Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9e1654-9822-4b94-b68c-71eef5d74937/1/7ZmW4XAL52iE-cy2e8Y78b6wj3Y.roa
File: 7ZmW4XAL52iE-cy2e8Y78b6wj3Y.roa (raw, json)
Hash identifier: O5TcReLjIDDL0ZFBoKPDQDG3SC37KJkN8Fnz3/gX1f0=
Subject key identifier: ED:99:96:E1:70:0B:E7:68:84:F9:CC:B6:7B:C6:3B:F1:BE:B0:8F:76
Certificate issuer: /CN=27af59c3408f897b64005a123a12d968dc137f2d
Certificate serial: 01856C1C9C54663BE8A02AAE29F57C9232E3
Authority key identifier: 27:AF:59:C3:40:8F:89:7B:64:00:5A:12:3A:12:D9:68:DC:13:7F:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J69Zw0CPiXtkAFoSOhLZaNwTfy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9e1654-9822-4b94-b68c-71eef5d74937/1/7ZmW4XAL52iE-cy2e8Y78b6wj3Y.roa
Signing time: Sun 01 Jan 2023 06:54:52 +0000
ROA not before: Sun 01 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31019
IP address blocks: 185.147.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9c:54:66:3b:e8:a0:2a:ae:29:f5:7c:92:32:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27af59c3408f897b64005a123a12d968dc137f2d
Validity
Not Before: Jan 1 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed9996e1700be76884f9ccb67bc63bf1beb08f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:78:c8:b0:2d:41:83:d4:1f:d8:93:99:fd:
23:33:a3:2e:b4:e9:3c:c0:ae:be:cb:1b:24:b4:13:
5d:5f:da:a4:28:56:cd:c3:0f:af:8e:c7:2f:74:8c:
5d:62:e8:7d:5b:01:79:52:0d:44:b7:44:79:dd:04:
1c:e5:65:e1:cd:6d:3a:da:a9:ef:a5:32:a7:61:50:
5a:7d:be:3e:37:09:52:06:2b:a1:e7:23:64:50:28:
88:c5:eb:05:36:7f:1a:36:88:7f:89:29:95:e7:c0:
01:62:cd:20:2a:d9:ec:34:e5:80:69:28:73:bb:6f:
03:93:37:d8:fa:bf:59:e7:27:47:92:fa:67:f2:fa:
07:e3:ab:cb:bd:47:fa:ad:8b:78:0f:14:5a:2d:c1:
37:3f:b5:11:5f:e6:fd:c6:43:73:31:cd:0d:d2:52:
e2:fe:32:66:a2:2b:3f:44:ec:10:fd:d8:81:ad:36:
41:ec:79:31:f7:f0:e5:80:c0:b1:9d:9b:c0:58:a0:
4b:33:3e:4a:09:f3:80:1b:8f:7a:3a:0c:3e:c1:61:
9f:e9:01:d5:73:40:98:a2:21:4f:64:06:ae:5b:f1:
b1:5f:fd:a0:c6:9c:a2:e1:a4:67:8c:f0:0f:91:19:
f5:fa:c1:91:75:da:8e:19:1c:6e:62:98:69:a4:08:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:99:96:E1:70:0B:E7:68:84:F9:CC:B6:7B:C6:3B:F1:BE:B0:8F:76
X509v3 Authority Key Identifier:
keyid:27:AF:59:C3:40:8F:89:7B:64:00:5A:12:3A:12:D9:68:DC:13:7F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J69Zw0CPiXtkAFoSOhLZaNwTfy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9e1654-9822-4b94-b68c-71eef5d74937/1/7ZmW4XAL52iE-cy2e8Y78b6wj3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9e1654-9822-4b94-b68c-71eef5d74937/1/J69Zw0CPiXtkAFoSOhLZaNwTfy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2d:6e:9c:00:0a:b4:3a:e2:32:ea:72:e1:42:fc:3b:8c:37:
b0:3d:e4:48:81:76:8d:4d:36:41:26:fc:bb:f4:ed:5e:89:65:
66:79:90:a7:c0:b9:c5:76:8b:05:05:9e:ca:eb:cb:99:a1:e5:
16:ef:e3:9e:40:57:5e:74:f1:93:80:da:bf:ae:2a:e2:3f:43:
20:08:f2:25:66:3c:da:64:74:dd:16:3f:03:45:fd:c7:bd:8e:
f6:15:38:7d:10:35:60:71:25:f5:ed:7d:ec:5d:fc:62:26:e1:
cc:e5:4c:1b:f7:25:56:0a:e6:d9:9c:85:9f:de:61:37:7d:be:
37:b8:d8:04:b7:8b:52:43:4c:ef:05:b2:54:89:1c:0e:27:6b:
85:c2:66:fd:05:54:63:3b:49:ab:d1:37:e8:44:ef:ef:58:c5:
d0:e4:c4:05:6d:3b:80:55:6d:02:43:c4:27:e5:6f:65:00:40:
7f:19:4e:7e:bf:eb:24:81:29:47:94:ad:f4:59:e4:22:6f:ff:
a1:47:04:63:98:5f:a5:61:ec:34:69:bd:a8:66:65:d0:03:2c:
ae:7f:2c:68:50:8b:49:30:88:cf:1f:f8:25:4a:0d:c8:9e:fb:
02:c6:cd:75:d3:89:ee:d7:4d:1f:d1:d2:1b:95:34:df:ba:ca:
c3:fd:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:07 2024 by rpki-client on console-fra.rpki-client.org