Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/T4rpB-0nO3fgPX1Vpl_e8pojDRg.roa
File: T4rpB-0nO3fgPX1Vpl_e8pojDRg.roa (raw, json)
Hash identifier: B+L/yI/+GdIX2vEYfWLRxgjKrUeUKuANeks3FBAVHvI=
Subject key identifier: 4F:8A:E9:07:ED:27:3B:77:E0:3D:7D:55:A6:5F:DE:F2:9A:23:0D:18
Certificate issuer: /CN=bd8ab5805d77b8614efad2f9acb83e304d4cdfac
Certificate serial: 0187BDFEBFC5811E6E1FABC997E437022EB3
Authority key identifier: BD:8A:B5:80:5D:77:B8:61:4E:FA:D2:F9:AC:B8:3E:30:4D:4C:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYq1gF13uGFO-tL5rLg-ME1M36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/T4rpB-0nO3fgPX1Vpl_e8pojDRg.roa
Signing time: Wed 26 Apr 2023 14:36:41 +0000
ROA not before: Wed 26 Apr 2023 14:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205124
IP address blocks: 5.180.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:fe:bf:c5:81:1e:6e:1f:ab:c9:97:e4:37:02:2e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8ab5805d77b8614efad2f9acb83e304d4cdfac
Validity
Not Before: Apr 26 14:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f8ae907ed273b77e03d7d55a65fdef29a230d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:c8:31:9b:46:22:45:02:63:fc:42:fa:6c:
a9:b8:fa:f4:02:89:cc:55:aa:d8:98:20:5a:ad:3e:
7b:35:bc:85:59:93:8e:73:e6:90:c1:ca:99:6b:ac:
de:b7:23:a7:d1:f7:ca:6b:6a:54:68:aa:0b:a7:6d:
d4:e5:70:98:8f:c4:52:ad:11:cf:21:78:a4:9f:6b:
19:03:d2:cc:b8:4e:4c:59:ca:b3:91:3d:c4:0f:e3:
bc:05:76:a6:db:a9:5d:70:65:33:f8:5d:c0:95:ba:
17:81:31:dd:a8:ef:8b:b7:32:e7:92:c6:de:9b:ab:
4c:63:18:45:0c:20:1d:5f:2f:a8:ca:36:20:b3:e0:
1a:5e:cc:1a:43:94:ef:fe:ae:56:3e:22:88:08:e9:
9d:b1:1a:c9:b5:5a:87:9b:ef:eb:ea:10:0f:dd:74:
cb:2d:52:d2:93:86:ee:8a:4b:b0:e2:88:41:cd:d9:
c1:67:10:86:11:b9:b6:2a:ff:b7:e1:10:bf:cd:7d:
71:14:f9:b8:b7:9b:c1:04:23:bf:5a:10:45:f9:c2:
08:df:39:87:8f:ee:6c:59:a4:5b:8f:49:53:e1:28:
64:58:96:4b:c6:6c:4b:74:e9:01:ae:2b:a0:9e:f4:
e4:eb:2d:dc:66:92:3d:86:c9:b8:3b:44:ef:81:e0:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8A:E9:07:ED:27:3B:77:E0:3D:7D:55:A6:5F:DE:F2:9A:23:0D:18
X509v3 Authority Key Identifier:
keyid:BD:8A:B5:80:5D:77:B8:61:4E:FA:D2:F9:AC:B8:3E:30:4D:4C:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYq1gF13uGFO-tL5rLg-ME1M36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/T4rpB-0nO3fgPX1Vpl_e8pojDRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f96da8-2c49-4279-8663-01c6708a8709/1/vYq1gF13uGFO-tL5rLg-ME1M36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.112.0/22
Signature Algorithm: sha256WithRSAEncryption
22:b5:69:57:23:bc:63:be:fa:46:c3:d3:21:46:7b:bb:d1:7a:
1b:9d:cd:3b:5b:79:eb:e2:2c:54:69:29:68:28:ec:70:29:4d:
3a:23:9e:f9:ce:b5:98:06:84:4d:64:42:a7:f8:73:6c:c2:7a:
ef:06:49:7e:e6:bd:62:44:51:36:e2:12:8a:f9:d3:6f:49:a1:
f2:fd:fd:2f:bc:87:6a:c9:46:e0:75:fd:b9:06:a5:73:07:8e:
e6:4c:20:5f:20:96:4e:a5:ce:98:69:de:cb:5e:4f:38:68:4d:
42:92:c3:57:16:04:04:9a:27:f7:01:22:d2:c0:18:d4:02:fb:
3a:e3:d1:39:a7:5f:83:cc:0a:7e:4f:3f:76:b1:c4:04:e9:1c:
cc:e7:c4:f3:c3:1c:73:fa:91:8c:bd:d4:e2:62:30:90:9c:ce:
85:d8:83:a6:68:7a:99:ed:e3:0a:a5:2f:e8:5a:e4:34:a7:d0:
f4:05:fe:a3:d5:0c:bc:5a:48:d9:e3:a7:82:2b:30:81:09:43:
94:84:9e:0c:c9:b2:b2:e1:fe:a0:79:68:55:b9:84:a5:24:8a:
a9:a8:ce:c6:94:1c:6d:3d:ca:f8:e6:55:b5:42:4c:ae:a3:56:
9c:28:0a:bc:14:b0:99:ee:51:61:c3:b2:59:07:26:f0:b4:37:
2e:5d:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:50 2024 by rpki-client on console-ams.rpki-client.org