Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/UoHHsc0CL1LxR4jXQz3mj5hoB_U.roa
File: UoHHsc0CL1LxR4jXQz3mj5hoB_U.roa (raw, json)
Hash identifier: Dioq75w0dSaLXYgukP5qMZsBdJgPMVcaQU/Fann3X0s=
Subject key identifier: 52:81:C7:B1:CD:02:2F:52:F1:47:88:D7:43:3D:E6:8F:98:68:07:F5
Certificate issuer: /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial: 018CC500161665EA5592566F8EEBCF2342AF
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/UoHHsc0CL1LxR4jXQz3mj5hoB_U.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34432
IP address blocks: 91.151.23.0/24 maxlen: 24
37.228.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:16:16:65:ea:55:92:56:6f:8e:eb:cf:23:42:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5281c7b1cd022f52f14788d7433de68f986807f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:38:ab:87:65:b3:86:58:64:28:d2:f8:ad:
a5:4e:f5:8d:f7:ec:af:81:3f:8b:2d:a6:06:54:ba:
80:c1:96:17:65:89:18:99:5a:d5:a6:22:2b:ee:66:
25:f0:3e:9a:f3:0a:7b:87:eb:93:b5:5c:3e:10:94:
2c:2c:05:3c:45:fc:90:94:da:ec:cf:f5:6c:6f:81:
df:25:02:aa:5f:48:7c:78:e8:fd:c8:66:e7:c4:ef:
f4:84:09:b5:c9:e2:1b:10:cf:48:36:03:4f:fb:f2:
7d:43:f3:d4:bb:fa:25:f5:47:7f:e8:63:3b:e7:7e:
c9:d8:a8:77:14:6c:1c:61:a0:91:ea:8f:63:70:3e:
76:66:a2:1a:a5:71:f1:54:fc:15:57:0d:a8:0f:82:
b0:03:27:a4:12:db:3a:a8:c1:8b:08:c2:71:8d:b8:
c5:92:28:1f:b8:eb:b5:5c:7b:2f:77:93:41:da:41:
59:ee:ff:d8:52:2c:3e:67:22:3d:22:93:e9:a4:64:
ac:88:37:5a:32:01:a9:0f:5a:70:d3:7c:a4:1f:f8:
a8:5b:5b:dd:05:d9:94:84:ea:4b:8f:c5:1c:37:1c:
87:95:52:c9:32:95:a8:d9:ba:f4:12:b0:8f:f8:e9:
7b:19:59:f6:85:de:9b:14:2b:88:94:15:98:f1:fb:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:81:C7:B1:CD:02:2F:52:F1:47:88:D7:43:3D:E6:8F:98:68:07:F5
X509v3 Authority Key Identifier:
keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/UoHHsc0CL1LxR4jXQz3mj5hoB_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.157.0/24
91.151.23.0/24
Signature Algorithm: sha256WithRSAEncryption
12:cf:e2:3e:31:39:f1:56:94:d1:b5:8c:9d:15:d2:be:50:b5:
f7:ec:c4:41:90:c9:7b:65:c7:00:23:7d:38:f6:6a:bf:e5:8f:
f6:e8:ab:99:3a:2d:84:92:5a:4e:06:9f:7a:47:e7:3d:4f:48:
57:81:0d:15:9d:8e:0f:86:9f:71:fc:cd:36:44:dc:6b:90:5d:
6b:ea:90:d0:d8:d0:81:64:3d:eb:0b:05:b1:a6:7d:c6:e4:db:
0b:ab:7c:cd:6a:1a:ac:25:03:29:8c:9b:e3:3e:62:7a:1b:83:
91:4c:6d:f3:dd:73:20:c6:2a:97:27:b3:57:d6:f8:e7:2c:d0:
7d:ff:af:07:14:a1:9a:cd:cc:f4:52:7f:1c:78:4d:92:bc:9f:
03:3e:8f:5b:2f:42:82:df:43:2e:8c:2c:b5:4e:43:ad:81:e8:
6f:83:7c:6c:32:0c:21:8f:38:9a:90:ff:ab:40:fd:97:86:16:
30:a1:2b:17:b5:cc:9f:48:2b:c6:9c:91:dc:88:fe:48:2a:f5:
d0:a2:66:bb:62:fa:a2:55:55:c1:39:65:b1:bf:db:fe:99:95:
f5:b3:82:96:f3:8b:ac:5a:fb:5f:53:72:b9:a7:e0:43:8e:df:
e0:dc:5e:c3:82:e7:bd:bd:f4:bd:dd:eb:35:eb:31:b9:5c:8e:
07:eb:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:13 2024 by rpki-client on console-fra.rpki-client.org