Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/Vvc0mFReXzwvt1klWaH3g2XCw6c.roa
File: Vvc0mFReXzwvt1klWaH3g2XCw6c.roa (raw, json)
Hash identifier: pdV3hHy+o9aHUn/puWZoULSBRoG7c23aZLMxpCh5b1M=
Subject key identifier: 56:F7:34:98:54:5E:5F:3C:2F:B7:59:25:59:A1:F7:83:65:C2:C3:A7
Certificate issuer: /CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
Certificate serial: 01856CAEEF1F1845E26A4A20648E3A92BDC0
Authority key identifier: 71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/Vvc0mFReXzwvt1klWaH3g2XCw6c.roa
Signing time: Sun 01 Jan 2023 09:34:41 +0000
ROA not before: Sun 01 Jan 2023 09:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44285
IP address blocks: 185.173.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:ef:1f:18:45:e2:6a:4a:20:64:8e:3a:92:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
Validity
Not Before: Jan 1 09:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56f73498545e5f3c2fb7592559a1f78365c2c3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:6b:36:f4:ea:4c:10:68:d8:fd:c7:c5:ae:
7b:4a:b0:d6:51:e0:74:03:17:e9:af:73:2d:a1:e9:
53:5b:c8:ec:2c:3d:aa:05:e3:6d:3f:d5:eb:ba:d8:
9e:20:96:ba:a7:1d:f9:d0:9d:b6:3e:0c:1f:cf:12:
37:f3:c2:1e:5a:c0:f9:40:b4:9b:e2:f2:07:6f:52:
26:d1:52:8b:9e:3e:5f:2a:82:74:7b:b0:b9:64:0e:
c7:c4:12:65:ae:95:18:e5:db:30:d6:f2:b5:2d:68:
78:a9:3d:5c:bc:3d:6f:9e:91:57:f0:d0:e7:79:ad:
e6:ff:bf:41:0e:68:82:12:6d:ce:b3:35:ff:05:3a:
eb:47:2b:6c:83:bc:4f:46:5c:e4:b6:32:df:a6:de:
de:71:5a:d9:5d:5d:b6:5c:3e:85:0a:08:7a:e1:3d:
ab:19:6c:7d:f9:2d:e1:8e:41:68:6e:7d:ac:9d:49:
c3:af:44:27:1c:36:7a:fc:53:d4:9f:ab:b6:40:10:
cb:2d:8f:41:58:d1:57:ab:c8:8d:10:ab:55:9c:f1:
22:aa:5d:d1:82:2e:96:ea:06:dd:f0:62:10:a6:48:
f9:72:ba:53:f1:8e:63:e9:09:60:f1:a3:e3:fb:da:
be:8d:34:80:8b:c6:ca:22:19:6f:d0:8c:10:83:ec:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F7:34:98:54:5E:5F:3C:2F:B7:59:25:59:A1:F7:83:65:C2:C3:A7
X509v3 Authority Key Identifier:
keyid:71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/Vvc0mFReXzwvt1klWaH3g2XCw6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.129.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c6:6c:9f:f6:e9:a6:93:48:24:8c:02:18:62:ad:92:91:00:
6b:00:48:3b:fe:57:79:5e:22:a0:56:79:3b:e7:56:40:8f:af:
96:5c:f0:69:21:5c:27:55:94:28:9b:ec:0d:f2:27:79:e7:a0:
a8:67:82:dc:a6:b3:79:f2:da:71:fe:d3:56:0f:25:f5:76:4d:
b5:71:89:3c:5d:c2:d6:de:bd:79:80:1c:50:bd:06:89:93:7a:
43:d4:8d:de:ce:5d:b6:99:1f:ef:41:82:b8:1e:c9:32:a2:ee:
91:08:d4:63:6b:cf:ce:a3:3d:f0:92:3f:e2:6d:8a:78:8a:1d:
b6:f5:dc:4a:65:68:ce:86:83:8b:7e:b1:77:56:0f:e5:ff:92:
8c:98:c9:a2:b8:93:bb:94:9e:ee:40:8b:c0:f9:02:b4:ef:02:
7c:84:ac:ce:82:41:59:76:96:fa:b5:6b:ab:ca:81:20:02:f3:
2b:4b:50:f9:e0:a7:44:92:79:36:37:f8:83:b7:2a:ea:65:e7:
19:e8:1f:75:85:6f:e8:c8:58:6b:4b:29:b2:8e:ee:8d:cd:2d:
76:bf:c6:65:f3:0f:3c:c2:e2:02:e1:a3:9c:2c:11:34:26:bc:
6a:da:ca:00:d2:15:01:2e:94:0c:d1:74:c1:3a:79:c8:00:66:
31:4d:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:20 2023 by rpki-client on console-ams.rpki-client.org