Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/vlRbw5YyEn-earXA0CSSSY3UEOs.roa
File: vlRbw5YyEn-earXA0CSSSY3UEOs.roa (raw, json)
Hash identifier: qw5nSft0y9orYlDrkWiRA78a4OC31vVHyajq1Yprkss=
Subject key identifier: BE:54:5B:C3:96:32:12:7F:9E:6A:B5:C0:D0:24:92:49:8D:D4:10:EB
Certificate issuer: /CN=e4b90db21816df01f70f296683fea2c0ac8161d9
Certificate serial: 01E68F00
Authority key identifier: E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LkNshgW3wH3Dylmg_6iwKyBYdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/vlRbw5YyEn-earXA0CSSSY3UEOs.roa
Signing time: Sat 28 May 2022 14:09:13 +0000
ROA not before: Sat 28 May 2022 14:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 87.236.144.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31887104 (0x1e68f00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b90db21816df01f70f296683fea2c0ac8161d9
Validity
Not Before: May 28 14:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be545bc39632127f9e6ab5c0d02492498dd410eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a5:09:2a:f0:9c:4a:59:fd:68:20:95:95:ee:
1a:6f:dd:cf:ae:5a:ed:28:38:df:d9:1c:c1:bb:40:
c6:d9:9a:e5:e1:3c:73:aa:39:36:97:0f:00:3c:5e:
14:cb:f7:5e:18:c5:b1:fb:64:1d:c7:8a:9c:16:94:
f9:33:cd:a1:08:7e:c1:e4:eb:c0:49:66:65:c6:d6:
f4:5c:b8:a3:1c:16:0c:d3:bf:3f:15:b1:0e:b7:b3:
f0:04:ad:7f:19:53:f3:6e:7a:14:8e:3a:e0:87:90:
03:48:c1:9a:ae:6c:38:9c:42:db:ff:13:ed:31:05:
0d:60:d3:c1:c0:a2:55:ff:4f:ef:f6:71:23:97:e8:
54:aa:39:69:7c:b6:69:3e:61:4a:2f:ed:69:c0:73:
42:53:07:32:9d:83:95:f8:07:f6:95:78:0a:07:45:
f0:12:30:d7:df:74:ba:47:8b:e8:b7:60:bc:25:f4:
45:2b:b7:00:f3:ce:3b:ee:6d:09:1d:0a:09:26:8d:
1a:c1:8a:5e:ea:5d:66:e6:4d:63:7d:38:70:d7:73:
17:5b:3c:f6:4e:b1:93:e6:6b:37:32:85:48:15:2f:
86:d8:40:e8:15:f8:b8:83:2e:1a:02:d5:98:32:b4:
b7:56:f6:c9:80:18:cd:e3:13:fd:3e:fc:0d:c3:4d:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:5B:C3:96:32:12:7F:9E:6A:B5:C0:D0:24:92:49:8D:D4:10:EB
X509v3 Authority Key Identifier:
keyid:E4:B9:0D:B2:18:16:DF:01:F7:0F:29:66:83:FE:A2:C0:AC:81:61:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LkNshgW3wH3Dylmg_6iwKyBYdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/vlRbw5YyEn-earXA0CSSSY3UEOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7642b9-caa0-43df-8205-2f18aa636bca/1/5LkNshgW3wH3Dylmg_6iwKyBYdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.144.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b6:d2:12:48:21:7c:23:f9:20:30:1c:a7:87:b9:6d:76:0b:
fa:70:6c:b2:41:42:65:bb:86:16:3f:08:08:e1:41:40:a0:41:
79:aa:eb:5a:58:e6:54:05:b4:89:b9:89:c2:bf:b5:b7:77:ba:
61:a2:ba:49:93:68:25:13:50:19:57:0f:3c:0d:85:ea:5e:cf:
01:21:5b:26:93:b1:2d:0c:fe:ac:a5:3e:c7:2c:fa:72:89:56:
a8:09:23:8b:df:8a:77:ba:d3:47:94:5e:f4:87:ef:6c:bf:e2:
fd:c8:70:e8:b4:12:7c:ae:09:9b:80:e7:ac:2c:ce:b9:16:b1:
45:f0:a7:a8:e7:c3:6a:45:08:4f:43:17:ce:8e:02:e8:6c:ac:
b2:66:ad:f0:57:76:bb:28:52:a2:a9:68:35:36:e3:9a:d9:a5:
28:1c:1a:80:bf:22:d9:f8:bb:d2:94:50:86:6b:df:31:3f:d3:
c7:05:69:4c:14:94:cf:eb:86:21:c7:d5:ba:88:6f:43:46:b2:
9d:ab:a8:42:6c:55:0d:cc:31:0b:4f:0b:e2:18:13:d4:32:78:
3f:cf:38:7e:84:65:b9:f7:bd:e1:2d:28:3c:a8:59:1c:fb:5b:
3e:0a:18:a9:e4:b6:98:ff:c4:1e:7a:76:b4:9c:58:5c:85:82:
fb:0c:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:28 2025 by rpki-client