Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/Bh3_v32FuiyflYPqjvt_nJXlcxs.roa
File: Bh3_v32FuiyflYPqjvt_nJXlcxs.roa (raw, json)
Hash identifier: r2pI6zcX+bFoB4mByFyCPiC0fRhHDF8nU4r+6kPLdd4=
Subject key identifier: 06:1D:FF:BF:7D:85:BA:2C:9F:95:83:EA:8E:FB:7F:9C:95:E5:73:1B
Certificate issuer: /CN=5c95d5a364e30df4061abf3ee4e772237ac8ca3f
Certificate serial: 018570B0A6E4ADFA291DC256DBB988682B9A
Authority key identifier: 5C:95:D5:A3:64:E3:0D:F4:06:1A:BF:3E:E4:E7:72:23:7A:C8:CA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJXVo2TjDfQGGr8-5OdyI3rIyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/Bh3_v32FuiyflYPqjvt_nJXlcxs.roa
Signing time: Mon 02 Jan 2023 04:15:03 +0000
ROA not before: Mon 02 Jan 2023 04:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 185.218.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:a6:e4:ad:fa:29:1d:c2:56:db:b9:88:68:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c95d5a364e30df4061abf3ee4e772237ac8ca3f
Validity
Not Before: Jan 2 04:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=061dffbf7d85ba2c9f9583ea8efb7f9c95e5731b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:f0:f7:4e:f6:f3:0e:2b:77:16:c9:2d:e2:
1b:63:f2:3e:85:f8:f6:b1:6f:ef:1d:e5:56:26:b5:
90:62:9a:9d:b3:dd:b8:e6:01:b2:70:0f:ef:36:c6:
7d:93:e9:c6:e3:ee:e4:15:4f:46:b7:a4:cb:7b:cc:
cc:2e:c1:30:1d:19:8c:b5:f2:39:ae:6c:1c:d2:da:
7c:ad:f6:af:5a:c7:be:60:59:c2:4b:42:1c:f4:93:
8b:67:f1:76:11:b6:40:1b:2b:ad:49:fa:de:8b:48:
75:ea:6c:c4:9a:c6:f9:f0:06:31:a2:5f:c5:32:60:
d9:94:2b:69:a4:78:01:55:b2:c1:98:f4:72:e4:18:
2f:35:51:98:d2:cc:79:78:ac:35:fb:2a:1d:57:07:
d8:86:75:4a:d3:44:3e:b3:3e:93:69:8f:20:e3:c3:
01:9d:cc:49:77:2d:c3:5f:1d:64:7d:a2:90:fd:d4:
2e:92:11:96:c9:3b:25:6e:2b:2b:19:c5:cb:6b:cf:
e1:1c:19:2c:10:8f:d0:83:4e:f0:fa:1e:e0:41:4f:
eb:93:a4:bd:8b:b0:bc:ba:4d:bd:8f:2e:f6:01:fe:
54:eb:25:53:e4:15:39:5a:5e:99:73:3f:a5:4b:2a:
80:12:4d:41:8b:70:2a:84:b5:05:e4:3f:dc:b2:36:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1D:FF:BF:7D:85:BA:2C:9F:95:83:EA:8E:FB:7F:9C:95:E5:73:1B
X509v3 Authority Key Identifier:
keyid:5C:95:D5:A3:64:E3:0D:F4:06:1A:BF:3E:E4:E7:72:23:7A:C8:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJXVo2TjDfQGGr8-5OdyI3rIyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/Bh3_v32FuiyflYPqjvt_nJXlcxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/XJXVo2TjDfQGGr8-5OdyI3rIyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c4:dd:17:58:3c:64:22:2f:1d:24:be:05:ee:25:e9:67:76:
00:af:51:db:73:14:c6:2b:fc:98:98:87:a0:12:b6:4e:99:80:
eb:da:8a:63:0d:7d:1e:ea:ce:5d:aa:39:4f:4b:21:3b:f1:b6:
8d:33:75:06:c0:2d:d3:5e:bd:bf:cf:29:1b:94:8c:fd:0d:33:
d1:cc:d0:4d:45:74:f8:fc:a1:70:c0:44:b0:84:0a:62:7e:ec:
6b:21:ca:31:e4:08:26:1f:34:61:5b:35:a1:94:4b:9c:3f:e0:
6f:6f:3d:7b:a0:ed:ae:3e:9a:f9:4b:a4:9e:85:0e:fb:d5:29:
0f:e1:59:1f:f7:de:6b:92:98:39:30:9a:08:78:f4:30:3c:b2:
7e:66:cb:8d:d5:fb:0e:7d:ec:08:86:75:25:93:89:ec:4b:b0:
a1:e7:0b:6d:f1:8b:1e:62:a6:4d:96:26:52:c2:b6:b1:59:3d:
ba:2d:99:1f:95:2d:44:d0:63:24:77:33:d6:c3:25:28:f2:6f:
bd:61:3b:3c:16:aa:0c:0a:ff:f0:73:90:39:8b:5c:cc:d7:89:
3d:53:33:b7:01:12:08:25:b9:74:89:42:3d:1e:58:53:9c:c6:
05:f5:c0:62:4e:2a:b9:8b:91:49:f6:7d:87:1c:dc:47:fc:71:
11:fc:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:17 2024 by rpki-client on console-fra.rpki-client.org