Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/VsyvCMRZJt9Gergcl8ycZDwatc8.roa
File: VsyvCMRZJt9Gergcl8ycZDwatc8.roa (raw, json)
Hash identifier: cm4Z0hML2FpVC8VHJuGq0T0pnrVi5hMBiPEU4iAHb4Q=
Subject key identifier: 56:CC:AF:08:C4:59:26:DF:46:7A:B8:1C:97:CC:9C:64:3C:1A:B5:CF
Certificate issuer: /CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Certificate serial: 01856D0ACD6A616F84023239764BD45F39EE
Authority key identifier: AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/VsyvCMRZJt9Gergcl8ycZDwatc8.roa
Signing time: Sun 01 Jan 2023 11:15:02 +0000
ROA not before: Sun 01 Jan 2023 11:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34177
IP address blocks: 156.118.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:cd:6a:61:6f:84:02:32:39:76:4b:d4:5f:39:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Validity
Not Before: Jan 1 11:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56ccaf08c45926df467ab81c97cc9c643c1ab5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:17:8a:e9:e7:25:e0:c6:14:7c:a1:33:c6:
bc:9d:7d:81:9d:de:3c:d1:ce:91:cf:d6:bb:6a:7d:
31:7f:e5:09:13:9e:c0:c1:e3:63:6e:0d:20:96:88:
a3:b1:1e:ac:16:74:1b:8a:a1:0e:56:e0:e0:06:83:
19:6e:9f:a4:77:08:94:1b:2a:26:4e:36:be:b6:95:
f9:04:bd:c7:af:5e:e4:a8:63:d8:b0:48:9e:90:16:
9b:af:14:15:db:86:8a:83:fb:13:b8:56:26:49:77:
a5:c1:34:ef:24:ed:63:c7:69:b4:9f:d6:a6:6d:dc:
32:bf:80:b3:80:6f:3a:68:ac:f4:1a:b9:ab:03:c2:
45:53:bb:ca:5c:ce:4e:6b:70:3b:0a:40:c0:62:1f:
58:4a:eb:80:93:87:7b:d5:06:47:f6:4d:6c:9c:96:
71:b1:c8:fc:e8:62:f7:c0:09:66:e6:be:ca:6b:36:
d5:7f:d5:14:28:14:a0:07:68:85:27:a3:47:60:7a:
f2:62:37:8c:c9:72:17:44:c9:8c:03:87:d3:db:6b:
eb:1c:1d:2e:7d:d4:fb:d5:7a:aa:83:ca:70:02:bb:
4e:1e:52:57:ca:17:14:f3:ef:e2:3a:c5:a4:72:19:
54:9f:62:0c:d8:f4:f1:6c:eb:e2:8b:74:77:ea:ba:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CC:AF:08:C4:59:26:DF:46:7A:B8:1C:97:CC:9C:64:3C:1A:B5:CF
X509v3 Authority Key Identifier:
keyid:AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/VsyvCMRZJt9Gergcl8ycZDwatc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.118.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:98:8b:be:6b:c0:d0:73:af:94:b0:bb:a8:b4:fa:7e:d2:9a:
1b:0a:cc:7b:26:71:0c:aa:51:38:cf:12:b5:26:cd:8f:c6:b2:
ea:06:f4:49:57:42:10:7c:1e:e8:37:4c:0a:7a:4d:8a:5a:c4:
14:d1:16:7b:95:1e:84:33:4c:76:7d:d3:49:8c:a4:58:3d:33:
da:81:a5:c1:7f:68:bb:ff:c5:c2:0c:9c:85:76:8a:4c:90:d1:
58:2d:f0:e1:dc:ba:df:f4:59:90:4b:d7:0c:e3:30:e8:5c:c1:
cb:d0:36:73:3c:d5:9c:f1:ec:44:78:53:46:3a:83:2c:2b:27:
ef:8e:71:8c:14:a5:7e:90:44:d1:6c:7b:70:18:67:cd:26:67:
26:a6:b0:ec:89:88:01:de:7a:80:94:31:b4:55:bd:29:25:98:
ea:e9:66:21:ea:cc:ed:37:ca:f8:4f:d0:5e:86:da:50:6b:36:
b0:c1:d0:06:5c:e4:93:c2:85:4e:ff:81:82:cd:2c:57:53:8b:
8e:ff:0e:e4:60:b5:d7:d4:97:07:8d:95:96:1c:8a:b1:c2:e0:
0a:79:e6:8f:14:4c:38:a9:a4:e3:37:38:3c:b0:c6:7d:df:b7:
3f:32:95:bc:a6:52:af:02:06:49:78:22:e2:2d:3e:6f:ad:8f:
f0:d2:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net