Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5HBKAbUqa6r87Ya4IPV2X_tWVUE.roa
File: 5HBKAbUqa6r87Ya4IPV2X_tWVUE.roa (raw, json)
Hash identifier: btDnE72r0coKi2CLXRSNusb3rUj288eK1wYlwKBFJCs=
Subject key identifier: E4:70:4A:01:B5:2A:6B:AA:FC:ED:86:B8:20:F5:76:5F:FB:56:55:41
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03BD48BF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5HBKAbUqa6r87Ya4IPV2X_tWVUE.roa
Signing time: Tue 01 Mar 2022 20:37:48 +0000
ROA not before: Tue 01 Mar 2022 20:37:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.199.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62736575 (0x3bd48bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 1 20:37:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4704a01b52a6baafced86b820f5765ffb565541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:d6:8c:34:e7:52:83:99:5c:f3:0b:57:4e:
98:a2:99:b1:5b:82:3a:3d:32:32:bf:fd:05:46:0b:
09:f5:5a:a6:b5:b3:5a:2d:29:0d:62:4d:ab:a8:e2:
97:88:82:59:dd:d5:dd:ed:a9:8d:c1:2c:8d:f4:e7:
1c:e9:09:81:f7:f8:ef:1b:b6:66:14:21:9d:b5:0e:
6d:70:c8:d3:68:37:20:82:68:be:0b:a9:57:03:e5:
1a:5b:0d:2d:e3:28:41:c3:7f:1b:08:25:56:b1:15:
ca:63:a8:6a:1b:50:62:50:77:b7:45:6a:c0:4f:0f:
eb:ed:59:a6:d3:1e:73:bc:4a:18:a1:3e:c3:7e:62:
e1:ac:f0:73:82:5a:4a:44:5a:26:19:27:27:4c:26:
a7:f8:36:fe:4d:b1:44:79:83:cc:44:ec:14:71:93:
8d:a9:39:e4:73:07:91:bf:11:a2:dc:54:4c:68:b9:
cf:85:0a:0b:f1:64:3a:70:d9:dc:53:0b:9b:b0:09:
d3:de:10:9d:f6:76:a6:74:51:a4:4c:a6:4d:19:fa:
66:ab:8f:cf:05:a8:8c:0f:9c:0c:67:32:31:b5:cd:
1c:09:d2:37:6c:d1:ba:99:b8:da:57:38:db:60:82:
6e:75:e6:a4:08:ed:20:88:d3:34:9b:38:f1:f4:54:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:70:4A:01:B5:2A:6B:AA:FC:ED:86:B8:20:F5:76:5F:FB:56:55:41
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5HBKAbUqa6r87Ya4IPV2X_tWVUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f7:d5:c6:b9:fb:20:77:b7:38:87:c7:df:45:a3:6f:6a:8e:
4b:94:fa:7d:6f:05:fc:26:0d:36:39:a6:30:8f:3e:aa:c3:f7:
4e:65:6b:c5:4f:04:6e:03:4e:63:94:13:2e:93:29:e7:cd:95:
a2:eb:37:45:52:af:25:de:07:e9:60:a7:ef:a0:08:90:e9:6e:
6b:64:41:f5:e4:dc:da:0c:4f:1f:40:ef:c4:62:4a:1d:21:5c:
4a:7a:88:3c:1c:50:09:18:cf:d8:e1:2a:a8:57:91:1d:0d:ab:
e2:57:64:51:4d:d9:e4:c7:24:a4:a5:94:be:24:9f:ac:4b:44:
82:b0:9e:b1:e8:a6:f1:ad:ae:22:25:58:96:ce:94:b6:9f:1a:
92:be:99:a9:96:51:4d:e9:2f:a2:47:78:ec:c3:85:a9:2a:44:
9b:5a:e1:92:8e:ef:42:7b:cc:8f:7d:aa:05:3a:79:c2:1c:aa:
28:7f:b1:3e:c7:bd:c5:13:5d:d2:03:7e:28:5c:11:7a:2d:f5:
fe:f2:29:81:90:51:e2:eb:37:4d:14:7d:68:8f:14:c4:c6:16:
5b:93:41:56:52:85:21:25:d6:3f:d8:f5:b9:c2:8c:83:46:17:
9d:d5:ed:42:7a:2f:55:a0:ee:ab:51:65:45:45:f1:3a:b9:f7:
a3:77:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org