Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/1-bxYdZvXsmmI0chD1aA1tjZVQNk.roa
File: 1-bxYdZvXsmmI0chD1aA1tjZVQNk.roa (raw, json)
Hash identifier: vj/Ws89J3Gn0o0o1ePxb+CE5qjJ56c8QgeZmBmWSOlM=
Subject key identifier: F9:BC:58:75:9B:D7:B2:69:88:D1:C8:43:D5:A0:35:B6:36:55:40:D9
Certificate issuer: /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial: 1D9A7BA6
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/1-bxYdZvXsmmI0chD1aA1tjZVQNk.roa
Signing time: Fri 20 May 2022 08:56:29 +0000
ROA not before: Fri 20 May 2022 08:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 185.116.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496663462 (0x1d9a7ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Validity
Not Before: May 20 08:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9bc58759bd7b26988d1c843d5a035b6365540d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:79:4c:c6:aa:43:48:bb:a5:86:14:78:d4:
cf:0b:87:7a:f5:ef:4d:8e:0b:b6:81:53:3e:60:c0:
3a:7a:30:22:88:fe:a0:00:27:96:71:b4:b6:e4:ae:
ea:07:47:a5:f6:56:e3:c9:63:a7:71:32:ef:ea:61:
cf:6a:69:ba:89:85:f7:c4:3f:f7:eb:68:d7:3c:2d:
2a:ce:f6:d6:4a:2b:d2:7e:cd:3a:83:6c:92:c0:82:
fb:16:36:09:54:1d:21:6f:ba:ef:6d:ff:df:58:45:
a7:da:4a:9d:fb:03:86:f1:54:d5:21:a3:28:19:f3:
29:ac:5f:47:a1:d1:88:ea:c4:8c:dc:f8:4e:b1:0a:
29:08:00:7d:93:47:7a:66:a6:a9:63:00:bb:51:c0:
f7:2b:e6:53:20:53:48:48:84:3b:46:37:c4:9c:bd:
e1:4f:45:3d:1d:05:52:17:4b:a8:96:e0:bd:eb:9e:
50:80:52:76:6e:b7:cb:00:f9:0b:46:3e:e5:21:72:
d0:b2:e4:27:99:e8:03:ca:b1:f7:d3:b3:44:8c:32:
c3:42:2f:fd:e0:81:c7:5a:b3:fc:76:28:0b:9e:e8:
cb:93:c7:8b:f9:c2:c1:61:5a:67:08:f9:f0:38:82:
84:6d:8f:90:d6:99:3a:8e:9f:ab:61:a3:94:65:18:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:58:75:9B:D7:B2:69:88:D1:C8:43:D5:A0:35:B6:36:55:40:D9
X509v3 Authority Key Identifier:
keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/1-bxYdZvXsmmI0chD1aA1tjZVQNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.13.0/24
Signature Algorithm: sha256WithRSAEncryption
56:28:f0:d4:0f:72:0a:36:bf:68:48:81:1f:42:65:28:48:2d:
ea:71:f3:d5:67:65:7b:80:b3:f6:43:b7:2f:16:d7:2c:04:b2:
2b:71:b9:1c:bd:eb:56:39:ee:0c:f1:36:59:87:af:61:a4:b1:
12:f9:de:f9:f9:dc:38:7d:37:e8:c1:30:4d:3e:0c:22:85:e1:
82:70:e3:d6:90:f8:bb:ea:aa:18:9e:22:aa:c1:3f:51:37:88:
1b:65:5b:85:8f:2c:90:bd:d0:ff:4f:07:8d:e3:0e:5f:28:ce:
84:cf:76:ed:e5:2a:59:97:0e:b5:47:05:7b:53:a1:b3:95:78:
e3:cf:ae:16:97:1f:b2:94:31:5c:00:60:8b:a1:7d:7b:3f:f4:
e9:85:d1:b5:f5:0a:6e:21:6e:bc:41:91:dc:7e:7e:aa:e4:63:
cc:69:69:39:0e:c7:6a:1d:9f:8b:77:64:ec:b5:3e:48:fd:51:
8e:d8:05:11:33:39:37:77:6c:54:06:aa:88:04:1d:06:e6:13:
96:98:28:85:b8:cb:bd:40:e5:d3:01:d1:28:5f:aa:0f:1f:27:
cd:d3:af:c9:05:75:11:3c:a7:68:af:e7:b1:7f:f7:9d:fc:66:
99:2b:c5:6d:45:6e:1e:2e:4a:2e:54:7d:27:18:c4:23:9f:b3:
7b:d8:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:53 2024 by rpki-client on console-fra.rpki-client.org