Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/F8-YvuowYYpsq8KXIT7QrQmt64A.roa
File: F8-YvuowYYpsq8KXIT7QrQmt64A.roa (raw, json)
Hash identifier: S8N/RDa+sppCsUuHad92LVA0yD6fXid7sPVprJaFngM=
Subject key identifier: 17:CF:98:BE:EA:30:61:8A:6C:AB:C2:97:21:3E:D0:AD:09:AD:EB:80
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01839F2686A587F59A8671E19DBCF3E1FCF9
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/F8-YvuowYYpsq8KXIT7QrQmt64A.roa
Signing time: Mon 03 Oct 2022 18:40:45 +0000
ROA not before: Mon 03 Oct 2022 18:40:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 5.181.177.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:26:86:a5:87:f5:9a:86:71:e1:9d:bc:f3:e1:fc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 3 18:40:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17cf98beea30618a6cabc297213ed0ad09adeb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:f2:0e:40:e8:8b:e4:db:db:97:d2:15:3a:
cd:75:d5:ec:61:1a:df:a3:62:fb:24:92:57:ce:14:
5d:0d:ad:3c:6e:47:7d:b9:03:16:e3:3b:f3:4c:65:
83:94:df:83:84:5f:56:c2:cb:f3:9a:1c:05:51:59:
44:bb:95:1f:75:64:b5:5c:ae:d7:f9:c7:5f:0d:da:
dc:3f:91:4d:0e:de:10:61:76:3f:51:79:27:fb:09:
c1:e5:8c:b6:01:ad:f0:58:29:8a:2f:10:e6:9c:49:
1b:19:5b:a9:c2:d5:dd:ee:de:a7:fe:a3:d2:92:07:
d3:d2:61:be:09:03:8e:82:be:70:26:92:86:44:4c:
bd:7a:1c:d7:10:7b:cc:f3:17:f9:1e:78:6c:3d:ee:
a7:b9:bd:0f:37:64:27:8a:93:20:12:e6:23:73:0d:
65:ed:c6:62:42:41:28:11:ba:bf:ea:e7:eb:e4:e2:
1d:63:8e:c5:7b:74:00:5f:1c:7c:d4:fc:b2:2b:12:
f9:b7:91:3d:e1:52:ab:b1:3b:21:b2:ba:94:7f:f6:
54:0a:de:38:78:bc:9b:c5:fd:54:25:a2:fa:9f:99:
b1:4f:f2:34:90:8a:fb:28:c7:a1:be:73:e5:08:f4:
dd:6f:af:70:1d:10:9a:40:72:a2:3e:9e:9c:ce:e3:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:98:BE:EA:30:61:8A:6C:AB:C2:97:21:3E:D0:AD:09:AD:EB:80
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/F8-YvuowYYpsq8KXIT7QrQmt64A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.251.0/24
5.181.177.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b4:d6:56:ea:f3:d8:77:9c:98:03:bd:49:7c:0f:72:f8:98:
21:0b:0e:cb:0c:0e:d0:76:a0:5d:f2:fa:72:d4:2c:a7:9e:e4:
d8:88:ea:85:86:fc:7a:b3:0d:fb:67:80:eb:e6:0c:5a:e4:4a:
27:de:6a:9a:91:b0:77:81:ea:d9:82:9e:5b:8a:9e:a8:3a:bc:
4e:ee:1a:02:93:47:81:20:56:2e:a5:77:da:6f:bb:0f:cf:bd:
76:90:3f:32:10:58:4b:56:3f:9b:f4:e5:a7:22:0b:2f:d3:5a:
ea:68:83:9d:72:1c:ae:80:a1:a5:58:c4:77:cc:4c:3c:d5:d3:
e5:25:9d:b2:0b:1d:10:a1:16:d5:2c:ea:cf:0f:8b:f8:b1:38:
2c:6a:64:f6:7a:70:27:b3:b7:09:51:56:23:e7:98:00:02:f9:
a2:f6:0f:53:9d:27:51:f8:46:a3:c1:55:4a:d2:54:d5:2d:0e:
14:dd:05:f1:95:85:9c:e2:01:4d:60:a1:f5:ee:82:72:68:6c:
fa:1b:c1:05:8e:32:61:f7:b2:74:b5:8a:b6:f6:13:b0:b1:49:
28:63:18:98:dc:df:ea:3f:2f:d1:3c:f3:9e:31:cd:4d:d3:7a:
aa:77:e8:5e:54:eb:4e:09:af:6d:15:0d:4b:21:b0:bc:06:0d:
c5:22:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org