Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/2rqUKqcIHvGw9_SDd9jiaWBmzG8.roa
File: 2rqUKqcIHvGw9_SDd9jiaWBmzG8.roa (raw, json)
Hash identifier: uZJfPd8/UVuFqKRBS+Ouo4aSWFvQdSb6uM+nbHx/s6k=
Subject key identifier: DA:BA:94:2A:A7:08:1E:F1:B0:F7:F4:83:77:D8:E2:69:60:66:CC:6F
Certificate issuer: /CN=7ad06361405e6b1817c72c1d6ac81b5bce3ff16b
Certificate serial: 01856F6FF01A0E43EC362342F6C1E2196DAC
Authority key identifier: 7A:D0:63:61:40:5E:6B:18:17:C7:2C:1D:6A:C8:1B:5B:CE:3F:F1:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etBjYUBeaxgXxywdasgbW84_8Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/2rqUKqcIHvGw9_SDd9jiaWBmzG8.roa
Signing time: Sun 01 Jan 2023 22:24:45 +0000
ROA not before: Sun 01 Jan 2023 22:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25591
IP address blocks: 5.183.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f0:1a:0e:43:ec:36:23:42:f6:c1:e2:19:6d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad06361405e6b1817c72c1d6ac81b5bce3ff16b
Validity
Not Before: Jan 1 22:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daba942aa7081ef1b0f7f48377d8e2696066cc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:36:bd:c0:bb:a5:ab:41:82:0d:91:17:6b:
f6:d4:4c:df:e2:21:e4:de:10:67:c0:2b:72:ef:6f:
8b:ed:25:5d:0b:0d:ff:92:02:f6:a7:e7:f1:15:0d:
36:49:40:b9:70:1a:05:d1:a5:9b:9e:87:6f:1e:e6:
6c:dd:78:0a:05:72:68:57:02:4c:2f:50:32:7e:c2:
ea:71:b0:5d:99:19:ce:d3:40:3d:c3:1b:f9:4c:3a:
bc:99:62:32:c6:1a:fe:0e:95:86:bc:cf:ce:a6:ec:
6a:f2:a1:46:88:e8:e4:1a:47:73:04:0e:a7:af:ff:
e3:d6:df:75:bb:79:c7:1b:f2:3f:28:83:e0:c7:90:
97:f7:5a:ea:a4:28:e3:e3:67:3e:ea:44:5c:17:e1:
46:8c:a7:e6:ff:e5:54:72:65:ca:92:62:29:9a:a6:
f7:d0:d9:28:db:8c:de:82:9c:f5:db:40:ad:30:27:
83:ab:93:10:6e:77:4b:9e:c8:20:44:6d:e2:d0:09:
76:97:a3:ad:0b:fd:22:8b:b5:89:69:c3:93:77:c0:
8c:5b:14:23:10:d6:c6:57:05:8c:57:ac:97:86:6d:
a5:45:03:60:ad:58:98:aa:de:ac:ba:36:87:7f:a5:
e2:2b:d2:42:2d:ee:fb:a8:07:b8:ea:7f:e0:12:62:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BA:94:2A:A7:08:1E:F1:B0:F7:F4:83:77:D8:E2:69:60:66:CC:6F
X509v3 Authority Key Identifier:
keyid:7A:D0:63:61:40:5E:6B:18:17:C7:2C:1D:6A:C8:1B:5B:CE:3F:F1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etBjYUBeaxgXxywdasgbW84_8Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/2rqUKqcIHvGw9_SDd9jiaWBmzG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/etBjYUBeaxgXxywdasgbW84_8Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:df:88:d9:08:55:3c:6a:fd:67:a2:6d:ee:64:1f:3f:fa:51:
ad:8b:d7:cd:3e:89:6d:7c:fd:2b:87:98:69:02:1e:44:b6:42:
72:0f:c5:51:d6:24:d9:0d:35:75:c3:26:0f:c3:54:a2:ca:e0:
45:cf:23:b3:81:e3:6e:a5:50:d9:0f:4e:03:31:0f:fe:fa:a6:
b4:27:87:02:fb:6a:04:96:a8:bd:c9:c7:d1:db:0a:9a:ad:a5:
f0:8c:65:b3:03:26:2b:3c:2d:54:78:c1:21:af:b8:21:33:ef:
4c:96:a1:ca:13:b2:3e:ef:22:f8:97:57:2f:84:1d:41:94:c9:
42:5e:a1:29:6e:56:c3:e0:c6:bb:da:ec:30:8d:ac:80:c4:f5:
65:23:02:72:45:1d:28:a2:bd:c4:70:bb:88:32:74:3b:20:34:
3e:fa:d3:b0:84:f6:3d:79:38:36:23:0e:c3:6e:ca:67:c0:3f:
f7:5c:82:f7:4a:8b:a9:0a:57:15:7d:3d:6e:fe:76:ed:75:15:
2a:d9:81:af:75:46:ab:0f:a2:55:4d:7e:df:d6:57:e4:4e:21:
c1:6a:86:83:ee:48:ac:af:63:f8:45:3a:d7:10:b7:4e:76:4e:
64:e8:62:12:85:07:dd:92:0b:9c:66:8d:78:b3:62:7b:2c:ef:
67:27:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 09:22:31 2023 by rpki-client on console-fra.rpki-client.org