Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/48b571-67e7-4497-96a3-ecec780e7ffd/1/1-lsVPYmilgRu9nQ301oOsHDfjjo.roa
File: 1-lsVPYmilgRu9nQ301oOsHDfjjo.roa (raw, json)
Hash identifier: aQH8d/O2njJEV1kc5+Xo+EOpx3NaYezk8AYm5lS1WeU=
Subject key identifier: FA:5B:15:3D:89:A2:96:04:6E:F6:74:37:D3:5A:0E:B0:70:DF:8E:3A
Certificate issuer: /CN=3cc82583622d74ce5bb5b94e4ced763ffed101ab
Certificate serial: 01896478EB4A3847B7AC98CCB59CEE1E9944
Authority key identifier: 3C:C8:25:83:62:2D:74:CE:5B:B5:B9:4E:4C:ED:76:3F:FE:D1:01:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMglg2ItdM5btblOTO12P_7RAas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/48b571-67e7-4497-96a3-ecec780e7ffd/1/1-lsVPYmilgRu9nQ301oOsHDfjjo.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 87.236.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:eb:4a:38:47:b7:ac:98:cc:b5:9c:ee:1e:99:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc82583622d74ce5bb5b94e4ced763ffed101ab
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa5b153d89a296046ef67437d35a0eb070df8e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:02:39:9a:40:10:93:d9:34:3c:a2:05:db:
97:8c:7f:0c:3e:92:6d:dc:fe:17:0b:1c:75:a5:79:
30:7f:a0:e9:41:f1:c9:2d:2a:4f:6f:c5:b9:d9:c8:
e8:ee:75:bf:13:2c:9b:f6:50:f6:4f:fc:f5:92:68:
cd:7c:b1:81:72:c3:26:52:e7:27:bd:3a:92:e8:91:
f7:5f:1d:7b:7d:b9:72:1a:ca:6b:c6:c5:7f:56:3c:
04:c6:ff:72:98:6e:5f:44:13:01:bf:6b:90:1d:f7:
6a:4c:49:82:31:75:87:a5:84:83:00:48:97:ac:8b:
b7:74:49:3b:b1:89:4d:3d:1d:b0:cc:dc:a9:b7:f9:
3c:42:c7:15:ba:76:1c:81:2b:6c:b3:5f:96:34:60:
93:c0:bc:89:68:77:cb:b8:26:44:74:59:4c:a2:76:
1f:6e:b3:c8:de:6b:5f:de:2d:f6:a6:2b:c7:d2:f1:
47:49:b7:cd:5e:91:16:b5:2c:ad:37:97:8a:e4:ef:
8a:50:cc:dc:6c:4a:75:3e:90:e5:90:19:92:5b:90:
13:de:0e:a0:69:3d:8e:c7:ca:78:56:7e:13:b8:ae:
ca:b6:c0:37:c9:c9:9b:76:a5:37:0b:2c:86:c0:65:
2e:99:59:b7:c2:0f:48:37:2d:3f:bc:17:90:0e:f6:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:15:3D:89:A2:96:04:6E:F6:74:37:D3:5A:0E:B0:70:DF:8E:3A
X509v3 Authority Key Identifier:
keyid:3C:C8:25:83:62:2D:74:CE:5B:B5:B9:4E:4C:ED:76:3F:FE:D1:01:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMglg2ItdM5btblOTO12P_7RAas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/48b571-67e7-4497-96a3-ecec780e7ffd/1/1-lsVPYmilgRu9nQ301oOsHDfjjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/48b571-67e7-4497-96a3-ecec780e7ffd/1/PMglg2ItdM5btblOTO12P_7RAas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.151.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c4:95:9a:7d:3e:3f:98:55:a6:d8:d8:75:62:ee:c8:bb:75:
a6:91:3f:15:a9:e2:f3:b7:8d:a0:be:a2:b3:a5:85:8e:bd:b8:
75:ce:c2:1c:19:df:53:5b:7f:d2:08:d4:53:ad:4f:23:d5:f3:
c3:d7:c6:26:cc:98:67:89:a9:25:41:df:06:86:a5:b7:bf:ef:
3d:42:f0:4e:48:46:5c:7b:21:50:45:e3:f8:ba:0f:9e:ba:a8:
3e:9e:0b:74:6b:e7:32:dc:1a:9b:f7:7f:64:23:04:a6:1a:90:
d6:25:69:d0:20:78:ed:19:42:2a:ae:a6:55:18:40:b9:b2:e0:
29:ca:ce:c1:63:a9:f3:a3:a6:94:af:a6:5e:68:73:f2:74:5c:
36:7d:89:7e:d3:3c:e5:5b:dd:8c:95:a5:68:07:13:47:6c:52:
38:9c:9f:bc:62:87:ee:3e:e2:d4:6a:c0:83:dd:07:33:d2:0a:
ee:34:b1:49:0b:74:08:12:52:78:0a:ab:01:52:4a:6e:99:1a:
a2:ed:40:18:7f:13:9c:48:b6:06:83:35:15:17:fa:6a:d2:16:
dd:06:f4:98:fd:80:1d:62:92:59:64:69:62:b3:18:4d:57:73:
26:42:a6:fb:61:73:c6:fe:80:fc:df:89:d0:f8:a8:e4:16:99:
38:80:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 07:37:49 2023 by rpki-client on console-ams.rpki-client.org