Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/sY3zZv4l6x1y6nZCwjpawihjj2o.roa
File: sY3zZv4l6x1y6nZCwjpawihjj2o.roa (raw, json)
Hash identifier: QX6EL25c9px8AUmoa1d8uytmjTS5ZBC5Jgx07Hfp8Xc=
Subject key identifier: B1:8D:F3:66:FE:25:EB:1D:72:EA:76:42:C2:3A:5A:C2:28:63:8F:6A
Certificate issuer: /CN=52b554da0ebbe41bf54fb2d813e0b2ec6d482c54
Certificate serial: 01C8AB0E
Authority key identifier: 52:B5:54:DA:0E:BB:E4:1B:F5:4F:B2:D8:13:E0:B2:EC:6D:48:2C:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/sY3zZv4l6x1y6nZCwjpawihjj2o.roa
Signing time: Sat 01 Jan 2022 07:56:54 +0000
ROA not before: Sat 01 Jan 2022 07:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43655
IP address blocks: 193.148.2.0/23 maxlen: 23
78.24.136.0/21 maxlen: 24
2a00:e70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29928206 (0x1c8ab0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b554da0ebbe41bf54fb2d813e0b2ec6d482c54
Validity
Not Before: Jan 1 07:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b18df366fe25eb1d72ea7642c23a5ac228638f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:3d:d2:2d:65:92:85:4a:1f:72:0f:38:d5:
b5:be:4c:fe:09:4d:df:c7:a1:1d:31:92:7d:43:16:
d2:8f:05:6d:a8:91:54:66:75:79:b5:88:2d:81:e8:
ed:77:17:aa:02:15:03:1b:1b:4c:f7:d5:92:cd:94:
0f:7a:81:03:09:10:6b:d1:63:06:de:f8:74:8d:85:
c5:35:c6:ff:72:f0:52:e8:ac:d8:33:89:42:d4:99:
b5:00:23:81:df:cc:6d:53:b3:a4:56:68:f8:53:6b:
fb:04:9a:0b:5d:6d:97:d2:3e:6d:95:ba:42:dd:06:
3c:95:e3:30:a8:c3:55:6e:b0:d6:79:6d:52:0a:9f:
38:32:1a:92:3d:da:98:d6:65:21:c4:e0:7d:7b:1a:
dc:49:7a:0e:51:e4:5d:91:f7:2c:b5:9b:f0:88:67:
0f:c5:7c:d7:43:0a:2e:53:04:79:b2:c4:4e:6a:dc:
8b:8f:47:78:51:c8:71:c9:b8:e8:d7:17:31:2d:e5:
77:39:5f:9a:9f:07:07:94:1f:0a:bd:29:4b:41:d5:
c3:6c:5e:3f:a6:11:b6:41:1b:a3:1a:e2:46:c7:ff:
a2:eb:d7:cd:22:f7:1a:0a:8c:c2:15:be:31:aa:60:
63:15:89:d3:23:01:c8:31:8a:d8:aa:4c:a9:ee:5d:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:F3:66:FE:25:EB:1D:72:EA:76:42:C2:3A:5A:C2:28:63:8F:6A
X509v3 Authority Key Identifier:
keyid:52:B5:54:DA:0E:BB:E4:1B:F5:4F:B2:D8:13:E0:B2:EC:6D:48:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/sY3zZv4l6x1y6nZCwjpawihjj2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ca44ee-01f3-4a29-840b-38d55790c04b/1/UrVU2g675Bv1T7LYE-Cy7G1ILFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.136.0/21
193.148.2.0/23
IPv6:
2a00:e70::/32
Signature Algorithm: sha256WithRSAEncryption
8f:79:61:52:6d:e3:6f:9e:9a:a4:2c:01:0b:76:a9:fd:97:fc:
1e:68:cb:e1:e5:01:43:45:18:ca:0d:41:0a:8f:9a:83:43:82:
76:ba:72:8b:a0:9e:8b:84:97:bb:84:e9:43:bb:90:2a:55:8b:
da:b4:fe:1f:08:b8:a2:10:12:c0:c8:45:cf:9a:70:b0:5b:3d:
d7:44:f9:be:13:b6:96:40:25:05:fd:e1:82:ca:d7:d5:b3:aa:
03:11:ef:62:67:39:71:02:d4:70:2f:8b:31:de:80:71:f9:94:
8f:99:61:13:13:53:a0:fc:aa:6a:2e:05:d2:37:da:d6:37:41:
a4:ea:5b:51:29:b0:76:13:be:9a:d7:8a:b7:5e:cd:66:cd:02:
b1:7c:21:6e:63:db:10:96:b2:e3:7e:7e:f9:76:e5:63:6c:66:
4b:5c:fe:04:86:ae:62:c3:f7:ed:fb:84:27:6e:6f:ae:58:11:
4e:a4:89:b4:4e:76:ec:67:cc:f7:09:71:3d:63:b9:23:7c:ca:
c6:38:1d:0f:0b:a4:4d:ae:22:68:05:4b:6d:60:ae:c5:3e:bf:
85:51:b7:a3:56:24:2c:d3:c7:d1:37:55:99:f5:d8:fb:7b:7e:
f2:37:5a:8a:e3:40:44:24:f5:0d:7f:18:59:16:4e:b6:b9:5c:
8a:53:3f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org