Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/vHzDcv7aXBon0MJA1-UUlC08Q6E.roa
File: vHzDcv7aXBon0MJA1-UUlC08Q6E.roa (raw, json)
Hash identifier: hHuLVlTk4/HbM/TvA07YnDKi759oQp/52gLUKI68p1k=
Subject key identifier: BC:7C:C3:72:FE:DA:5C:1A:27:D0:C2:40:D7:E5:14:94:2D:3C:43:A1
Certificate issuer: /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial: 018346C9650896444DD26FA6E89B3037E973
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/vHzDcv7aXBon0MJA1-UUlC08Q6E.roa
Signing time: Fri 16 Sep 2022 14:52:27 +0000
ROA not before: Fri 16 Sep 2022 14:52:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 5.181.180.0/24 maxlen: 24
185.229.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:46:c9:65:08:96:44:4d:d2:6f:a6:e8:9b:30:37:e9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Validity
Not Before: Sep 16 14:52:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc7cc372feda5c1a27d0c240d7e514942d3c43a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:3d:3c:da:46:e6:aa:e7:c1:0a:4f:72:e1:
8d:bf:a1:79:98:1b:46:9f:fa:45:5a:99:32:bc:c6:
17:d6:6f:b0:e3:53:41:cd:af:60:7f:a2:fd:5b:0b:
34:4d:c8:86:d4:b9:8c:bd:58:3a:38:00:ba:cb:ca:
81:43:1f:e3:de:d5:f6:6d:e5:4e:31:71:b2:e3:0b:
9a:0a:82:ed:27:18:84:98:1b:a7:d8:c2:a1:33:eb:
5b:86:9e:fe:3b:3e:7d:e2:8f:a2:fd:f8:01:c0:f6:
e6:a7:b2:31:60:20:20:d7:a9:f5:f7:7d:d9:93:fd:
3f:4a:53:22:38:6f:18:3e:7a:54:dc:56:1f:88:4f:
09:cc:37:9b:4f:1d:61:8d:38:2a:0c:4e:34:fb:af:
f8:94:b5:f9:66:5e:0a:d8:15:0d:56:c4:a5:41:93:
4c:35:24:f4:60:05:58:44:00:fe:c6:00:d6:9f:9d:
71:c5:2a:21:fa:cf:96:95:0d:d4:b1:5a:a5:26:39:
c4:87:a6:5a:24:3f:73:cc:1f:f7:b2:f8:24:f2:c5:
97:8b:15:93:20:b2:8e:b8:db:f5:66:0c:80:77:ca:
da:70:4e:c2:77:44:14:b6:b1:59:37:81:e6:cd:d3:
c6:10:4a:be:fa:97:81:06:13:34:2a:31:e3:0f:71:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7C:C3:72:FE:DA:5C:1A:27:D0:C2:40:D7:E5:14:94:2D:3C:43:A1
X509v3 Authority Key Identifier:
keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/vHzDcv7aXBon0MJA1-UUlC08Q6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0/24
185.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ac:07:da:ce:d3:65:ab:59:cf:4c:3f:6d:2f:59:a9:90:d0:
01:24:14:b3:6a:8c:54:70:6e:2f:0f:a6:a6:43:a4:19:ac:ff:
69:bc:e5:eb:31:70:2e:b2:fe:f0:0b:d1:94:7f:7e:99:4c:9c:
e9:3a:50:74:18:07:95:4f:ee:58:d0:0d:c5:8c:82:49:0b:01:
18:b0:dd:3a:75:e5:06:1b:77:63:47:0b:28:81:0d:f0:f8:18:
4b:7b:dc:a9:92:bc:3d:96:7e:a0:61:7f:fe:c4:8f:e1:9e:8a:
52:6d:7f:4c:fd:66:e9:a4:0e:1d:27:39:37:a6:56:88:f7:a2:
2f:b1:38:4e:b7:22:4f:18:03:eb:be:08:e7:29:ee:56:e3:93:
11:a9:ec:c9:f6:a6:fe:a1:40:bf:dc:5d:2e:a3:36:27:75:b7:
77:06:37:f0:56:a5:09:b8:f7:32:96:4b:6e:ea:d6:1a:af:8d:
e3:d9:c3:cb:b8:a1:eb:bf:77:c4:95:af:ea:9c:0b:12:28:cc:
26:fb:67:f1:62:eb:bd:f2:55:8d:6d:97:c9:e1:b6:3c:97:e2:
92:16:96:7c:62:3d:50:86:27:c5:59:3d:c9:39:e2:34:12:96:
83:57:50:b1:74:45:b1:03:c3:5e:ec:ea:05:bb:d2:73:41:17:
d9:76:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org