Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/BHAbyjqTelfazn_qle35X7gnB50.roa
File: BHAbyjqTelfazn_qle35X7gnB50.roa (raw, json)
Hash identifier: ruIvtCV5sL4rX0a/K19Od3GoPUuLkfquJ2t6KgZxR5A=
Subject key identifier: 04:70:1B:CA:3A:93:7A:57:DA:CE:7F:EA:95:ED:F9:5F:B8:27:07:9D
Certificate issuer: /CN=0d01db542317430414757aacb093fd72069192b1
Certificate serial: 01856B6EA02B36D2F9351A6BD32D3D2AE6D6
Authority key identifier: 0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/BHAbyjqTelfazn_qle35X7gnB50.roa
Signing time: Sun 01 Jan 2023 03:44:50 +0000
ROA not before: Sun 01 Jan 2023 03:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24935
IP address blocks: 94.158.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:a0:2b:36:d2:f9:35:1a:6b:d3:2d:3d:2a:e6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d01db542317430414757aacb093fd72069192b1
Validity
Not Before: Jan 1 03:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04701bca3a937a57dace7fea95edf95fb827079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:78:66:69:a3:c6:fa:d9:9d:5f:59:45:79:
8d:5a:cd:e8:05:ee:d9:30:65:b7:02:57:8e:0a:d6:
f3:a9:96:be:8d:cc:2b:87:94:b7:f5:62:57:59:9c:
ce:a0:46:da:02:01:87:b5:d2:be:86:b7:b6:98:5f:
75:db:e9:ae:f9:af:57:1c:74:21:61:dc:f7:f7:52:
2c:eb:1c:cd:f4:ef:eb:9d:1c:cb:6e:07:8f:48:9d:
76:24:12:01:65:90:d6:ca:fc:1b:d1:ce:43:12:20:
35:af:4c:97:cc:1b:1b:2a:8f:4f:1f:84:51:e1:f2:
9e:e3:7c:95:ad:2a:20:9c:e0:19:f7:ae:a1:33:b3:
19:46:bb:59:ae:48:87:ee:9f:51:7d:4a:a9:80:ae:
d4:a1:06:08:3f:78:1b:29:fa:e6:34:55:cc:8d:22:
15:6d:79:d1:21:75:85:66:3f:af:84:d9:69:a4:03:
2d:b7:67:e7:52:90:4d:75:d8:9a:1e:1b:12:4f:ad:
1d:fe:69:e5:6a:ca:4e:3c:9f:38:70:60:70:ab:2b:
a0:4b:52:bd:6e:af:6d:21:50:f1:6b:f3:b1:87:28:
02:76:18:47:d0:42:ae:d6:92:cf:81:f7:9a:9d:cc:
68:ce:8b:ad:b0:f3:ef:88:05:60:02:55:83:8a:70:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:70:1B:CA:3A:93:7A:57:DA:CE:7F:EA:95:ED:F9:5F:B8:27:07:9D
X509v3 Authority Key Identifier:
keyid:0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/BHAbyjqTelfazn_qle35X7gnB50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.182.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a4:af:23:2e:7e:c1:0c:27:95:ce:ce:f3:0c:38:18:23:5e:
0e:d9:65:61:03:65:68:78:d3:14:36:6f:a2:a5:0b:82:af:26:
f5:51:e6:72:40:4a:79:7a:a8:cd:6f:7d:bd:cd:a2:24:fe:aa:
78:a3:c4:be:e3:7d:81:85:9f:4c:7d:11:97:4f:2d:a7:95:d7:
58:0b:46:6c:87:cc:0e:a4:38:88:9e:06:a3:d1:6e:7a:78:aa:
12:ca:da:2e:2a:12:40:e0:d3:4f:41:62:7f:46:67:6e:0c:d1:
9f:45:f4:43:f7:0c:98:2e:e5:f5:7d:d0:8f:69:c1:c5:9f:de:
e3:91:27:93:84:54:16:01:6f:be:1c:9f:21:85:a6:7c:c9:e0:
47:a7:d1:d7:33:ac:5b:3b:e9:9a:21:c7:95:df:63:7c:37:ac:
8c:13:19:db:35:24:37:db:2e:b9:27:90:81:91:35:9d:95:4d:
df:22:58:01:f0:2e:1c:f6:52:d0:23:1c:a4:04:4b:22:6c:e6:
2d:30:4e:24:88:04:41:ee:eb:7b:14:f1:7f:0e:cb:d8:47:87:
e6:80:b5:87:c1:8b:d9:ad:0d:9c:4e:9f:9a:7b:12:0c:b7:37:
a9:90:b1:75:21:44:86:8e:c0:c7:47:b7:57:90:37:da:65:d7:
a5:14:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 15:12:07 2023 by rpki-client on console-fra.rpki-client.org