Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/AZgUttUvgZ2j_QesiB6Nayrnk-c.roa
File: AZgUttUvgZ2j_QesiB6Nayrnk-c.roa (raw, json)
Hash identifier: 1vBFL2gSyo5QKyAsIih+GWXejNRfz43BFbb4wsWNM7g=
Subject key identifier: 01:98:14:B6:D5:2F:81:9D:A3:FD:07:AC:88:1E:8D:6B:2A:E7:93:E7
Certificate issuer: /CN=d5271a6f99eac12abe0856100a14a2d9663ce7bb
Certificate serial: 018571F9F6AEE8467048BD90D1CDD76E347E
Authority key identifier: D5:27:1A:6F:99:EA:C1:2A:BE:08:56:10:0A:14:A2:D9:66:3C:E7:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Scab5nqwSq-CFYQChSi2WY857s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/AZgUttUvgZ2j_QesiB6Nayrnk-c.roa
Signing time: Mon 02 Jan 2023 10:14:44 +0000
ROA not before: Mon 02 Jan 2023 10:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30981
IP address blocks: 185.23.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:f6:ae:e8:46:70:48:bd:90:d1:cd:d7:6e:34:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5271a6f99eac12abe0856100a14a2d9663ce7bb
Validity
Not Before: Jan 2 10:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=019814b6d52f819da3fd07ac881e8d6b2ae793e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:41:7d:a3:f4:e9:2a:4d:3c:1a:54:67:7f:
7e:20:f3:67:4c:33:56:c4:87:23:48:2e:de:a6:06:
9b:9d:c1:81:0b:34:df:00:b6:77:4a:8f:dd:57:eb:
0b:37:2f:e2:ac:40:ca:93:4c:0b:d0:1b:b0:be:c7:
71:85:43:55:f2:ad:57:23:21:93:09:61:a1:a2:61:
36:28:2e:a3:43:ef:46:da:40:17:51:6b:46:12:c6:
fa:75:1c:cf:b7:40:28:a4:19:14:b1:d3:93:1e:79:
f7:cf:57:76:7a:ad:7c:8e:5f:23:87:c4:e3:e3:2c:
fd:61:a6:2a:17:ab:f9:ca:b2:20:a6:ba:f1:11:22:
1c:ce:f0:be:4c:4e:f2:73:ab:f4:f5:1c:4d:65:ca:
eb:04:fc:7f:aa:31:4a:ec:c0:5e:41:f1:89:ee:97:
cc:b6:67:28:80:92:64:20:13:da:fe:bb:54:04:10:
ab:f4:d4:cf:f2:28:6c:3d:30:1e:e8:72:d1:05:bf:
3b:68:4a:51:88:b1:12:1c:bc:0d:1d:ad:17:dd:d0:
96:fa:ad:4f:9f:58:13:6f:53:4e:eb:e8:09:c7:db:
ff:a7:03:dd:3e:d8:2f:a2:ad:63:bb:b9:36:2a:23:
d6:c1:dc:c0:24:12:e0:02:ec:7d:ea:5c:0e:60:c1:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:98:14:B6:D5:2F:81:9D:A3:FD:07:AC:88:1E:8D:6B:2A:E7:93:E7
X509v3 Authority Key Identifier:
keyid:D5:27:1A:6F:99:EA:C1:2A:BE:08:56:10:0A:14:A2:D9:66:3C:E7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Scab5nqwSq-CFYQChSi2WY857s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/AZgUttUvgZ2j_QesiB6Nayrnk-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:74:ff:77:72:81:0a:54:c6:3c:de:1d:f5:20:46:f7:c0:cd:
45:90:18:12:73:28:41:66:61:c3:13:30:a1:e8:75:9c:8e:4c:
b4:6c:bd:8f:3a:74:18:84:a4:5c:76:fd:67:23:c8:05:3f:68:
b7:a7:a8:a4:3f:43:cc:06:4d:04:b7:13:06:a9:f9:c8:42:45:
7c:3f:7f:74:db:dd:36:0e:ea:0c:df:7d:de:9c:7d:c4:e4:5d:
e3:df:ed:f4:b5:88:d8:f7:62:90:07:15:53:f7:27:a4:e2:cf:
cc:73:6d:c1:4d:f3:e5:11:aa:b7:95:96:3f:3d:b4:62:07:b5:
60:70:0b:b1:9a:1e:c6:58:a4:4a:cf:ba:a9:d2:93:c2:9f:46:
8f:72:cd:4c:a8:d2:d2:aa:97:b9:2d:5e:c9:99:c9:8e:29:1b:
fd:99:89:f3:ca:d0:b0:e9:bc:38:86:98:5b:34:35:2d:06:f9:
c0:5d:8f:61:01:85:f0:51:9e:84:66:15:ef:de:4e:9a:92:5f:
10:51:af:6c:f3:ef:78:0a:82:98:f9:2f:65:f8:41:f6:64:b4:
4d:be:4c:1b:84:a1:b3:0e:cf:8a:17:7e:f7:19:5a:89:41:fc:
37:58:c0:dc:1f:89:a6:e0:b6:ce:53:d8:64:27:fd:0c:e6:da:
1c:51:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 10:53:43 2023 by rpki-client on console-ams.rpki-client.org