Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/AnRv6EGC5btc6Levfg-eupxtaCc.roa
File: AnRv6EGC5btc6Levfg-eupxtaCc.roa (raw, json)
Hash identifier: ANPKxfiVJQXcED9cE3RR6bHcYKItqkWx0K7xx5c3h0g=
Subject key identifier: 02:74:6F:E8:41:82:E5:BB:5C:E8:B7:AF:7E:0F:9E:BA:9C:6D:68:27
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01842FBB87BBCF9373F6EB3516BD7FB643B8
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/AnRv6EGC5btc6Levfg-eupxtaCc.roa
Signing time: Mon 31 Oct 2022 20:28:49 +0000
ROA not before: Mon 31 Oct 2022 20:28:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42375
IP address blocks: 2.57.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:bb:87:bb:cf:93:73:f6:eb:35:16:bd:7f:b6:43:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Oct 31 20:28:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02746fe84182e5bb5ce8b7af7e0f9eba9c6d6827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:c4:ed:60:d8:56:44:0d:78:34:74:96:08:
df:e9:5b:f2:c3:fe:bc:bb:4f:ae:ec:bf:51:83:5e:
da:5c:a1:96:04:79:84:fe:ff:1e:53:ef:59:d4:ec:
76:ab:9c:46:25:fa:38:46:48:2c:6c:e2:b2:24:9e:
8a:7d:72:32:43:f2:60:5f:46:a7:14:b2:a3:05:97:
9c:2f:6b:2d:d0:06:58:cd:84:70:1d:77:4f:56:0f:
30:ac:20:3a:2c:49:83:46:5d:2a:5f:6e:e2:43:2d:
f2:17:88:f5:a1:fc:f8:ac:f8:b9:19:ca:21:47:46:
7d:ba:91:43:f2:5c:f6:60:8f:82:2e:46:88:42:e1:
b2:e5:7d:41:e4:9d:3a:df:96:76:64:4e:b9:2b:9e:
26:f5:40:c8:51:d4:5d:5e:6e:5b:f6:68:5e:77:21:
be:b8:19:95:61:9c:92:82:1a:62:32:3b:df:0d:0d:
18:1c:1d:b5:41:33:62:8b:30:28:85:60:b4:42:cb:
60:8d:13:c3:4a:d5:ba:ba:34:4b:1c:62:26:c6:3b:
80:e9:76:3c:95:23:61:65:ee:28:e6:25:44:b6:0b:
ec:d6:aa:25:bf:8b:eb:af:5d:07:e7:87:7c:d1:30:
f2:52:87:a4:7e:8b:fe:3f:e3:2a:24:83:00:e7:12:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:74:6F:E8:41:82:E5:BB:5C:E8:B7:AF:7E:0F:9E:BA:9C:6D:68:27
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/AnRv6EGC5btc6Levfg-eupxtaCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.149.0/24
Signature Algorithm: sha256WithRSAEncryption
09:49:94:91:48:1b:c8:70:c5:5a:c9:85:9d:14:03:13:38:66:
11:3c:1e:3b:a6:24:3f:94:14:70:75:42:d3:27:30:8e:b7:49:
fa:d9:81:92:3a:7a:09:59:90:36:25:19:14:bb:06:05:90:17:
77:29:4a:29:18:19:30:c3:6c:f3:b7:bf:7c:35:5f:bf:fd:3b:
b8:ef:21:b2:d1:ee:91:6e:8e:27:02:46:e5:d1:1a:9a:bc:d8:
ce:c2:20:eb:25:98:37:f6:31:91:95:69:42:59:b5:bf:34:67:
cc:31:6a:7c:96:59:32:34:18:2e:10:d5:d9:49:d0:ca:a3:b4:
a8:88:25:da:2a:f5:5f:95:6e:40:2b:84:e6:dd:6b:71:20:19:
b3:a6:71:02:e5:e0:01:23:30:a1:1f:0a:84:5a:77:64:7a:26:
c8:f8:05:22:d0:63:52:86:94:26:7a:1b:7f:2a:3c:48:5d:03:
0e:dd:dc:1b:4f:45:db:31:ec:e2:c9:05:96:eb:57:ad:fc:fc:
50:36:f1:bf:07:e1:ba:68:a0:16:b6:c9:11:d7:72:90:00:e9:
a6:98:f9:e9:a5:1b:a4:a8:c6:73:5d:67:13:5f:f1:6d:30:a4:
b4:21:7e:9f:29:58:3f:82:0c:19:e2:1f:13:73:4d:bb:59:1e:
7b:02:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net