Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/rwbFhws32F2lDHYN3wGoo8mpEEw.roa
File: rwbFhws32F2lDHYN3wGoo8mpEEw.roa (raw, json)
Hash identifier: HnUOdmy4ZYedx9GnzS05cWnRyB1XV7Pohkcxxl402jc=
Subject key identifier: AF:06:C5:87:0B:37:D8:5D:A5:0C:76:0D:DF:01:A8:A3:C9:A9:10:4C
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 018CC8DF879C6DAF3B554B3501932016A0BB
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/rwbFhws32F2lDHYN3wGoo8mpEEw.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42237
IP address blocks: 185.255.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:87:9c:6d:af:3b:55:4b:35:01:93:20:16:a0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af06c5870b37d85da50c760ddf01a8a3c9a9104c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:c8:df:cc:3f:45:52:9e:f3:94:c9:fd:20:
16:0f:51:96:d0:9d:5e:5e:1b:6d:ac:e9:b0:33:8c:
7e:75:b4:0c:8b:6a:77:02:33:18:d0:fc:cf:f1:f2:
43:15:2e:24:81:cb:1e:f2:0e:14:58:46:f0:7b:ca:
60:c7:55:f3:17:c7:a8:38:2b:15:6d:20:f6:6d:85:
b9:0b:44:ee:8e:c2:38:65:66:35:c3:05:cb:92:9e:
02:4c:52:30:da:ee:62:7e:a3:e1:d7:26:f7:6c:a6:
0a:e7:0d:f3:db:9d:36:44:6f:47:64:85:9a:2f:79:
80:2c:39:3b:e0:8a:73:e9:b9:89:54:d6:fe:69:d8:
56:be:c7:b5:5f:00:45:5c:c0:65:88:d1:c3:bf:73:
19:06:0b:fa:22:65:d0:61:d4:a2:26:9b:b2:54:3c:
6e:44:eb:80:d1:f5:ea:06:ef:1e:76:0b:5d:df:9f:
b8:9f:59:67:8a:75:9a:b8:66:dc:cf:07:f0:d7:c1:
de:94:5e:a2:f8:41:19:d0:27:aa:b8:c8:87:e6:61:
44:8c:fe:52:92:2a:b7:03:48:4b:f3:29:31:87:da:
47:a5:2a:f4:c2:0a:35:96:c6:48:de:c6:4e:15:c5:
09:d6:34:d2:d1:d8:42:87:41:27:2b:7c:d2:d7:15:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:06:C5:87:0B:37:D8:5D:A5:0C:76:0D:DF:01:A8:A3:C9:A9:10:4C
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/rwbFhws32F2lDHYN3wGoo8mpEEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.122.0/24
Signature Algorithm: sha256WithRSAEncryption
84:69:76:94:0b:33:d8:a9:01:60:fb:6c:05:0a:b9:66:f9:02:
53:a0:77:5b:b1:44:a0:ce:50:79:5a:6d:d8:b1:90:09:9d:e5:
0d:ef:51:c0:82:cd:d4:6c:99:24:64:64:e1:13:ec:5d:5a:ea:
e1:b0:55:65:23:be:79:6b:9f:fa:d1:d5:59:fd:78:ab:19:a6:
c1:78:90:de:87:73:0e:8c:72:c5:87:81:70:27:91:e4:7f:e4:
78:b6:58:b0:59:b3:7e:82:00:ef:50:00:3c:3b:31:f2:07:61:
e4:9c:4f:d2:56:ce:d4:d0:b3:ff:52:c2:e3:7c:49:8d:08:bb:
78:86:63:45:a9:7f:5c:9a:4e:86:99:e5:08:8d:aa:4d:4c:d2:
73:94:6e:0e:8e:5f:f5:2b:72:db:59:fd:03:64:12:36:3f:17:
77:c7:d0:f1:1d:7d:a8:3f:bf:14:52:8a:b8:aa:91:f7:02:c6:
dd:67:94:50:39:19:31:1f:11:57:8e:df:27:d8:9c:27:c8:2f:
81:c4:31:90:95:bb:78:ec:f2:25:8e:3a:7e:4c:41:43:32:c8:
ac:6a:6f:41:81:8e:0d:52:2f:1c:52:b2:b8:b5:ad:d8:2e:0c:
cf:60:7a:41:cb:24:68:84:96:8f:04:1a:88:eb:7f:1f:35:e3:
2d:9c:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 11:48:33 2024 by rpki-client on console-fra.rpki-client.org