Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/v_HgYQ_m8gaHSndu9rWmagniiyg.roa
File: v_HgYQ_m8gaHSndu9rWmagniiyg.roa (raw, json)
Hash identifier: MS49jKGOiytqnCeGDxvy5paKlDUXZcNPKH4RLrLKO6I=
Subject key identifier: BF:F1:E0:61:0F:E6:F2:06:87:4A:77:6E:F6:B5:A6:6A:09:E2:8B:28
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0185719E88E7E439F55893D05B33DC6B7212
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/v_HgYQ_m8gaHSndu9rWmagniiyg.roa
Signing time: Mon 02 Jan 2023 08:34:53 +0000
ROA not before: Mon 02 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202766
IP address blocks: 158.172.142.0/24 maxlen: 24
158.172.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:88:e7:e4:39:f5:58:93:d0:5b:33:dc:6b:72:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff1e0610fe6f206874a776ef6b5a66a09e28b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:d6:3f:a1:0b:8a:6d:f0:a9:6f:fa:13:1a:
ef:eb:81:7b:08:71:39:ef:8c:28:1e:e1:5e:a0:46:
fa:61:42:2c:7c:ea:22:3a:cb:29:b7:0c:26:31:a0:
1c:c8:c8:26:1d:97:be:23:06:24:03:2c:bd:fe:07:
bf:00:8c:4d:b6:b5:d0:6d:c8:4b:f9:ab:7a:5a:8a:
26:eb:83:9e:d2:12:60:08:50:6e:d0:e0:f5:69:45:
6f:af:8a:f9:d0:f1:d2:9b:b0:17:ce:35:02:bd:8e:
9c:d2:f4:9c:c5:a2:d3:40:aa:ad:68:4d:f5:cd:77:
b0:28:ab:67:76:79:64:f5:09:20:4d:0c:bb:d7:a3:
7b:40:2a:4b:c8:2c:7e:be:4e:7a:ac:ec:88:15:f5:
47:20:55:c5:6f:d1:11:d0:a6:95:9a:9c:eb:23:de:
47:d6:4b:4c:c0:5a:ed:f4:88:d0:64:b5:41:de:af:
32:f9:d3:24:ed:d4:17:19:69:24:08:ec:2b:bd:48:
ec:17:79:c6:67:aa:12:b7:38:b6:ed:fa:52:69:de:
c8:2e:b8:46:a2:66:79:d2:40:b7:11:bb:1e:84:2b:
bd:f0:5e:9a:9d:d7:dd:cf:a6:fb:67:51:e1:6e:09:
04:63:14:24:cf:36:f8:ff:b6:9e:55:b7:97:6b:dd:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:E0:61:0F:E6:F2:06:87:4A:77:6E:F6:B5:A6:6A:09:E2:8B:28
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/v_HgYQ_m8gaHSndu9rWmagniiyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.140.0-158.172.142.255
Signature Algorithm: sha256WithRSAEncryption
26:74:53:46:eb:0c:7f:3a:e9:df:d1:4c:9c:21:9d:83:80:65:
da:2f:98:db:55:fe:1b:47:30:7f:6c:3d:f7:1a:8f:0d:b4:b1:
04:e4:62:00:28:b8:51:e2:25:0a:1d:0f:a9:e5:76:c9:7d:c8:
98:2c:5e:bc:50:a0:58:34:29:63:c2:32:44:f5:90:66:c2:94:
25:76:9f:57:cb:06:c8:af:ae:0d:4e:9f:28:16:05:81:c1:95:
61:9e:be:f0:8c:27:ae:d2:46:e5:0c:af:a0:13:86:c5:07:40:
13:22:ba:24:7d:f5:0a:8f:ea:14:9b:74:5a:0f:13:16:c5:47:
41:d7:18:20:3e:63:58:97:2a:8a:ad:b7:d0:a1:9f:33:1a:6f:
b6:76:e4:11:97:1b:64:3d:cd:0a:b7:c1:b5:24:2b:68:e1:d8:
94:2f:61:5e:e9:ca:c0:cc:68:97:97:b0:c7:77:df:50:6d:88:
53:00:6e:53:19:6d:96:29:64:1a:42:c4:cd:dd:23:bd:6b:0c:
dd:40:db:7c:0f:f6:fe:66:09:5b:81:61:92:c0:3f:06:e4:20:
64:b2:62:a5:81:6d:87:8b:bb:c7:09:48:02:29:99:9b:fb:65:
08:4f:23:d3:da:81:d9:13:a7:0e:b9:e8:89:81:16:35:5c:23:
54:70:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:32 2025 by rpki-client