Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/3SwAlVG6rwQgvz43X0MO1tIHUf0.roa
File: 3SwAlVG6rwQgvz43X0MO1tIHUf0.roa (raw, json)
Hash identifier: vwaAO803vxoayAwgC1TKH67tUtERD5biL5mA8HHsgl8=
Subject key identifier: DD:2C:00:95:51:BA:AF:04:20:BF:3E:37:5F:43:0E:D6:D2:07:51:FD
Certificate issuer: /CN=7a34c3866521ac773080a7e77894abab1a46cd29
Certificate serial: 0182B1296273C5D54A7CAE6BD76B9FD83B9C
Authority key identifier: 7A:34:C3:86:65:21:AC:77:30:80:A7:E7:78:94:AB:AB:1A:46:CD:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejTDhmUhrHcwgKfneJSrqxpGzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/3SwAlVG6rwQgvz43X0MO1tIHUf0.roa
Signing time: Thu 18 Aug 2022 13:34:15 +0000
ROA not before: Thu 18 Aug 2022 13:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 5.181.100.0/22 maxlen: 24
194.8.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:29:62:73:c5:d5:4a:7c:ae:6b:d7:6b:9f:d8:3b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a34c3866521ac773080a7e77894abab1a46cd29
Validity
Not Before: Aug 18 13:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd2c009551baaf0420bf3e375f430ed6d20751fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:f4:9e:3c:b5:a5:09:e8:24:95:4e:9b:45:
2f:14:36:73:f6:dc:a4:1c:5e:df:60:9b:bd:19:0f:
26:93:1f:60:05:6a:b5:f2:d8:48:51:64:ef:a5:90:
90:84:56:b9:fa:e7:d5:c6:6c:d8:04:d9:67:f3:ea:
f5:a4:89:0f:c8:fb:5a:38:7a:58:c3:6f:4c:34:5a:
22:f8:77:fe:95:64:c2:13:ec:1d:19:e3:db:56:5c:
91:cd:d1:11:69:14:90:51:ef:d2:99:c5:31:83:e7:
f5:cd:b2:82:92:cd:cb:b8:c3:48:33:a0:25:26:2d:
74:68:fa:9e:be:fa:bd:c4:01:4a:16:79:79:55:be:
38:d5:a6:40:a6:4e:0b:ba:a9:61:91:d1:83:cf:f0:
bf:b2:c0:68:a9:8a:7b:08:9e:2d:db:d1:20:43:85:
9a:45:f5:42:b4:05:55:58:c0:9b:0a:f9:34:2f:5e:
b8:b5:3c:d2:e2:a9:7d:1d:ed:62:99:62:c3:35:3a:
6e:85:f0:fd:e7:ef:85:96:9e:c6:dc:40:f8:45:8b:
0e:1f:6a:21:6f:53:59:b3:2a:d1:7b:f9:e0:41:6a:
71:b2:84:9f:5c:b1:ad:f4:96:1c:04:84:3b:aa:38:
94:6a:63:bf:ea:e5:70:7f:e8:f9:cd:0a:9a:b8:43:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:00:95:51:BA:AF:04:20:BF:3E:37:5F:43:0E:D6:D2:07:51:FD
X509v3 Authority Key Identifier:
keyid:7A:34:C3:86:65:21:AC:77:30:80:A7:E7:78:94:AB:AB:1A:46:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejTDhmUhrHcwgKfneJSrqxpGzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/3SwAlVG6rwQgvz43X0MO1tIHUf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/ejTDhmUhrHcwgKfneJSrqxpGzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.100.0/22
194.8.140.0/22
Signature Algorithm: sha256WithRSAEncryption
30:26:06:8a:d0:e2:54:53:df:13:bc:ad:e4:ef:31:67:a2:53:
f2:b5:da:d4:b0:2d:b9:20:33:cb:ea:e7:67:2d:29:09:fe:23:
a1:45:3e:58:7f:1a:65:e8:0b:c6:18:df:b6:1f:26:f6:f2:ae:
21:18:b7:9a:6f:be:68:e8:33:58:a2:43:a2:ff:47:5b:26:40:
5a:f2:b1:29:96:2d:df:09:e6:d4:36:03:7e:07:cd:13:69:26:
5a:33:ca:96:27:d2:98:cd:44:d2:36:f0:37:be:c2:56:ac:db:
6d:4c:dc:90:82:29:26:36:5e:6e:52:7b:1e:4f:4b:e4:1b:2b:
e0:f9:db:25:7f:bf:1e:af:e5:3c:db:d7:6a:a9:23:40:52:a4:
fb:49:9d:5c:0e:e6:e0:34:ad:36:a7:15:28:7b:7c:50:ec:57:
3e:91:04:d1:99:27:78:64:d7:4c:86:73:be:43:3e:12:98:54:
94:64:ae:3d:f2:6f:fe:6d:ae:b6:96:76:66:d5:2e:f4:4e:f9:
b6:1e:9b:4b:12:c4:72:29:14:27:b9:e4:81:1d:37:89:5f:73:
ab:8e:23:01:72:53:12:91:45:58:2b:3a:20:d6:a1:e4:c6:c1:
14:26:4b:a2:b1:7b:fd:f6:a4:c0:fb:02:d3:93:1b:e4:b2:a8:
c0:b5:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:20 2024 by rpki-client on console-ams.rpki-client.org