Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/AQuBOAve3PzlEclMh8vEF_Chyy0.roa
File: AQuBOAve3PzlEclMh8vEF_Chyy0.roa (raw, json)
Hash identifier: qiDiAQcDmmXv/2CWgNIsnxZzNGGabBC4NJ8VZtY2WDk=
Subject key identifier: 01:0B:81:38:0B:DE:DC:FC:E5:11:C9:4C:87:CB:C4:17:F0:A1:CB:2D
Certificate issuer: /CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Certificate serial: 018572C3777468F54EDCB037D91364A618B4
Authority key identifier: 7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/AQuBOAve3PzlEclMh8vEF_Chyy0.roa
Signing time: Mon 02 Jan 2023 13:54:50 +0000
ROA not before: Mon 02 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 185.83.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:77:74:68:f5:4e:dc:b0:37:d9:13:64:a6:18:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Validity
Not Before: Jan 2 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=010b81380bdedcfce511c94c87cbc417f0a1cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1b:54:cb:b3:43:c2:90:0f:75:33:8b:31:0b:
d5:97:65:c1:45:fa:33:8d:df:c9:1d:b0:20:9a:53:
18:72:99:10:2f:af:75:a4:63:d4:b6:38:40:e3:31:
92:f3:f1:fd:6d:04:1d:45:3a:31:ae:12:71:d9:b4:
33:e1:05:e8:f7:db:77:f2:45:d1:c6:5a:0b:84:57:
98:93:ac:82:b4:da:70:bf:9e:c9:1d:d6:bc:e8:d6:
c5:e3:11:15:b5:8f:7f:eb:a8:84:b5:e9:c1:3f:a8:
37:f5:36:65:6c:3d:ac:70:7f:94:90:e0:ec:0f:fb:
34:1c:80:c9:f3:88:f9:df:55:e2:d0:ac:bf:59:c7:
92:57:c4:26:0a:0e:77:65:d5:3f:89:9a:f3:81:bc:
81:e9:b2:7d:c8:c6:94:ac:27:3d:ed:52:86:5b:e9:
23:34:2c:1d:fd:2c:dc:e1:7c:40:53:e0:bc:b3:a4:
6c:11:03:5c:74:b0:e4:4e:0d:10:81:c1:47:81:42:
d4:c6:a2:d7:eb:d5:9c:02:d0:c2:e3:de:1d:0d:10:
a1:84:b0:9d:8a:e2:f5:79:50:ae:50:0a:de:13:cf:
db:bf:06:76:ae:4d:92:0e:bb:a2:9b:67:88:24:79:
05:06:d1:02:67:b9:eb:e8:12:17:ce:6e:cc:bc:95:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0B:81:38:0B:DE:DC:FC:E5:11:C9:4C:87:CB:C4:17:F0:A1:CB:2D
X509v3 Authority Key Identifier:
keyid:7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/AQuBOAve3PzlEclMh8vEF_Chyy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.231.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8a:06:80:8d:03:b5:9f:69:69:58:44:bc:8c:f8:35:d8:cd:
5f:22:2e:d9:d0:16:67:84:97:e2:11:23:ab:94:b8:11:3e:cf:
fd:96:89:72:20:06:a1:46:ca:70:e7:71:ed:6c:9a:0b:1b:70:
44:56:0d:98:02:92:e3:e2:dd:36:73:71:77:ae:1a:7c:4f:16:
42:44:70:f3:34:f5:ef:c5:1a:06:ab:8c:18:20:34:80:cf:96:
1c:ad:f0:22:7c:88:57:6a:a6:68:f2:62:c0:a1:bf:0d:dd:4c:
d0:29:02:d6:56:55:46:c0:12:4f:36:de:34:82:a0:a1:7c:04:
56:12:88:ec:66:77:1d:29:07:d9:28:07:20:2b:db:b1:26:ea:
aa:4c:e1:d4:4e:17:7d:0b:94:74:f0:77:ae:e9:d5:3e:ef:19:
3d:b9:60:a3:b7:8d:1a:af:82:aa:e2:34:f5:12:81:f2:1d:1b:
73:cd:68:1c:8e:ef:fd:47:4c:0b:90:e3:df:0d:bc:e0:e1:72:
07:aa:66:41:aa:e7:72:12:01:f0:4f:a7:5e:23:f8:a3:df:75:
b5:80:6a:8e:62:dc:bf:1d:47:14:ef:40:7d:21:1e:46:56:3b:
99:38:e3:69:b7:fe:16:bc:69:a4:ba:4f:6d:d6:05:ab:a3:0c:
87:d6:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:02 2024 by rpki-client on console-fra.rpki-client.org