Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/7uxmQSi7h4_y1McDF6tjwPXaXPk.roa
File: 7uxmQSi7h4_y1McDF6tjwPXaXPk.roa (raw, json)
Hash identifier: yMreUmdAs1MzE3qdWVZAGwprVoKIw3Zclux+yeEIdpo=
Subject key identifier: EE:EC:66:41:28:BB:87:8F:F2:D4:C7:03:17:AB:63:C0:F5:DA:5C:F9
Certificate issuer: /CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Certificate serial: 0188E1E452331D188789DF764E7E276E3F83
Authority key identifier: 5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/7uxmQSi7h4_y1McDF6tjwPXaXPk.roa
Signing time: Thu 22 Jun 2023 06:56:56 +0000
ROA not before: Thu 22 Jun 2023 06:56:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.226.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:e4:52:33:1d:18:87:89:df:76:4e:7e:27:6e:3f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Validity
Not Before: Jun 22 06:56:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeec664128bb878ff2d4c70317ab63c0f5da5cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:3e:b9:ad:78:ba:ac:72:e7:ca:df:bb:64:
a9:3a:9d:1b:04:9d:85:00:d7:fd:b2:c2:e5:19:8a:
32:15:b0:4a:1e:87:86:16:2f:f4:55:f9:8e:1e:14:
a8:d7:08:ab:75:30:0a:5e:37:46:40:0d:65:3c:28:
9e:e9:45:a9:5c:10:4b:35:d7:09:55:34:5d:51:b8:
91:52:62:8c:4d:b0:d3:7c:ff:18:c7:0d:a7:4b:ad:
86:bf:c2:f4:bb:e3:9a:e2:4e:16:16:a2:43:01:f2:
16:f2:ce:47:62:fa:c4:94:5d:a1:9b:a5:bf:d3:f7:
91:17:f8:04:03:8e:4c:e8:10:67:ae:57:af:59:9c:
7e:55:ed:a3:41:6e:b8:40:3d:34:0c:47:f1:59:f7:
85:ad:a9:11:78:f6:d5:c3:ef:a1:8a:ff:96:37:4c:
ff:75:b3:13:ab:ca:de:f5:5a:17:64:34:ef:5a:0a:
ed:21:a9:6f:ac:28:75:18:25:6c:66:bc:c0:df:de:
4c:cc:13:78:98:8e:11:71:c8:14:65:ec:e7:e3:c7:
0f:c4:a1:a8:95:9f:eb:ca:7d:1a:a8:14:9a:96:1a:
b0:7e:ea:54:93:a2:2e:3b:e0:f8:47:0c:45:03:4a:
7a:7d:e1:23:c3:9c:92:7d:ff:d7:b0:6e:48:48:de:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EC:66:41:28:BB:87:8F:F2:D4:C7:03:17:AB:63:C0:F5:DA:5C:F9
X509v3 Authority Key Identifier:
keyid:5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/7uxmQSi7h4_y1McDF6tjwPXaXPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Wws-T78jbPFlG6c02htH9i9KukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4c:f9:d6:1e:71:bf:ee:23:2c:54:08:47:21:f4:32:c4:2f:
0f:61:8e:3d:4e:80:b5:dc:96:21:5c:da:35:6a:2c:00:f9:8d:
1a:d8:fa:72:68:2d:91:ae:b3:e2:e7:45:e3:00:20:bb:2e:d1:
98:d1:3f:ae:e0:13:fd:23:d7:1e:ae:42:3d:0b:98:f9:d7:af:
06:f4:00:c0:d1:54:ab:63:ce:e3:35:1e:52:2e:83:68:13:1d:
80:5b:6d:70:7d:84:9c:35:f5:bf:91:ab:96:98:8b:29:d9:46:
df:ef:40:6f:b6:69:b9:92:e2:18:75:b7:29:28:f1:73:ca:05:
4e:67:99:a9:bc:cb:1d:df:49:36:ec:82:cb:b6:84:5a:f1:be:
07:90:bd:33:08:c5:22:6b:1a:6a:f0:a3:c0:76:73:9f:b5:9b:
45:e6:89:8c:68:19:ba:27:b8:d0:1f:e4:d9:24:7f:82:a1:1f:
87:71:34:ed:30:be:bb:57:31:e5:8a:08:43:ba:ca:4c:04:2a:
e2:90:b4:26:90:e5:7b:52:c0:d9:b7:10:fd:d2:40:d2:b3:ad:
af:df:d5:58:bd:c7:0d:72:f4:7a:bd:0b:2e:78:72:8d:f1:25:
e2:24:11:38:e8:31:31:5d:16:0b:12:a7:e9:83:db:b2:25:91:
64:23:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:43:31 2023 by rpki-client on console-fra.rpki-client.org