Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/rBqbXbn-j3W5QIF8eJSwHLcjrqo.roa
File: rBqbXbn-j3W5QIF8eJSwHLcjrqo.roa (raw, json)
Hash identifier: n8K4a4+Y7wxAiJS4o4URQXT2+8bix0xEQMxhHBEsWY8=
Subject key identifier: AC:1A:9B:5D:B9:FE:8F:75:B9:40:81:7C:78:94:B0:1C:B7:23:AE:AA
Certificate issuer: /CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Certificate serial: 0186A835F491889A2C39B927DCD0967E2FA7
Authority key identifier: BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/rBqbXbn-j3W5QIF8eJSwHLcjrqo.roa
Signing time: Fri 03 Mar 2023 16:02:33 +0000
ROA not before: Fri 03 Mar 2023 16:02:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197248
IP address blocks: 185.235.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:35:f4:91:88:9a:2c:39:b9:27:dc:d0:96:7e:2f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Validity
Not Before: Mar 3 16:02:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac1a9b5db9fe8f75b940817c7894b01cb723aeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:e6:a0:bb:f4:a3:97:94:fc:23:00:94:f5:
08:d8:71:8a:f9:a0:67:40:fb:4e:91:47:98:63:11:
0e:75:e0:01:33:a8:dc:34:a2:ba:24:31:c7:d5:57:
35:84:b0:5b:dc:60:f6:34:d9:f9:24:e9:4e:de:63:
b2:3a:fd:29:e0:db:44:41:b3:61:6e:f7:2e:91:95:
5a:65:a4:ca:4a:e6:5f:b0:57:81:e9:5d:70:53:f6:
d5:b6:ea:de:e9:0d:7e:7f:85:44:87:51:c4:27:43:
e8:4c:df:7e:8b:08:03:f9:0d:01:f5:aa:7d:5a:b1:
35:e6:b4:c9:bd:64:40:f3:68:d4:46:fa:42:f2:1e:
77:ce:30:9d:1a:19:29:3e:7b:b5:e5:46:40:8e:90:
76:23:69:89:a3:e9:e0:72:cf:c9:e3:5a:9b:8e:a6:
19:c8:d8:ca:f9:5e:39:b9:08:55:81:3d:d8:51:e7:
22:51:06:94:69:d4:e8:00:a4:d1:17:85:69:49:79:
22:ca:f5:c6:64:c6:e8:0b:7a:21:28:56:15:cc:35:
d5:82:a7:fa:fa:de:df:39:48:51:dc:86:fc:99:8a:
a1:59:1a:ae:38:23:da:4e:2a:c6:16:f9:ad:d0:fe:
e9:53:0b:d9:5f:6a:d3:f6:f3:71:8a:52:00:51:d2:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:9B:5D:B9:FE:8F:75:B9:40:81:7C:78:94:B0:1C:B7:23:AE:AA
X509v3 Authority Key Identifier:
keyid:BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/rBqbXbn-j3W5QIF8eJSwHLcjrqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:96:8b:5b:12:69:86:2c:eb:3b:7d:33:0a:5a:28:e3:88:24:
55:6f:b2:a7:6a:92:7e:09:11:48:79:eb:3a:bc:18:1c:dc:56:
81:18:8a:5c:0d:aa:86:db:d5:93:06:ac:2c:e4:c5:0f:64:2b:
0d:05:eb:10:d4:c2:1d:f6:51:03:0d:01:08:3f:a3:5c:6f:7f:
e1:a1:f2:1f:8b:b3:a7:78:31:8f:c6:62:c9:92:5e:52:7f:55:
fe:b4:4f:fb:45:be:6a:22:98:11:0a:cc:82:bc:73:f5:e7:22:
17:1e:37:25:4c:35:8e:1f:fa:7c:49:04:5c:2f:f2:ad:38:71:
40:ee:fe:2d:0e:c1:fa:4a:ab:d0:48:60:7c:e5:36:7d:7b:c8:
c8:d2:03:96:29:db:fb:ab:26:fb:a6:80:f6:18:fb:7c:2e:5c:
5b:73:a9:62:f1:be:0a:b1:a3:68:10:60:e5:f8:83:b3:4d:dd:
f0:b5:17:ab:d2:c1:a9:f3:30:10:d7:fc:4d:e7:ad:4e:84:60:
77:53:ac:32:7f:5d:b6:2f:12:0f:24:6e:3d:de:92:4e:6d:b6:
8a:7c:7f:98:34:fa:49:8f:95:e1:65:b1:e5:fb:af:5f:54:7b:
de:0d:c5:b4:28:80:ae:ed:db:e5:46:50:24:ea:de:f4:72:c6:
f0:3a:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:55 2024 by rpki-client on console-ams.rpki-client.org