Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2a4714-1d7c-4dc5-bda0-eb954d8ec385/1/47baLCeLTaYeVi98P8MHnvrqU20.roa
File: 47baLCeLTaYeVi98P8MHnvrqU20.roa (raw, json)
Hash identifier: YdeZZPLfnBTC9EW0nm9Cqn+NC5i082Km5oZmUCqmwFU=
Subject key identifier: E3:B6:DA:2C:27:8B:4D:A6:1E:56:2F:7C:3F:C3:07:9E:FA:EA:53:6D
Certificate issuer: /CN=cb188678f83ca1d959cc0c6780de1c40e55cdb9a
Certificate serial: 1B6A9CF2
Authority key identifier: CB:18:86:78:F8:3C:A1:D9:59:CC:0C:67:80:DE:1C:40:E5:5C:DB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxiGePg8odlZzAxngN4cQOVc25o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2a4714-1d7c-4dc5-bda0-eb954d8ec385/1/47baLCeLTaYeVi98P8MHnvrqU20.roa
Signing time: Sat 01 Jan 2022 14:04:04 +0000
ROA not before: Sat 01 Jan 2022 14:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199920
IP address blocks: 5.159.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459971826 (0x1b6a9cf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb188678f83ca1d959cc0c6780de1c40e55cdb9a
Validity
Not Before: Jan 1 14:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3b6da2c278b4da61e562f7c3fc3079efaea536d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:0e:3c:1e:8b:0e:e5:6a:87:df:77:e9:08:
1a:be:88:82:8e:c3:65:c4:fd:56:d3:d8:6d:24:c6:
af:28:92:bb:ab:ae:14:fe:40:79:5f:ef:d5:86:af:
ae:e4:8c:99:94:19:85:78:1a:7f:67:91:fd:96:4d:
d9:75:e0:b7:58:d8:a1:77:7f:ac:0a:2d:91:ee:51:
5b:42:95:02:9f:80:f6:d9:cb:48:1d:ea:af:79:49:
80:a4:37:3e:21:9c:a8:3b:82:66:1f:a9:ad:94:52:
8e:db:c5:59:5e:9c:71:f6:59:60:1d:69:dd:75:7c:
49:57:a3:54:15:4c:93:2e:e4:19:02:34:0d:f2:7d:
41:a3:56:7c:50:19:a4:f6:d6:c6:f9:18:65:a7:1f:
50:55:0d:e9:c5:1c:a6:ca:d0:ae:86:27:e2:c3:ea:
a7:d0:32:fd:9c:89:47:d7:2a:9c:f9:2c:d5:f7:4f:
3b:36:65:d2:8f:2b:a8:c9:ee:b3:1f:a7:fe:ba:f8:
0e:5c:56:40:a1:34:40:38:a8:1c:7e:26:ab:35:5d:
1d:74:7f:66:b7:8f:86:b3:f2:2e:6d:47:6b:a0:76:
5b:16:8c:b3:99:d3:32:2b:14:e5:40:ec:39:d1:42:
21:7d:5e:06:98:cf:e6:fc:b0:3b:9a:74:24:d4:b5:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B6:DA:2C:27:8B:4D:A6:1E:56:2F:7C:3F:C3:07:9E:FA:EA:53:6D
X509v3 Authority Key Identifier:
keyid:CB:18:86:78:F8:3C:A1:D9:59:CC:0C:67:80:DE:1C:40:E5:5C:DB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxiGePg8odlZzAxngN4cQOVc25o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2a4714-1d7c-4dc5-bda0-eb954d8ec385/1/47baLCeLTaYeVi98P8MHnvrqU20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2a4714-1d7c-4dc5-bda0-eb954d8ec385/1/yxiGePg8odlZzAxngN4cQOVc25o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.208.0/21
Signature Algorithm: sha256WithRSAEncryption
59:8b:3e:41:e9:df:a7:fe:24:28:13:95:a6:cf:a3:60:e1:ef:
60:67:0f:c9:a9:0a:81:d8:56:37:ea:ca:92:2a:e5:09:12:0a:
5a:1f:2e:7a:26:20:4d:7a:76:0b:84:c1:f6:c4:8f:15:a2:27:
67:fa:2f:8f:dd:b4:ba:1e:14:9d:74:49:de:f6:af:e4:c0:43:
44:5c:0f:f5:a1:ee:7a:a4:b4:08:6e:27:be:de:b8:91:b1:95:
12:a0:7f:3c:24:62:46:b5:98:73:6b:b8:b1:80:64:9e:bf:f4:
a0:b7:b0:55:5b:ac:ec:59:4d:93:1e:38:21:c6:58:22:9f:0c:
17:e4:47:7f:d1:a1:21:ee:0e:45:a7:d7:27:52:85:7b:75:af:
a9:93:ec:cb:f0:ff:94:34:91:31:47:c4:e7:77:7e:ab:1e:69:
ea:c0:eb:e4:a8:8c:53:e0:de:b0:82:a4:11:90:33:91:94:54:
c7:ea:9a:00:8d:44:ba:9f:81:e7:96:f2:93:b2:4e:31:bd:c4:
49:ab:e7:3a:d4:d3:d7:99:d5:60:a0:e2:87:a1:00:38:06:2f:
f8:d4:23:9a:4f:d0:5c:06:ad:1d:57:de:ef:9a:25:55:9e:54:
95:8f:51:df:f2:a1:a5:5c:0d:c1:30:7f:8c:ca:c6:80:db:f0:
0b:f7:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:44 2024 by rpki-client on console-fra.rpki-client.org