Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e89f5-3f07-4ce1-8c4f-9701e00e3f03/1/fRRdETGU7x7A7KOyz1WjaKBv4NY.roa
File: fRRdETGU7x7A7KOyz1WjaKBv4NY.roa (raw, json)
Hash identifier: NkcM7BA3Mtj7qmPv6oBZhjagYia19u9E4K1PGA8S8fs=
Subject key identifier: 7D:14:5D:11:31:94:EF:1E:C0:EC:A3:B2:CF:55:A3:68:A0:6F:E0:D6
Certificate issuer: /CN=0cbec386ce9cc04e7fb7f97549cce3d6c05e8e45
Certificate serial: 0185700282E7AAF7695C48DEE08FF26ACCF8
Authority key identifier: 0C:BE:C3:86:CE:9C:C0:4E:7F:B7:F9:75:49:CC:E3:D6:C0:5E:8E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL7Dhs6cwE5_t_l1Sczj1sBejkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e89f5-3f07-4ce1-8c4f-9701e00e3f03/1/fRRdETGU7x7A7KOyz1WjaKBv4NY.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27176
IP address blocks: 5.172.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:82:e7:aa:f7:69:5c:48:de:e0:8f:f2:6a:cc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbec386ce9cc04e7fb7f97549cce3d6c05e8e45
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d145d113194ef1ec0eca3b2cf55a368a06fe0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:76:96:a3:dd:b3:3d:2c:c6:b2:de:0a:dd:
0c:eb:bd:9e:b5:19:e6:5e:a8:a5:da:ad:14:1c:ce:
e5:91:b9:4c:94:50:45:e7:35:1c:cf:f2:ee:9f:c2:
ef:14:86:e8:db:98:4e:35:db:8c:37:4d:73:e0:30:
3d:42:eb:a7:d4:3f:26:a2:42:cd:92:93:be:b8:f0:
34:1d:57:65:1f:a1:b1:0e:ba:84:93:07:be:de:7a:
40:a0:47:27:b2:1b:a2:f7:94:88:29:5c:ba:2f:f8:
85:9e:55:0a:ff:d2:5c:ba:ce:dd:cc:f3:b2:e9:5b:
fc:cc:8e:c7:84:e2:a3:ff:4d:6a:e4:44:67:7b:31:
8d:87:48:ad:c8:88:f2:ed:77:78:65:e2:1b:ca:dd:
c6:1f:f2:9b:ca:46:6e:ee:bd:cc:93:8d:e9:c9:ed:
e1:03:f7:6f:de:bf:49:b6:9a:90:83:ff:07:04:55:
8a:6d:40:6e:3c:5b:b5:55:b9:f1:0d:99:5e:f4:d0:
e2:26:93:da:5c:ed:cd:c6:fe:43:64:ee:d7:7d:f3:
ca:62:4e:1c:9c:d7:2d:e9:2e:85:70:b1:96:74:8d:
40:c1:c4:c0:93:ed:ac:f6:8e:dc:bb:37:2d:8c:52:
3c:8f:3a:14:ab:35:70:c6:1d:19:b6:49:36:48:54:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:14:5D:11:31:94:EF:1E:C0:EC:A3:B2:CF:55:A3:68:A0:6F:E0:D6
X509v3 Authority Key Identifier:
keyid:0C:BE:C3:86:CE:9C:C0:4E:7F:B7:F9:75:49:CC:E3:D6:C0:5E:8E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL7Dhs6cwE5_t_l1Sczj1sBejkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e89f5-3f07-4ce1-8c4f-9701e00e3f03/1/fRRdETGU7x7A7KOyz1WjaKBv4NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e89f5-3f07-4ce1-8c4f-9701e00e3f03/1/DL7Dhs6cwE5_t_l1Sczj1sBejkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.181.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ae:2e:69:bd:9d:fb:99:ab:d1:08:f9:ab:5b:6a:c3:56:3e:
eb:90:f6:75:69:26:68:49:25:96:a7:4b:8e:26:ff:01:f5:ad:
28:ae:ab:85:f8:68:6e:26:f8:58:98:ed:1a:14:c2:93:5b:f2:
5c:b7:58:1c:65:16:34:8b:ef:c8:62:c7:19:e7:fb:5e:ac:98:
dc:56:82:dd:da:50:0d:24:74:5c:a2:37:54:74:e6:64:a8:24:
8d:68:b4:11:0e:51:a7:b8:97:3a:0a:f4:9d:df:25:4f:9e:a4:
18:ee:fb:26:85:b1:17:7a:b7:f4:58:00:01:ca:b9:76:37:3b:
11:a0:31:54:4b:f4:e9:6f:8b:cb:ce:17:ff:6f:10:83:fe:90:
ed:14:75:7a:19:7a:c1:09:39:62:1a:9b:56:81:59:10:22:17:
40:fe:20:38:38:e6:25:12:a4:be:b9:0d:95:6c:88:5f:a9:22:
7c:c2:a6:9e:d7:2c:30:4f:40:05:18:e4:2a:4b:99:d6:4f:f6:
6a:70:43:a8:75:14:90:bc:e9:61:d6:21:c6:56:1c:44:1c:04:
89:a6:25:f0:ed:c7:42:1f:38:62:c5:4e:58:f0:78:ea:e7:a4:
e6:1a:32:e5:2c:30:ab:fc:fd:34:36:7b:f8:cb:df:0d:52:e9:
4e:87:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 07:22:15 2023 by rpki-client on console-ams.rpki-client.org