Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/u7-t-HXjbNoxMw4wQpKNWSBAxLo.roa
File: u7-t-HXjbNoxMw4wQpKNWSBAxLo.roa (raw, json)
Hash identifier: ELEdfFGecg+S8FFn9GgH0vDgO+5db4fNY6WM9Xh3ciw=
Subject key identifier: BB:BF:AD:F8:75:E3:6C:DA:31:33:0E:30:42:92:8D:59:20:40:C4:BA
Certificate issuer: /CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Certificate serial: 01851AD7E68BAD1C48933D401D453468EEFB
Authority key identifier: 5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/u7-t-HXjbNoxMw4wQpKNWSBAxLo.roa
Signing time: Fri 16 Dec 2022 12:10:34 +0000
ROA not before: Fri 16 Dec 2022 12:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 130.255.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:d7:e6:8b:ad:1c:48:93:3d:40:1d:45:34:68:ee:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Validity
Not Before: Dec 16 12:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbbfadf875e36cda31330e3042928d592040c4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:15:dc:84:4e:df:08:7d:8a:aa:7c:b0:ce:
f6:c5:4f:54:ce:bd:e9:d7:78:38:97:a1:5e:77:ec:
1d:f2:e5:a5:ad:8a:15:36:51:8d:b4:45:2b:a9:db:
d0:c8:d6:33:10:a5:0b:55:ec:9f:a8:01:dc:ee:26:
63:1d:17:6b:1d:09:0d:7f:21:20:11:20:ab:73:4a:
35:ef:e6:9a:29:38:3e:08:7d:d2:cf:3b:11:b0:6f:
b9:9d:01:b8:7e:be:2a:d3:23:2a:5c:cb:a8:b5:7e:
fb:28:30:a0:48:42:30:24:a2:4b:71:86:b3:29:c3:
bf:04:8d:65:a4:e2:0a:d8:9e:ce:8f:9a:e9:de:7d:
ca:0b:fb:46:7e:5a:8b:93:46:a8:9d:27:a0:4e:de:
07:46:98:a0:6d:21:93:64:19:5f:39:f0:d8:f6:1f:
a2:6b:cb:8e:b6:b6:41:19:37:53:61:95:2e:61:6c:
83:e0:7e:65:79:d5:6d:48:46:6f:ac:68:a9:59:67:
7c:df:61:8b:50:55:3c:61:ee:b9:b8:a9:fa:22:64:
fc:97:fa:05:3f:54:bd:79:79:71:5d:51:2d:8a:4c:
12:54:67:35:ee:dc:4d:b8:45:72:c7:d6:aa:a7:33:
ef:a5:43:f5:dc:d8:1a:1c:1f:49:cd:7a:91:8d:56:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:AD:F8:75:E3:6C:DA:31:33:0E:30:42:92:8D:59:20:40:C4:BA
X509v3 Authority Key Identifier:
keyid:5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/u7-t-HXjbNoxMw4wQpKNWSBAxLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:1d:8d:ae:70:f3:1b:f4:2e:eb:75:88:de:a4:72:24:7d:91:
39:d3:a2:57:8a:05:7c:a7:d3:3b:e3:f4:a4:ec:14:6c:e8:fd:
19:e3:3a:9a:b9:1c:93:91:96:18:84:ab:70:e1:6d:db:0e:a5:
b4:60:77:4b:fb:bd:02:66:3e:47:37:b8:24:ec:4c:c8:95:ad:
4d:a6:d4:18:70:2c:01:16:f1:f1:92:2c:9d:f6:84:3e:c9:05:
7d:7e:9c:bd:3b:dd:a3:24:b3:44:2b:9b:c4:db:65:77:b8:fc:
12:85:4b:21:b5:9f:86:8c:23:92:e0:6f:83:0e:37:ea:40:c3:
ac:77:d0:7b:65:57:73:9d:04:1b:20:b4:36:da:0a:8f:1c:c8:
f5:bc:59:3d:10:4a:12:ec:93:08:d9:a8:56:3f:2a:6a:90:63:
39:15:28:ba:39:e6:b1:7c:c5:56:4c:8a:b3:09:28:f4:38:f4:
45:c9:61:5d:56:72:8b:24:09:ce:75:1d:62:36:d7:cb:1d:87:
88:d7:ce:01:be:16:35:fb:70:71:3f:16:b5:ce:c2:8c:6e:16:
50:2d:3c:d1:05:88:c8:dc:b1:23:13:9f:40:82:15:75:cb:01:
9b:71:3c:ea:41:12:18:ce:b8:ce:3a:fe:db:dd:47:ae:a7:e5:
44:27:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:04 2024 by rpki-client on console-fra.rpki-client.org