Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/BXUUc_42QUHRv_arg_zLgjIDqrE.roa
File: BXUUc_42QUHRv_arg_zLgjIDqrE.roa (raw, json)
Hash identifier: 9Wpgnr9YuXnhE69PQIr8XWguAtCa9nAkrJcEF/Jr6Rk=
Subject key identifier: 05:75:14:73:FE:36:41:41:D1:BF:F6:AB:83:FC:CB:82:32:03:AA:B1
Certificate issuer: /CN=52b554da0ebbe41bf54fb2d813e0b2ec6d482c54
Certificate serial: 0183C15A90FEAD81E2AFCFCA05B93B14B78C
Authority key identifier: 52:B5:54:DA:0E:BB:E4:1B:F5:4F:B2:D8:13:E0:B2:EC:6D:48:2C:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/BXUUc_42QUHRv_arg_zLgjIDqrE.roa
Signing time: Mon 10 Oct 2022 10:04:41 +0000
ROA not before: Mon 10 Oct 2022 10:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43655
IP address blocks: 193.148.2.0/23 maxlen: 23
78.24.136.0/21 maxlen: 24
78.24.140.0/23 maxlen: 24
2a00:e70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:5a:90:fe:ad:81:e2:af:cf:ca:05:b9:3b:14:b7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b554da0ebbe41bf54fb2d813e0b2ec6d482c54
Validity
Not Before: Oct 10 10:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05751473fe364141d1bff6ab83fccb823203aab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:40:1c:ed:ae:35:67:32:09:4a:78:7a:83:
4c:f8:51:af:4f:e4:06:50:29:4e:60:7b:4a:82:11:
1c:9d:0d:73:1b:7b:f0:7c:18:9c:32:ff:78:71:97:
56:f7:f8:09:c1:31:3b:a6:55:86:c7:20:63:a0:38:
37:9d:7c:9f:2d:21:7e:49:05:85:79:06:7e:06:70:
43:98:4a:8e:a9:d9:48:f5:f0:02:e1:91:03:da:2b:
43:d2:f8:27:60:b2:3d:f8:6e:76:7d:cd:d6:56:d5:
5b:22:0d:cf:a4:b0:19:e0:17:b6:6c:76:b4:7f:95:
5e:e5:9b:0f:55:ca:5a:53:f9:11:c9:40:1e:46:53:
de:16:d6:0b:36:f3:0c:4b:67:dc:81:07:6e:40:24:
aa:d4:2f:09:da:45:94:bb:a7:d3:09:3b:b7:02:4d:
a6:50:3c:94:b3:f6:df:b4:9a:c8:f0:1c:aa:a7:5f:
b4:8a:9a:96:c5:1d:bd:f5:d3:4a:13:fa:9d:56:32:
69:54:ae:a7:fd:1b:4a:16:c3:32:53:08:82:30:c7:
e0:d4:4a:2d:98:df:45:ee:62:70:a0:5c:57:0e:e4:
9a:6d:2d:52:36:7e:a5:95:79:8d:9f:e0:ce:7c:51:
48:a1:59:c0:a4:aa:19:3e:1a:34:9e:e4:de:a1:a7:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:75:14:73:FE:36:41:41:D1:BF:F6:AB:83:FC:CB:82:32:03:AA:B1
X509v3 Authority Key Identifier:
keyid:52:B5:54:DA:0E:BB:E4:1B:F5:4F:B2:D8:13:E0:B2:EC:6D:48:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/BXUUc_42QUHRv_arg_zLgjIDqrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.136.0/21
193.148.2.0/23
IPv6:
2a00:e70::/32
Signature Algorithm: sha256WithRSAEncryption
91:e6:a6:f3:31:5f:24:91:7c:11:bf:31:88:ec:1c:8d:f3:32:
6f:c7:ef:bf:6b:76:fd:6c:4a:d4:13:ab:52:09:ff:86:14:64:
bf:2b:69:e6:11:76:18:46:08:a0:f9:d4:7e:af:62:85:37:18:
af:61:45:95:15:63:7c:b7:11:e2:9f:72:7d:83:22:16:f8:83:
a5:aa:8c:0c:7a:82:82:aa:21:9c:99:59:a2:61:96:04:ec:d8:
fc:22:e3:c1:b7:35:19:d3:55:19:72:6a:df:ef:7e:32:5e:91:
11:9d:b7:6c:74:55:b8:9d:3f:34:60:71:1b:f3:0f:2e:43:0e:
f8:92:48:52:37:31:e0:3c:0c:02:c2:32:49:ca:7c:3e:fb:ba:
0f:1c:60:3f:0b:5d:2e:40:27:11:41:3d:d5:46:d9:d7:7e:b1:
57:0e:98:b0:7b:64:e8:1d:b5:1d:9d:9b:d5:08:94:8e:5d:80:
72:b2:ff:c5:eb:05:17:a1:2a:88:9a:53:69:5f:f7:1c:a2:a9:
30:b0:f5:93:26:b0:4c:71:ba:07:5f:1b:d9:8a:e9:d6:5e:84:
0b:57:6a:db:ec:84:47:58:73:9e:19:73:de:f9:7b:f5:83:f4:
79:ed:af:c8:5c:7b:e7:ac:d0:bc:c5:b6:00:03:ed:1a:fa:9a:
53:01:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org