Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1l5Hh1O6Cu3z6B9HoAYHptXWPQ4.roa
File: 1l5Hh1O6Cu3z6B9HoAYHptXWPQ4.roa (raw, json)
Hash identifier: scd9O1GJpSfByo6sJgDcYOCZoEGxkFQxcNv8hzq6Vzo=
Subject key identifier: D6:5E:47:87:53:BA:0A:ED:F3:E8:1F:47:A0:06:07:A6:D5:D6:3D:0E
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0183A9C303AB4D6CC59CF849FE044C36B9AD
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1l5Hh1O6Cu3z6B9HoAYHptXWPQ4.roa
Signing time: Wed 05 Oct 2022 20:07:53 +0000
ROA not before: Wed 05 Oct 2022 20:07:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 2.56.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a9:c3:03:ab:4d:6c:c5:9c:f8:49:fe:04:4c:36:b9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 5 20:07:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d65e478753ba0aedf3e81f47a00607a6d5d63d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:c7:f6:8f:89:16:28:3b:72:5d:67:fe:56:
52:aa:51:ce:c7:3a:e7:14:11:87:a5:5b:56:26:95:
f7:27:42:10:ba:a0:5f:4d:fb:86:1d:c5:74:ea:96:
f0:03:78:52:86:b8:d0:fd:91:db:31:9f:b3:42:8f:
0c:b2:c7:e2:12:e6:39:61:b6:a5:a1:19:23:38:59:
64:55:66:4c:5d:a4:d1:e8:db:59:99:4e:91:64:d9:
bf:bb:c6:5d:f0:13:04:90:61:f3:32:b3:8f:84:29:
ca:5f:e5:3c:05:b2:77:bb:f3:b5:6d:5a:0d:39:f6:
f2:10:20:74:73:b8:a8:20:b7:e4:34:c4:98:70:0d:
f1:b7:de:0c:76:5e:98:12:2c:f2:ae:b5:1f:58:e8:
3b:a6:c3:53:a2:e3:db:ba:c2:0c:8c:f4:f1:85:40:
23:0d:dd:1a:42:b6:cb:5f:12:ab:b7:44:34:10:e9:
15:c4:6c:c2:16:48:34:67:81:cd:f7:a2:3a:29:cb:
e0:ef:99:24:c5:42:28:57:29:1e:c7:2b:1d:d7:e8:
c6:57:b2:c2:78:82:b2:3e:de:b8:61:17:ac:42:a5:
e4:a1:67:2a:03:4f:ba:77:34:a8:e1:ad:dd:70:e8:
3f:19:67:17:02:7e:ff:f1:a5:85:2d:b0:ae:d4:44:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:47:87:53:BA:0A:ED:F3:E8:1F:47:A0:06:07:A6:D5:D6:3D:0E
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1l5Hh1O6Cu3z6B9HoAYHptXWPQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ad:e1:5a:02:70:43:af:86:5b:5f:8c:6e:6c:85:f1:68:f5:
f7:84:f9:92:31:23:86:74:df:83:75:b6:48:0a:3b:d7:c8:01:
a4:9b:b6:b4:15:08:19:f6:dd:c0:f0:a6:66:27:b6:1f:2d:f8:
1f:84:06:e5:54:ae:54:06:73:e9:0e:cb:b5:37:d0:72:0a:07:
1e:2f:f7:f5:8a:0a:3e:ca:2f:e5:74:8f:51:04:8e:34:04:4f:
81:63:13:d7:73:71:c4:78:e5:e9:a7:51:52:1a:a0:96:ee:2f:
a6:f0:c9:84:a7:e5:2c:6c:7a:08:77:8a:75:35:3d:59:01:66:
49:66:3f:e4:fc:aa:84:76:aa:b1:ef:8f:a6:25:ed:12:24:61:
03:80:8b:86:b4:3e:cb:33:7a:d4:71:39:61:4a:c4:1a:44:a5:
13:49:3d:d1:21:9e:f9:99:e0:4c:8e:c5:68:a9:75:36:c3:cd:
e8:9b:84:a2:f9:32:07:66:cb:2e:d4:ce:66:2b:19:0d:0c:93:
07:ef:63:2b:50:56:fd:12:0b:ea:41:35:cd:03:0b:98:c4:73:
a7:cc:4e:2e:de:23:e3:3f:af:bc:ad:23:8c:e0:8b:cf:61:36:
0a:a2:9d:d8:e4:48:d3:e4:46:51:06:35:ba:00:18:02:ca:ab:
86:1d:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org