Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MMU7fu3973zKY_eOHwXu5WUeRfg.roa
File: MMU7fu3973zKY_eOHwXu5WUeRfg.roa (raw, json)
Hash identifier: GEbhwiEOuTty6PKgSoqqPgFnx6pvkNnKpBhU8sk9dsM=
Subject key identifier: 30:C5:3B:7E:ED:FD:EF:7C:CA:63:F7:8E:1F:05:EE:E5:65:1E:45:F8
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01857DE1B667034099825CCFAEA97A4EF314
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MMU7fu3973zKY_eOHwXu5WUeRfg.roa
Signing time: Wed 04 Jan 2023 17:43:42 +0000
ROA not before: Wed 04 Jan 2023 17:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.172.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:e1:b6:67:03:40:99:82:5c:cf:ae:a9:7a:4e:f3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 4 17:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30c53b7eedfdef7cca63f78e1f05eee5651e45f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:47:d4:a9:9e:16:f8:e1:61:83:af:77:8e:
b6:d8:55:c4:0f:40:2d:b6:cf:a2:4a:da:8f:91:6b:
13:f2:d1:ff:1c:71:86:66:d4:e5:83:6e:b4:6a:a5:
88:06:24:a8:86:5f:8f:8c:fd:fd:ae:8f:32:18:74:
c2:cd:8e:e1:96:81:42:df:ba:da:4b:a8:77:0e:bf:
54:ec:49:03:ff:1d:60:ec:93:93:95:a0:90:ba:61:
3e:46:35:b7:34:ee:99:8d:be:ad:d0:b5:bc:46:61:
16:ed:b1:b7:59:fa:c9:0b:47:c2:46:d7:00:64:4d:
cc:1b:d4:71:2c:81:82:89:92:9f:24:aa:dc:18:39:
a6:59:f9:77:bc:6e:73:80:f4:b6:5c:60:6b:44:c0:
f8:41:55:a9:fd:d0:00:4a:d0:b2:90:d1:5b:f4:61:
ac:4b:ab:64:b8:5f:9e:18:94:bb:33:85:0f:96:c9:
92:bc:1a:0a:a7:28:b4:c8:08:da:0b:fe:31:de:42:
ef:95:16:65:cc:5d:65:33:99:48:d6:8e:96:ab:83:
51:e0:52:a8:fe:22:a8:6e:fd:d5:61:53:18:fd:26:
79:a5:dd:66:93:41:9b:fb:e9:1c:4d:c1:a9:11:a8:
78:00:ec:40:da:1e:a0:46:ac:46:7c:66:06:ad:6b:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C5:3B:7E:ED:FD:EF:7C:CA:63:F7:8E:1F:05:EE:E5:65:1E:45:F8
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MMU7fu3973zKY_eOHwXu5WUeRfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
06:d2:19:ae:44:95:86:f3:45:63:59:ba:5b:4e:4b:d7:00:8d:
a4:10:7b:02:f2:37:0e:6e:7f:0c:9d:ae:7d:9a:af:f1:63:88:
bf:66:d5:a3:a7:7f:9a:de:16:23:e4:08:ce:49:c9:21:fc:74:
cc:02:bd:4c:67:b6:8e:52:34:af:3c:66:1a:03:30:68:20:d5:
15:e9:52:90:34:d3:3c:40:d6:14:20:77:26:63:81:6e:2b:2f:
f9:62:6b:bd:e3:e2:19:28:15:e8:4c:a3:9a:f1:c4:f1:11:29:
c3:11:c9:ec:0a:00:c0:49:09:9c:35:22:ea:71:bc:9f:d4:1b:
7e:41:2b:c3:e3:81:59:6c:39:d7:ec:d0:46:23:a4:bc:87:93:
f9:ff:0a:bd:50:d7:60:35:c3:3b:b1:70:cf:eb:5e:c1:27:4a:
ca:a0:8d:08:55:a6:bf:0e:d4:2d:fc:d6:4f:52:31:6c:91:30:
c4:96:50:c2:ae:f5:75:0f:ad:77:da:df:16:e8:7d:6e:46:4b:
24:28:b0:8f:5f:d8:57:69:05:e9:96:04:e2:9e:ff:e8:85:65:
f4:c1:ad:08:c6:28:8c:fe:38:c6:c4:39:e9:a6:6a:13:d9:a6:
84:09:ef:c1:9f:e1:b4:27:a0:7d:7a:13:41:71:33:e4:11:b8:
77:93:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org