Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7DJMhgbO2K9FTtpb3PYce4vFM8Y.roa
File: 7DJMhgbO2K9FTtpb3PYce4vFM8Y.roa (raw, json)
Hash identifier: 9IHnbi2dh1ef+14xfTy51oQapTp4OoNV0XiBHfUQQB4=
Subject key identifier: EC:32:4C:86:06:CE:D8:AF:45:4E:DA:5B:DC:F6:1C:7B:8B:C5:33:C6
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186BD03FE5F4C81F79C0A92A8905F445971
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7DJMhgbO2K9FTtpb3PYce4vFM8Y.roa
Signing time: Tue 07 Mar 2023 17:00:00 +0000
ROA not before: Tue 07 Mar 2023 17:00:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.181.178.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:03:fe:5f:4c:81:f7:9c:0a:92:a8:90:5f:44:59:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 7 17:00:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec324c8606ced8af454eda5bdcf61c7b8bc533c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:89:04:be:af:f8:c9:62:b0:4a:8e:a2:c6:
cb:36:2a:8e:e6:20:87:4a:dc:0b:15:27:c7:10:4d:
7f:2f:67:a9:db:b9:f9:e3:5c:47:34:13:bc:55:d2:
2c:27:1c:b6:19:20:82:fd:af:55:c3:bd:86:22:8d:
ba:ec:32:7d:29:2d:30:13:81:79:65:10:6b:db:ab:
67:ec:ba:79:95:c4:d2:26:78:47:6d:df:48:70:5b:
43:7c:14:9e:2c:4f:f5:07:24:46:45:18:fd:7b:74:
74:2b:38:80:98:45:40:3d:b9:e3:30:9f:ab:ab:33:
82:cf:6a:64:2d:57:c1:01:e7:bb:d0:40:29:56:f7:
de:54:0b:5c:70:40:b3:f0:bb:05:cd:7b:b7:0f:8d:
c6:07:cb:41:bd:05:76:46:cf:7a:89:45:39:2e:cb:
b9:17:84:70:d1:cd:78:01:6f:c8:dd:18:db:65:35:
e6:c9:8f:f7:73:f8:e8:f2:d0:6d:66:ba:b2:51:ec:
85:30:c1:f2:94:2b:84:1d:20:42:cb:62:4b:d1:3c:
db:79:fb:e6:00:95:7f:cc:ab:93:c8:d7:cb:7b:08:
43:0d:01:4a:cc:3d:8d:06:6c:d4:a5:a5:24:e3:83:
ab:ae:3b:5a:c6:37:b8:a5:41:56:28:5a:60:1c:47:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:4C:86:06:CE:D8:AF:45:4E:DA:5B:DC:F6:1C:7B:8B:C5:33:C6
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7DJMhgbO2K9FTtpb3PYce4vFM8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0d:c9:04:95:df:b1:4d:99:20:e4:0e:4f:d6:0c:d2:94:f6:
c3:bc:7b:b8:e1:08:db:13:1f:d8:8d:03:09:e2:80:27:ce:3b:
af:f4:63:6a:70:a4:1a:bf:8d:07:c6:e4:60:29:ff:06:7e:b2:
2c:28:63:99:b5:a5:ca:22:90:fb:3e:29:bc:9a:f1:b2:aa:24:
59:f4:52:9a:61:08:5c:7d:ce:d3:d5:ea:71:4b:e0:74:88:7f:
01:0d:7a:2b:ed:52:3e:98:49:09:4c:79:e2:03:9d:b6:e6:d0:
e0:47:51:2e:79:e0:c5:28:a6:d2:8d:95:91:0f:e8:24:7a:71:
33:2e:34:0f:01:31:7d:a8:2c:36:8f:0a:a0:fb:ee:b4:ef:38:
e5:83:17:40:f0:41:ca:78:dc:af:f5:b8:e4:d9:38:62:d1:c9:
86:ae:ae:b5:76:96:bf:d5:22:ef:04:8f:63:b7:3f:24:fd:9d:
9c:75:54:c2:2c:96:ff:c8:80:75:e4:d8:bf:92:60:58:aa:71:
c0:29:c8:3f:cb:bc:a9:bd:39:b6:36:cb:5b:d1:40:34:a7:68:
37:7f:7f:22:26:f1:9e:5f:7b:c3:06:3a:39:66:f0:84:71:37:
fa:2e:3f:34:c3:27:bc:42:26:df:bf:79:2f:46:bf:5f:1d:c5:
12:95:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org