Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/GlmE6xkrt4BN5u25xNomhnJkV1A.roa
File: GlmE6xkrt4BN5u25xNomhnJkV1A.roa (raw, json)
Hash identifier: HvhVRpNlTGLXTNh9e66Rt4DwF4qaXNx2THlHlT5qrtM=
Subject key identifier: 1A:59:84:EB:19:2B:B7:80:4D:E6:ED:B9:C4:DA:26:86:72:64:57:50
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 0DB04832
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/GlmE6xkrt4BN5u25xNomhnJkV1A.roa
Signing time: Sat 01 Jan 2022 08:59:37 +0000
ROA not before: Sat 01 Jan 2022 08:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209915
IP address blocks: 212.119.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229656626 (0xdb04832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 08:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a5984eb192bb7804de6edb9c4da268672645750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:47:33:65:24:87:5b:50:10:db:4d:65:a9:
51:54:d4:e5:3c:5d:22:f9:54:5c:8f:5c:ee:82:13:
8a:7a:39:53:bc:f9:2f:fa:84:52:e4:90:77:f7:94:
a2:82:4a:b1:43:68:71:e7:0c:2f:21:ea:04:89:18:
b3:75:dd:59:7f:17:68:6b:46:53:cb:6a:fc:42:11:
58:96:d8:e0:d5:4e:16:77:0e:33:91:c2:ec:a8:32:
c9:d2:2d:33:60:12:67:bc:b9:cf:d2:ba:ef:b8:e3:
2c:b5:27:83:3e:eb:69:ee:35:3b:ff:5a:6a:f2:28:
9d:02:18:79:bf:65:df:95:a6:b1:02:9b:2b:af:be:
d9:a7:6c:ff:a0:b3:98:86:ac:dc:51:a9:2e:34:a1:
23:c8:8f:aa:5d:1f:1a:0c:40:6b:44:73:98:f2:63:
0a:0e:ac:75:b9:d9:e7:04:d8:47:38:67:41:ab:cb:
73:b6:4f:69:51:a0:2f:da:02:e6:7d:f3:0f:f9:2b:
73:06:c0:88:fe:55:dc:8f:3c:97:09:f9:e0:7f:9c:
49:ab:21:03:48:b9:8a:71:51:aa:d9:58:1a:12:16:
80:1e:8a:fd:21:6c:04:5a:a4:83:45:d6:c7:f5:f3:
10:5c:0e:87:e4:b8:ea:f4:4b:5f:d9:7d:3b:68:97:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:84:EB:19:2B:B7:80:4D:E6:ED:B9:C4:DA:26:86:72:64:57:50
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/GlmE6xkrt4BN5u25xNomhnJkV1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:52:35:cc:64:0f:77:6f:2a:8c:bd:20:b4:63:d3:61:96:e2:
27:6b:6c:24:5a:47:be:a0:13:5a:03:b7:16:83:03:62:c1:60:
97:57:30:85:2f:71:ef:4d:05:b3:bf:da:90:f9:54:91:d8:e6:
31:dc:dd:d6:85:34:c7:bd:2f:93:1b:59:f9:e4:2f:e5:3e:27:
5e:6c:d7:a8:b9:c2:10:aa:3c:aa:b5:19:34:c4:b6:e7:f8:99:
6e:58:a9:a1:04:3b:71:f1:42:ac:55:5a:97:0e:0a:e6:0d:92:
50:69:09:6a:49:55:22:10:c9:0e:2e:e1:09:b4:24:4d:c2:ee:
d4:3c:07:bf:59:3a:38:6b:22:5a:cc:f0:9c:f8:5d:e8:a9:07:
27:07:9f:e3:4b:77:56:be:61:23:b6:44:72:ae:7b:b7:f0:c3:
20:7a:44:3e:a2:88:2b:7c:f7:23:41:6b:b3:20:ba:00:f9:1e:
25:c5:7a:61:3f:9e:15:48:e4:9f:9c:fa:11:e7:67:d4:2e:d2:
c7:e8:f8:87:cc:74:eb:a7:ac:b0:9b:a7:9e:e8:c6:94:20:02:
fe:74:07:dc:e1:8c:77:42:1c:93:c1:d5:b7:33:e1:4e:bd:d1:
fe:b2:1e:0c:0f:aa:47:a1:3d:86:96:24:ba:cc:eb:62:59:a4:
a7:b8:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org