Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/BsWflBrzy2VoYoowwrrnNnKF7wE.roa
File: BsWflBrzy2VoYoowwrrnNnKF7wE.roa (raw, json)
Hash identifier: 3a1Fi+xcvBM80olypSDxib7/f7041ld+DykfeIfUClc=
Subject key identifier: 06:C5:9F:94:1A:F3:CB:65:68:62:8A:30:C2:BA:E7:36:72:85:EF:01
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186C786ECB754F268E283B623036CA1BC22
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/BsWflBrzy2VoYoowwrrnNnKF7wE.roa
Signing time: Thu 09 Mar 2023 17:59:13 +0000
ROA not before: Thu 09 Mar 2023 17:59:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 185.172.172.0/24 maxlen: 24
185.172.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:86:ec:b7:54:f2:68:e2:83:b6:23:03:6c:a1:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 9 17:59:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06c59f941af3cb6568628a30c2bae7367285ef01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:1f:c3:c5:52:fb:9c:1f:1e:ac:06:af:9f:
ce:e5:01:ac:26:23:bb:6d:bb:6a:f8:01:5e:93:b2:
4b:d6:7b:73:dd:cb:83:c9:ab:85:1b:4a:c8:b5:f2:
ef:44:98:3f:de:58:9a:a7:86:2e:a7:01:39:12:2c:
60:2b:18:63:5f:5f:3c:fe:57:d1:e1:1e:d3:a5:cb:
b5:4f:31:59:4e:42:b2:50:05:7b:fd:32:e8:53:1f:
1a:cd:3b:31:6b:76:04:61:37:b0:e5:70:df:31:8b:
c2:6d:7a:4c:01:59:56:fd:e4:3b:c5:49:2e:10:c8:
ff:62:23:68:71:92:51:c4:f7:ce:7f:0f:9c:11:c2:
1a:01:98:e3:b6:45:70:81:16:ac:2e:87:38:f9:15:
28:ee:96:1f:be:21:29:69:64:77:ec:22:03:7b:e7:
c4:3f:c1:0c:82:5c:54:bb:ec:9a:0d:ef:0c:d6:91:
10:a8:c1:cc:ca:2f:7a:de:77:bc:d3:9c:cb:9e:ff:
07:d0:aa:aa:7b:5b:b0:eb:87:ff:6e:47:1c:ec:cf:
47:79:87:90:bd:5f:c5:c8:59:c3:c2:3f:49:d2:a5:
5a:eb:63:7b:94:55:44:4a:f7:a0:3b:e8:71:4f:36:
47:e5:f9:4b:f8:e4:d8:86:72:4a:05:75:82:c4:c5:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:9F:94:1A:F3:CB:65:68:62:8A:30:C2:BA:E7:36:72:85:EF:01
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/BsWflBrzy2VoYoowwrrnNnKF7wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/23
Signature Algorithm: sha256WithRSAEncryption
38:61:f3:54:80:07:8e:b9:81:97:46:f6:f8:ea:61:40:ac:cf:
37:07:c4:b5:ac:db:44:aa:10:9a:d0:c5:1a:5e:0d:7f:9a:61:
84:90:ca:ee:fd:bc:8d:02:c8:66:8b:ec:02:d8:4a:97:c4:71:
b4:7a:8f:92:d6:68:2f:e7:8a:16:ac:ad:41:62:0d:f5:c0:b4:
9c:42:60:5d:2e:74:a5:1f:1a:ec:92:61:30:19:70:46:9f:36:
f8:ac:32:a7:f3:84:3d:92:d8:04:8e:ca:27:62:d4:3a:5d:de:
f0:c0:87:2f:8e:10:c4:80:7f:3d:73:f3:1d:7b:50:5e:61:72:
6f:b3:56:c1:20:dc:4f:b2:db:0f:8b:99:34:01:9d:6d:1f:73:
63:d3:b9:f5:e9:2b:e8:dc:30:50:21:00:ae:ef:57:b3:34:28:
05:4f:0f:87:72:25:90:24:60:c8:90:2a:5f:ce:2d:e0:41:39:
43:89:74:f9:1c:51:fe:5f:e4:94:e3:6f:d1:ce:68:a1:25:61:
e7:dc:9d:8e:e2:7b:ef:94:98:44:df:35:e3:7f:ce:80:3f:f5:
8e:8a:f3:fc:ff:be:7d:c6:e9:67:12:dc:16:95:dc:53:f0:83:
7c:bf:7c:10:c0:15:48:7f:46:d8:13:34:1e:ca:e8:7c:21:4b:
75:f4:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org