Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/Wkg1l44cXQx3Ew8BHNFUgfGJ2Ds.roa
File: Wkg1l44cXQx3Ew8BHNFUgfGJ2Ds.roa (raw, json)
Hash identifier: l2U/KG660WOkUGZoxRbq+LnMMxmhbL991XF5eLP0u+k=
Subject key identifier: 5A:48:35:97:8E:1C:5D:0C:77:13:0F:01:1C:D1:54:81:F1:89:D8:3B
Certificate issuer: /CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Certificate serial: 018573CD0A53AB1287AC2DA158D157BB5B6A
Authority key identifier: 48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/Wkg1l44cXQx3Ew8BHNFUgfGJ2Ds.roa
Signing time: Mon 02 Jan 2023 18:44:55 +0000
ROA not before: Mon 02 Jan 2023 18:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60440
IP address blocks: 5.133.80.0/22 maxlen: 24
2a09:6a00::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cd:0a:53:ab:12:87:ac:2d:a1:58:d1:57:bb:5b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Validity
Not Before: Jan 2 18:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a4835978e1c5d0c77130f011cd15481f189d83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:ee:a6:68:14:59:93:fb:33:8a:16:92:7a:
85:52:31:68:64:24:22:be:62:32:0a:2d:ac:68:21:
52:25:a7:5d:4e:e7:f9:8e:8e:0c:e2:d6:90:b3:13:
fe:d5:03:62:0e:6c:e4:d0:51:26:9c:f1:88:17:64:
c0:a2:f9:52:06:9a:34:6d:c4:08:a5:07:ad:20:50:
e2:6a:7f:f2:c3:ef:a4:5e:cd:da:a0:67:c9:f7:25:
f3:8e:e8:a4:4b:ef:be:8c:99:36:79:03:86:6b:99:
a6:e7:e6:f3:06:e4:87:32:13:7e:71:84:95:cb:1c:
07:27:35:9c:4f:43:aa:21:85:76:91:3a:05:3d:4d:
7f:57:ce:49:9f:02:65:37:c8:16:17:ac:6d:02:9f:
24:c8:ef:45:61:b2:04:45:7e:58:61:00:d0:49:5f:
c3:1c:e6:da:64:08:1a:51:25:10:e1:3e:e9:6d:6d:
23:f0:af:be:af:11:bb:9c:65:c0:37:45:6f:cc:32:
af:88:54:b4:53:2a:0c:c0:fc:49:80:da:2d:91:88:
53:99:75:96:cf:f2:f6:04:07:46:c5:80:eb:14:24:
34:65:ff:98:de:af:b9:c8:62:20:71:b0:12:f1:d5:
95:49:db:7c:e7:be:5f:ae:b7:f3:c2:9a:46:ec:3e:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:35:97:8E:1C:5D:0C:77:13:0F:01:1C:D1:54:81:F1:89:D8:3B
X509v3 Authority Key Identifier:
keyid:48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/Wkg1l44cXQx3Ew8BHNFUgfGJ2Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.80.0/22
IPv6:
2a09:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
63:7f:2a:d3:60:fa:b8:db:c1:7d:14:e6:a0:ba:3e:67:01:15:
95:85:da:a4:67:6a:31:09:88:4f:91:ec:4e:29:09:62:02:eb:
a9:31:15:9b:d1:73:06:fd:2e:b7:28:b4:cf:39:71:d2:dc:49:
f9:da:97:bb:87:8f:29:c2:8a:ae:65:4a:13:28:0d:5b:5f:8e:
e4:0e:4e:e0:3d:34:2a:e1:1b:06:39:65:ef:f8:e5:08:42:da:
18:b8:5a:f9:78:3d:ba:f3:47:a4:82:b2:7c:58:62:29:fd:21:
12:f6:df:9e:a7:a9:ec:0a:99:9f:dc:78:9d:ff:83:5f:45:31:
e4:56:8e:ee:b7:5a:a7:50:5b:94:2e:ed:b5:7e:fc:60:54:cc:
de:3a:86:e8:00:73:84:95:8b:2a:c1:ee:a5:5c:00:f0:30:c9:
01:c9:c0:90:ea:b2:a2:e8:3b:89:2f:4e:47:1e:71:31:8c:b8:
d2:5a:df:5d:83:5f:96:3e:77:f3:76:dc:f6:ba:9a:3f:72:ab:
38:54:47:a1:f7:09:f5:e2:68:b6:f3:7a:97:ac:29:ac:b4:fd:
1b:f7:ea:62:f6:36:df:46:ac:a5:0b:b9:aa:08:68:86:df:97:
36:a7:73:f1:61:ce:a2:7e:b5:a2:cb:39:a3:0b:62:24:39:b7:
10:e0:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:23 2024 by rpki-client on console-ams.rpki-client.org