Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4ba0cd-5b41-4110-9d14-7056306094f3/1/t3E7ddmwqOoovCSJ8Y2e4lM-JQk.roa
File: t3E7ddmwqOoovCSJ8Y2e4lM-JQk.roa (raw, json)
Hash identifier: XBMiAiUgCzdABVYgwpj2tymKbDI9/ZKjxOz2AQvqkXs=
Subject key identifier: B7:71:3B:75:D9:B0:A8:EA:28:BC:24:89:F1:8D:9E:E2:53:3E:25:09
Certificate issuer: /CN=1802617b1b5a934464c3b6a928fc231a07c413f2
Certificate serial: 0183F638F56474A04758912B8712A5A53061
Authority key identifier: 18:02:61:7B:1B:5A:93:44:64:C3:B6:A9:28:FC:23:1A:07:C4:13:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAJhextak0Rkw7apKPwjGgfEE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4ba0cd-5b41-4110-9d14-7056306094f3/1/t3E7ddmwqOoovCSJ8Y2e4lM-JQk.roa
Signing time: Thu 20 Oct 2022 16:27:51 +0000
ROA not before: Thu 20 Oct 2022 16:27:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 5.133.102.0/23 maxlen: 23
5.133.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:38:f5:64:74:a0:47:58:91:2b:87:12:a5:a5:30:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1802617b1b5a934464c3b6a928fc231a07c413f2
Validity
Not Before: Oct 20 16:27:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7713b75d9b0a8ea28bc2489f18d9ee2533e2509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:1f:cd:a4:5f:53:27:9a:1e:7e:fc:fb:f0:
bb:79:13:6a:96:77:2f:c9:1d:90:f9:72:36:4a:5a:
17:73:f2:fa:27:37:74:d9:16:9c:e5:f9:c6:ad:bc:
ac:a1:32:be:e2:1b:92:0a:dd:99:32:de:46:78:ef:
59:85:4a:cb:bd:0f:00:f3:aa:65:24:0a:4d:fd:1d:
7e:db:19:95:95:08:60:3d:92:c6:52:ea:eb:a4:4c:
8d:c8:12:4c:0f:2f:42:1e:15:ae:d4:f6:26:15:d1:
3e:c5:8e:3e:1b:e2:04:3a:24:63:06:0c:b7:fb:3e:
ce:22:2a:22:45:52:47:5d:6f:6c:e6:31:4a:ea:77:
87:4c:5a:63:14:96:4a:05:83:73:72:4b:3c:fa:be:
1a:4e:6d:ef:37:4b:bd:00:fa:4e:e0:0e:06:0b:00:
5e:83:02:d6:88:89:13:49:44:59:f2:da:96:78:80:
9b:09:2e:65:9d:09:94:bd:9b:b5:dd:08:f3:91:b5:
8a:71:dd:dc:6f:06:bb:9f:e0:f3:04:22:cb:91:bf:
dc:aa:12:d2:44:c8:43:74:06:41:25:88:cf:59:9b:
c6:a2:14:39:23:4c:8c:95:4e:d3:e5:db:88:70:fc:
77:29:fb:4a:07:75:ea:e9:fd:5c:a1:02:19:c9:06:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:71:3B:75:D9:B0:A8:EA:28:BC:24:89:F1:8D:9E:E2:53:3E:25:09
X509v3 Authority Key Identifier:
keyid:18:02:61:7B:1B:5A:93:44:64:C3:B6:A9:28:FC:23:1A:07:C4:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAJhextak0Rkw7apKPwjGgfEE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4ba0cd-5b41-4110-9d14-7056306094f3/1/t3E7ddmwqOoovCSJ8Y2e4lM-JQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4ba0cd-5b41-4110-9d14-7056306094f3/1/GAJhextak0Rkw7apKPwjGgfEE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:73:7c:a4:f0:eb:69:a2:d5:8b:b6:07:ad:ad:8b:66:8f:90:
e4:9f:7e:aa:fb:dd:9d:73:8e:85:40:e6:97:27:a8:88:92:29:
fd:80:ca:10:91:4a:b0:7b:5d:da:b0:0c:ee:48:a3:51:f4:fa:
40:86:b1:03:6e:63:2a:df:c0:29:cf:d5:fc:54:64:63:2f:32:
cd:02:f9:16:6a:ba:01:43:0d:c6:81:6f:f3:f2:1f:63:91:79:
ce:02:2f:76:48:b5:cf:25:2a:0b:9d:3e:e5:19:43:97:b1:9d:
3c:57:7b:0f:14:20:7d:11:cc:dd:50:ba:c9:2e:c9:96:40:fd:
dd:8b:eb:ab:1f:d3:4e:c7:53:f6:b4:fa:f2:53:e5:82:be:a8:
da:1a:41:ee:72:2b:c3:c7:01:9c:c9:fe:43:8a:1b:f6:b7:6f:
46:49:7e:01:01:72:b5:5a:10:18:91:1e:db:e6:f6:16:04:a7:
97:ce:72:8c:2b:08:80:0b:8e:cc:06:03:8b:03:01:af:bf:41:
a9:ec:06:62:8e:fe:be:4e:f7:b5:59:2b:5d:96:1b:52:9f:bd:
c1:7a:61:0d:cc:7d:93:a9:f1:a8:8c:cb:7b:91:d2:aa:84:11:
ec:d3:a9:4c:da:2d:98:1a:e0:57:51:57:a9:41:5a:25:db:05:
1f:19:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:34 2024 by rpki-client on console-fra.rpki-client.org