Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/30C_vErPG-Df0EIyeLPKc1R7NVw.roa
File: 30C_vErPG-Df0EIyeLPKc1R7NVw.roa (raw, json)
Hash identifier: hmtpEPv3WVRYe5pWJh/58Bme8XmNddNGoE88EM+S66s=
Subject key identifier: DF:40:BF:BC:4A:CF:1B:E0:DF:D0:42:32:78:B3:CA:73:54:7B:35:5C
Certificate issuer: /CN=bacc1d99a06cbe40dcc71ddc2f1887910f7dd91f
Certificate serial: 018CC801A9C680C01AB65B4F30175C8286D2
Authority key identifier: BA:CC:1D:99:A0:6C:BE:40:DC:C7:1D:DC:2F:18:87:91:0F:7D:D9:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uswdmaBsvkDcxx3cLxiHkQ992R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/30C_vErPG-Df0EIyeLPKc1R7NVw.roa
Signing time: Tue 02 Jan 2024 02:30:01 +0000
ROA not before: Tue 02 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 92.118.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a9:c6:80:c0:1a:b6:5b:4f:30:17:5c:82:86:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bacc1d99a06cbe40dcc71ddc2f1887910f7dd91f
Validity
Not Before: Jan 2 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df40bfbc4acf1be0dfd0423278b3ca73547b355c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:5e:c1:45:93:89:2c:0d:bf:93:eb:da:25:
39:d9:35:42:55:f2:cf:1d:f6:9b:4d:6b:ed:b7:3f:
d2:15:e1:18:75:cb:f4:55:1b:6c:1c:fe:dc:8c:b8:
c3:37:67:9b:88:86:02:ee:d4:2f:3b:3a:a2:2c:03:
a8:bd:6c:1e:61:1f:68:5e:12:44:04:0c:88:3b:45:
88:8d:d6:15:70:d5:65:2f:5a:98:f7:8f:86:5c:4b:
a5:a7:02:82:8b:dd:cd:2c:0f:ef:8c:c2:65:e4:e2:
e7:d4:70:58:6d:a2:8f:6e:9c:ec:e6:56:ad:b8:08:
de:ba:3a:25:ac:99:56:67:37:da:c4:ec:aa:75:32:
62:9c:05:7b:5e:c9:f3:70:53:df:29:b0:89:99:67:
b3:7f:04:fa:67:69:63:9d:b3:61:9d:dd:5f:43:17:
bc:5e:aa:95:c4:49:77:03:9c:a6:f8:de:ac:37:e1:
a6:9f:45:13:1a:9b:0a:b9:d7:0d:2b:53:a2:05:de:
b7:2b:d0:cb:b1:e2:83:03:98:0a:50:93:bf:d3:58:
6c:cc:95:17:36:18:35:d4:f1:e9:8d:94:ce:48:e3:
9f:a1:d3:e5:36:22:3b:f1:25:b1:1a:7a:03:23:4c:
23:85:b6:c1:cb:3d:15:a3:a4:ae:9f:da:97:88:9b:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:40:BF:BC:4A:CF:1B:E0:DF:D0:42:32:78:B3:CA:73:54:7B:35:5C
X509v3 Authority Key Identifier:
keyid:BA:CC:1D:99:A0:6C:BE:40:DC:C7:1D:DC:2F:18:87:91:0F:7D:D9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uswdmaBsvkDcxx3cLxiHkQ992R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/30C_vErPG-Df0EIyeLPKc1R7NVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0551a7-c2a6-4df3-b8d0-00b02beb8b83/1/uswdmaBsvkDcxx3cLxiHkQ992R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.96.0/22
Signature Algorithm: sha256WithRSAEncryption
08:d2:29:4f:1c:22:39:13:a7:b2:b5:b5:fe:2d:a8:34:65:13:
de:f6:0e:84:c5:cc:53:26:a8:0d:97:38:74:bd:ad:a5:9e:62:
53:8e:ce:fb:a4:74:87:b6:3e:50:12:d3:e9:76:f4:ba:be:04:
c0:b2:3f:dc:ce:57:ef:a5:2f:53:3c:96:40:50:71:3f:0a:b1:
05:98:c7:c8:00:bc:fb:2a:7a:12:16:e3:8d:e9:bf:87:6e:d0:
b4:69:52:c9:18:0c:93:e9:93:03:d7:85:7a:d2:9e:43:10:b7:
8b:28:c4:f8:80:29:a0:d3:0f:66:2f:fb:e0:82:19:00:46:e2:
6c:7b:a7:c5:0b:18:20:98:6a:7a:a1:82:79:84:f7:b0:06:11:
13:ce:92:f6:99:7b:f8:28:f5:01:8c:32:98:39:09:56:e9:94:
33:f6:09:de:3c:a0:de:47:49:ca:64:9e:ad:c2:5c:f6:f6:dc:
3f:dc:d5:5d:74:36:4a:b9:7b:15:fb:6a:f9:5f:44:03:fb:87:
3e:79:2f:6e:4a:11:71:5a:34:62:8a:e5:8f:8d:5f:fc:89:b3:
ab:09:dc:23:5f:a2:2a:6d:5d:cc:65:3a:3e:28:db:d8:48:4a:
ef:4a:8e:4f:8e:90:ab:75:26:99:89:83:4f:d3:5f:70:10:2b:
cc:df:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 17:21:25 2024 by rpki-client on console-ams.rpki-client.org