Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/rUpKFMJk8kNjnZjMT6vZnc-c-Nc.roa
File: rUpKFMJk8kNjnZjMT6vZnc-c-Nc.roa (raw, json)
Hash identifier: b4PH/onrvp85VP2UmUQ4pWfZzSRYqPnKCOOdnn/QcAc=
Subject key identifier: AD:4A:4A:14:C2:64:F2:43:63:9D:98:CC:4F:AB:D9:9D:CF:9C:F8:D7
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 018CC94D3CDA6C413D831F174F6F55C04BA3
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/rUpKFMJk8kNjnZjMT6vZnc-c-Nc.roa
Signing time: Tue 02 Jan 2024 08:32:11 +0000
ROA not before: Tue 02 Jan 2024 08:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 185.128.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:3c:da:6c:41:3d:83:1f:17:4f:6f:55:c0:4b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Jan 2 08:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad4a4a14c264f243639d98cc4fabd99dcf9cf8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:aa:80:c8:f1:ab:46:d6:70:68:f3:c4:7f:
39:5e:ec:3f:81:13:bf:21:b9:f8:35:aa:1a:16:2a:
3f:83:87:f7:0f:71:5e:45:51:a7:e2:fd:46:39:2f:
ae:16:86:8c:f0:6b:8e:65:cc:62:c7:c7:77:b7:d4:
cf:61:a2:a6:86:64:ea:b6:8e:1f:37:73:33:b9:70:
1d:f3:c2:de:a4:74:36:c2:1f:89:c9:63:71:32:51:
a1:41:69:ff:ee:39:11:31:2a:ab:f2:c0:5d:82:2f:
61:d9:59:1a:76:97:3f:93:25:1c:51:ab:b2:cb:eb:
77:20:82:4c:02:d9:a1:3b:a3:bf:c8:fb:91:7e:88:
d3:21:a3:88:29:29:2d:c0:e5:fb:6a:c9:bc:02:a3:
36:ee:75:63:2d:d1:93:a3:a0:a0:68:f8:d8:00:f2:
89:11:65:b7:1e:f8:2d:16:eb:9f:34:e5:a9:d9:67:
a1:87:0e:8a:91:65:03:c8:45:67:01:f0:98:0f:25:
06:98:e1:aa:a0:1b:cd:04:04:75:1c:c9:7c:59:d6:
fc:b4:8c:d9:2e:8e:da:e9:d6:f0:1e:68:aa:e6:8d:
29:79:0e:ee:65:f1:cc:14:12:79:54:a0:00:05:9a:
35:4a:0b:63:31:b2:bb:6c:21:c4:cd:29:f1:d7:ca:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:4A:14:C2:64:F2:43:63:9D:98:CC:4F:AB:D9:9D:CF:9C:F8:D7
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/rUpKFMJk8kNjnZjMT6vZnc-c-Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.167.0/24
Signature Algorithm: sha256WithRSAEncryption
48:69:9a:1b:d2:c3:75:db:9c:5b:92:60:6e:77:e5:63:b9:46:
d3:26:71:01:aa:c5:d7:3a:ca:95:78:7b:87:42:fd:1b:cd:a6:
7d:e0:a8:25:71:90:66:91:de:90:12:ba:d0:c2:da:78:95:4e:
2c:01:4a:67:2a:21:6b:aa:7d:02:b8:ec:9a:a0:96:4c:55:59:
e4:ee:0e:80:2f:e3:e5:ec:01:07:dd:63:7a:29:60:29:f4:c9:
57:88:89:8b:57:c0:19:14:83:6b:d0:65:f1:d0:dc:85:cc:96:
8c:c2:8f:3e:0c:1b:48:a6:aa:e5:00:09:98:39:f7:17:d6:96:
ef:eb:72:37:e8:96:95:88:bb:79:f6:3b:9f:41:f3:02:83:92:
5d:1c:95:38:b9:54:78:9a:19:04:8f:c0:61:ee:75:9a:94:9d:
0f:df:61:fb:4e:87:18:d0:da:92:93:cb:39:db:35:4c:ac:cf:
ec:2e:bc:dc:e1:67:77:3e:f9:6a:8d:4c:d1:97:97:de:53:9a:
46:d2:61:33:2f:bc:92:61:76:8c:f6:e5:16:43:73:19:6b:0e:
c1:f8:15:50:a3:83:43:8a:66:9a:21:f0:e1:71:a8:32:ea:94:
86:91:f4:69:d2:72:50:92:80:6c:39:1f:6b:5f:59:3a:4e:89:
69:3b:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:48 2024 by rpki-client on console.sobornost.net