C9:A1:86:1D:55:C1:83
Certificate issuer: /CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Certificate serial: 01847DA56C8E6336708B057E4BF4C4F91195
Authority key identifier: 43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/U_2mnCbQeMnYv5wWuMmhhh1VwYM.roa
Signing time: Tue 15 Nov 2022 23:35:03 +0000
ROA not before: Tue 15 Nov 2022 23:35:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15969
IP address blocks: 194.187.72.0/24 maxlen: 24
46.250.170.0/24 maxlen: 24
46.250.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7d:a5:6c:8e:63:36:70:8b:05:7e:4b:f4:c4:f9:11:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Validity
Not Before: Nov 15 23:35:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53fda69c26d078c9d8bf9c16b8c9a1861d55c183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:f7:ec:e4:5b:2c:8b:3b:ea:03:80:4e:84:
b5:3a:d8:e0:33:a3:b6:de:4a:9b:8d:0c:98:1b:bb:
ce:ca:89:71:08:41:11:de:0a:c7:94:db:95:15:b6:
49:41:f0:72:25:3a:fc:48:48:4e:46:fa:00:03:de:
e9:9f:89:9d:2b:74:99:34:47:c8:b4:0a:54:d8:16:
82:1a:c5:5e:31:85:a3:a3:43:49:71:52:a6:e4:e7:
3d:f0:04:eb:b7:30:6d:4e:86:e5:62:3a:6e:ce:74:
f5:ff:45:0c:62:ab:16:4e:fd:0b:97:d5:02:00:41:
78:6d:02:c5:21:c7:26:2d:b0:89:f6:29:cb:22:23:
c9:ad:1f:19:e7:bc:1f:06:a0:c7:ad:64:e0:da:53:
06:58:2e:8a:43:2f:31:0d:91:d9:06:e8:e2:6d:aa:
1c:6c:ac:42:77:5a:01:58:84:22:19:c0:eb:6c:03:
3b:1a:eb:8c:af:92:a3:1d:3d:04:3e:a1:e6:9a:46:
81:17:b7:19:a7:30:2b:91:1c:29:f8:c6:a0:82:3e:
98:94:5e:2d:f4:af:5a:07:1c:9a:23:38:e2:f7:a7:
17:32:f1:a7:64:1c:71:26:ce:ff:b3:7e:f9:b1:21:
32:d8:f7:1e:d6:ba:59:e3:ef:03:9c:7c:64:ad:ea:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:A6:9C:26:D0:78:C9:D8:BF:9C:16:B8:C9:A1:86:1D:55:C1:83
X509v3 Authority Key Identifier:
keyid:43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/U_2mnCbQeMnYv5wWuMmhhh1VwYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.170.0/23
194.187.72.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2a:04:73:c6:8c:d0:74:6a:19:eb:72:72:53:fc:16:d1:4f:
32:70:cd:67:66:b3:06:d8:20:5e:57:6b:f2:56:1a:47:a9:94:
06:5f:44:13:8d:39:d4:7b:df:be:7f:57:48:3e:b7:cb:06:9e:
ab:d2:36:3a:46:37:58:b6:12:13:2f:f7:6a:0c:11:34:47:5b:
a5:79:19:f9:d0:e4:74:c8:38:71:fe:60:9a:e9:62:61:24:48:
b2:8e:19:10:02:a9:60:eb:f0:ce:b3:c9:66:b4:6e:7b:35:15:
0d:95:49:4d:33:f3:06:fc:0c:36:6f:73:8d:d1:bd:71:a2:e0:
c7:35:5f:0f:8c:f9:cb:7e:d9:ce:a2:7e:c4:22:91:8b:ac:09:
7c:52:e2:76:4a:5a:0a:3c:13:21:bd:84:73:29:2a:30:a0:df:
56:be:98:63:dc:e8:3f:f2:f5:53:2e:bf:b7:9c:43:9c:af:6c:
64:76:bb:ad:02:cf:03:7b:d5:72:1b:e5:87:78:07:56:20:94:
9b:c4:aa:6a:aa:28:6f:55:23:dc:00:7d:5e:fb:e0:a7:b2:1c:
65:22:8b:f8:04:b8:9f:54:72:88:57:0d:e6:8b:88:8e:72:5b:
08:48:a7:46:10:54:6c:d1:69:d7:55:61:d3:5b:5d:75:52:92:
ed:81:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:17 2024 by rpki-client on console-fra.rpki-client.org