Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RlWRLBHybXriBy0Lk0KhsiWQMs8.roa
File: RlWRLBHybXriBy0Lk0KhsiWQMs8.roa (raw, json)
Hash identifier: 37iQPxy4Vw/WOm+t7Bbf+wH8T4ur0uJemzC59cjU2ww=
Subject key identifier: 46:55:91:2C:11:F2:6D:7A:E2:07:2D:0B:93:42:A1:B2:25:90:32:CF
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0185A814F918E45C5D85F4183C5B1FEE3894
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RlWRLBHybXriBy0Lk0KhsiWQMs8.roa
Signing time: Thu 12 Jan 2023 22:23:44 +0000
ROA not before: Thu 12 Jan 2023 22:23:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.181.178.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:14:f9:18:e4:5c:5d:85:f4:18:3c:5b:1f:ee:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 12 22:23:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4655912c11f26d7ae2072d0b9342a1b2259032cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:1f:04:e3:37:99:ea:48:85:b3:36:ac:05:
8d:35:f4:eb:8e:24:fe:a7:5f:2f:58:1a:15:b5:44:
92:70:40:ab:c5:d2:a2:de:12:03:ac:00:c3:80:52:
5a:ee:a8:fc:9e:a5:b6:a4:95:a3:36:57:d0:a8:c3:
fe:81:c3:c8:9e:1d:79:c9:c1:00:3b:25:2b:85:86:
ce:ca:64:e2:ee:50:42:f2:59:35:71:70:af:34:55:
a9:6c:89:08:bc:22:d5:8d:10:27:75:21:67:45:3f:
83:54:0a:89:67:b4:12:96:53:7b:82:d3:61:17:59:
60:59:4d:03:33:b7:94:cc:c6:a5:f4:33:03:71:f2:
04:a6:06:1b:1c:0e:a3:20:c8:99:76:9e:0e:25:cc:
b4:ba:16:f3:cd:e6:35:f9:0a:42:f4:64:c5:86:91:
e2:b8:3f:18:ad:91:f3:2e:d5:26:42:7c:b9:c1:d2:
93:9b:22:42:3c:da:a1:2d:ed:4b:1b:67:d3:73:9e:
06:31:0d:62:1c:e6:33:41:e5:34:ac:58:d1:cb:dc:
7e:12:84:73:79:f4:17:e5:00:1d:a2:72:1d:91:09:
65:a2:98:05:61:0a:90:cb:c7:1e:df:88:f0:dc:16:
cf:28:0b:17:35:cf:48:82:d9:f5:fb:a9:24:5f:88:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:91:2C:11:F2:6D:7A:E2:07:2D:0B:93:42:A1:B2:25:90:32:CF
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RlWRLBHybXriBy0Lk0KhsiWQMs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
37:77:68:80:55:10:1a:58:04:fe:db:87:16:32:f8:c8:75:44:
fe:9f:e6:90:1c:48:65:80:2e:64:32:b5:a9:7e:44:86:9c:1d:
c4:68:f5:31:4b:e2:b4:08:05:94:49:aa:1b:6e:db:47:2a:31:
35:18:f6:6c:60:05:a9:ea:01:91:f5:8e:8c:ca:1a:34:63:83:
df:76:e2:6f:c6:c9:d3:46:f0:06:91:4a:a9:36:58:8f:ba:93:
6f:93:fc:8e:cb:10:2a:bc:86:d1:4a:01:8e:54:c5:01:8d:cf:
59:c2:dc:64:74:48:1a:1c:55:4d:15:d7:60:e7:b2:99:2a:da:
27:d7:b7:5f:1b:0b:a3:b0:00:2b:ee:69:e9:53:ec:48:89:88:
87:52:81:ff:9b:b2:cd:f5:f8:c2:68:7e:e8:04:e4:21:b8:9f:
28:25:13:15:ec:9c:a7:56:0e:01:de:8b:74:aa:97:a4:79:82:
d0:38:49:71:ec:41:08:c9:68:d3:04:3a:b3:a9:fa:00:56:62:
7b:7f:dd:58:de:24:7c:a2:d6:32:b6:27:25:dc:41:42:f2:ce:
d9:a3:b0:1c:6a:0b:1e:dd:e6:f1:4d:bf:7d:0f:63:00:80:d2:
1a:08:81:06:f8:72:e2:cf:59:25:bc:3f:d5:59:ff:fb:9a:4b:
4f:0e:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org