Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/pkSjJVeI1L2N1Cskf_-g-8h8Y3E.roa
File: pkSjJVeI1L2N1Cskf_-g-8h8Y3E.roa (raw, json)
Hash identifier: WIE2M2AnNHyiYysDwM2Cai/Ou45Ptkq0xxLp9bn9QXw=
Subject key identifier: A6:44:A3:25:57:88:D4:BD:8D:D4:2B:24:7F:FF:A0:FB:C8:7C:63:71
Certificate issuer: /CN=7a34c3866521ac773080a7e77894abab1a46cd29
Certificate serial: 2DA353
Authority key identifier: 7A:34:C3:86:65:21:AC:77:30:80:A7:E7:78:94:AB:AB:1A:46:CD:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejTDhmUhrHcwgKfneJSrqxpGzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/pkSjJVeI1L2N1Cskf_-g-8h8Y3E.roa
Signing time: Sat 01 Jan 2022 01:52:15 +0000
ROA not before: Sat 01 Jan 2022 01:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49629
IP address blocks: 5.181.100.0/22 maxlen: 22
194.8.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990931 (0x2da353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a34c3866521ac773080a7e77894abab1a46cd29
Validity
Not Before: Jan 1 01:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a644a3255788d4bd8dd42b247fffa0fbc87c6371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:94:a8:8b:22:58:44:c1:fc:17:ad:7e:09:
af:3c:9f:3a:55:ca:e0:8b:09:bd:a9:8e:2b:5a:05:
65:fa:98:f9:00:87:15:a9:4b:cd:de:5b:cc:0d:b2:
0a:b9:28:81:7d:79:93:9d:fb:4e:90:78:50:20:12:
fb:98:be:e2:56:df:07:8c:f0:c3:b5:4e:aa:3f:82:
f7:98:96:06:fa:f6:8d:07:79:df:3f:60:a9:06:84:
61:9d:f7:8f:97:30:09:f7:76:5b:16:96:92:24:db:
94:fa:ef:9d:f5:70:33:66:47:2a:89:b9:6c:7e:bb:
74:42:11:9d:73:73:66:7b:b1:3a:31:83:0c:14:a6:
50:2f:85:3b:38:55:ba:9e:f0:f4:b1:63:f4:66:fb:
36:73:8a:61:76:93:82:8f:a5:8e:6e:77:f6:1e:cd:
31:9c:2a:40:e6:08:05:10:5e:49:6c:e6:ce:06:e9:
90:66:5d:76:09:d3:4a:f5:1a:a7:58:42:fa:ca:45:
ed:78:97:eb:d0:b5:0e:bb:54:f4:7d:9b:29:bf:ea:
bf:07:aa:f6:ad:43:6d:4e:0d:85:dd:b4:e1:74:3c:
e4:ec:7b:c9:44:a2:65:a8:cd:df:98:3e:11:09:65:
1d:19:2a:17:61:68:d4:e6:c5:10:e5:47:55:ac:a5:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:A3:25:57:88:D4:BD:8D:D4:2B:24:7F:FF:A0:FB:C8:7C:63:71
X509v3 Authority Key Identifier:
keyid:7A:34:C3:86:65:21:AC:77:30:80:A7:E7:78:94:AB:AB:1A:46:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejTDhmUhrHcwgKfneJSrqxpGzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/pkSjJVeI1L2N1Cskf_-g-8h8Y3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/ejTDhmUhrHcwgKfneJSrqxpGzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.100.0/22
194.8.140.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:28:8f:64:f3:ec:29:d8:26:88:78:ad:b3:0f:92:ec:d7:8d:
2b:14:a5:5a:12:20:6e:d0:2a:85:11:a2:5f:10:86:0f:9f:d1:
9c:2b:63:cc:0f:72:9a:61:c1:77:c4:0e:a3:74:8f:66:0f:2f:
13:15:ee:65:b2:bb:fe:e4:bb:88:be:8a:8b:d5:95:3f:34:49:
c1:dc:41:ab:f3:c8:4e:04:b3:6b:e8:2a:e9:ff:97:46:c5:f1:
4d:f4:52:15:ae:30:5a:ab:24:2f:b0:34:24:8a:19:72:b6:b0:
fa:eb:9d:a4:77:84:26:7a:f1:37:d7:eb:fa:92:d2:26:04:cc:
da:ee:21:22:e7:1b:27:d2:41:72:94:99:1c:97:77:95:2a:f4:
96:4a:2d:60:7a:ec:70:81:e8:85:73:02:cf:52:3e:8c:e0:5e:
62:6f:27:ff:30:fe:ec:59:21:c6:92:98:18:2e:68:94:30:25:
e8:2a:e0:a1:36:a0:7c:65:8d:1d:f5:96:c3:d5:43:d7:b9:86:
b5:ca:06:07:53:4c:c9:20:ce:3a:2b:d7:93:e5:34:df:e8:c9:
8c:4e:e5:6a:1b:d7:d4:f7:51:1a:7e:da:59:10:d7:b0:40:38:
b3:c4:18:15:1a:33:2d:69:41:85:bf:72:16:b6:97:89:44:db:
ac:cc:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:20 2024 by rpki-client on console-ams.rpki-client.org