Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Hg7JjZvQhxrcmKoPuJBCX5IaJWg.roa
File: Hg7JjZvQhxrcmKoPuJBCX5IaJWg.roa (raw, json)
Hash identifier: Ce/8jYURU0D9vnURN3AlqXNzGbf3n0ZPbkDmtCcknbc=
Subject key identifier: 1E:0E:C9:8D:9B:D0:87:1A:DC:98:AA:0F:B8:90:42:5F:92:1A:25:68
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0185AC545E8F9C8695257C18BC2153332BEE
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Hg7JjZvQhxrcmKoPuJBCX5IaJWg.roa
Signing time: Fri 13 Jan 2023 18:11:28 +0000
ROA not before: Fri 13 Jan 2023 18:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207429
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ac:54:5e:8f:9c:86:95:25:7c:18:bc:21:53:33:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 13 18:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e0ec98d9bd0871adc98aa0fb890425f921a2568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:75:b2:6d:94:fa:e4:37:17:7d:0c:88:e0:a8:
9d:7b:de:1c:a5:a7:81:16:c7:15:a4:2b:9d:99:72:
05:35:61:a1:dc:50:55:80:d3:c0:1e:d4:11:20:0b:
0b:ba:0f:09:77:39:97:6b:04:f8:e5:2a:30:62:b7:
bc:ff:fc:30:88:79:10:f1:a2:3d:b9:cf:90:9b:fa:
e4:93:4c:08:6d:6d:77:93:2a:b1:28:16:c9:fa:a1:
2b:7f:7b:30:53:9e:46:34:6c:6f:e1:d8:77:3d:56:
66:17:17:5b:00:52:8f:21:c0:7c:66:83:3c:a1:a5:
e5:fa:64:d9:0e:20:9d:1f:47:5f:95:3b:4a:ea:1d:
40:4c:32:c8:72:cb:75:25:ca:35:df:ab:23:ed:3b:
90:30:eb:16:54:bc:18:8a:4d:61:bf:e6:57:55:22:
ff:96:ce:e2:62:6f:16:85:20:3b:3e:59:ed:f0:80:
da:cf:4b:87:89:32:de:2d:55:09:83:80:f8:41:83:
1f:69:9c:00:21:3f:a0:33:d7:01:9e:c7:aa:e3:a0:
94:1a:c5:9b:7b:3e:8e:ff:aa:a5:4e:c7:2d:91:4b:
cd:bd:d9:12:e3:d4:0a:db:0f:a2:5d:47:8b:74:f6:
24:a2:d9:a8:0d:19:71:04:be:d7:1b:dc:66:cc:50:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0E:C9:8D:9B:D0:87:1A:DC:98:AA:0F:B8:90:42:5F:92:1A:25:68
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Hg7JjZvQhxrcmKoPuJBCX5IaJWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d2:85:4d:b4:56:02:f8:80:44:5c:90:83:b7:82:9f:e8:89:
07:94:16:8a:1f:af:39:c4:01:48:24:91:99:9b:99:11:a3:e1:
3e:20:69:0c:2f:41:68:62:e3:2e:da:03:a8:1c:ba:55:e3:20:
e6:99:c6:49:3e:15:89:0a:c1:35:ab:f7:14:e8:db:04:52:c6:
97:64:f9:89:8c:13:e5:46:2d:63:a3:0c:bf:dd:51:1c:0b:7b:
8f:4f:3f:b4:da:88:6f:52:dc:29:b8:dc:b9:77:56:44:b5:93:
67:55:62:ef:8a:9a:8a:cc:e0:fc:0f:8f:cd:8d:66:09:b4:6f:
74:4b:94:43:6c:ca:e6:37:68:bc:29:81:6d:79:65:ec:a1:45:
75:7e:06:51:a9:40:da:11:47:3f:41:11:11:e6:41:c5:46:69:
1f:0a:2f:fb:cd:ee:65:24:6f:27:a6:73:61:ce:a1:e1:f0:e7:
e3:ef:45:95:aa:7f:ad:58:23:41:31:72:6e:08:6d:d9:a2:30:
fd:10:b4:7e:6a:3e:03:5a:83:05:29:76:2f:5d:75:87:41:18:
fe:cc:45:df:33:52:05:4a:e2:04:a0:96:b3:d4:fa:b7:09:a0:
94:6b:a7:e3:1a:a5:16:2a:d1:24:67:4d:cc:2b:3e:8b:62:7a:
c6:cb:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org