Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SJZGqs5vdOS7ZwCLzEsyd6OzlBY.roa
File: SJZGqs5vdOS7ZwCLzEsyd6OzlBY.roa (raw, json)
Hash identifier: BYbI6dhTBgVgjjruju6IQk+bg0kTVaSiP+PYyh6YhsY=
Subject key identifier: 48:96:46:AA:CE:6F:74:E4:BB:67:00:8B:CC:4B:32:77:A3:B3:94:16
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C4F83D93480CD81F13436913D9F9B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SJZGqs5vdOS7ZwCLzEsyd6OzlBY.roa
Signing time: Sun 01 Jan 2023 22:55:44 +0000
ROA not before: Sun 01 Jan 2023 22:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:4f:83:d9:34:80:cd:81:f1:34:36:91:3d:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=489646aace6f74e4bb67008bcc4b3277a3b39416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:a6:35:0a:44:6e:9d:0f:ec:bb:4e:7f:56:
55:87:30:5f:b5:a6:fa:d5:4a:fd:7f:a0:da:50:d8:
04:35:b2:68:9e:20:51:c0:b1:c9:1c:25:2d:f8:75:
cd:55:c1:a9:29:15:aa:1d:c1:cb:70:c5:09:d0:98:
1f:e2:47:78:17:ab:9f:d2:a3:f5:c2:0b:51:64:ba:
54:1c:c2:49:e2:bd:7a:d8:8b:9a:18:4f:c4:1c:c9:
5c:df:aa:88:e0:0a:65:2c:eb:66:95:e3:cc:8d:99:
cb:a5:83:4c:b7:a7:f0:5c:d0:f6:44:2d:29:67:05:
0b:40:ec:6d:34:29:d9:74:e2:34:ba:df:89:6c:49:
81:be:01:9b:44:53:67:30:5e:42:12:79:f8:e1:02:
67:c7:65:fc:b4:38:dc:35:60:82:8a:e1:a2:b9:ea:
c1:6a:bc:86:69:72:6d:fe:76:d4:f9:31:69:40:f2:
68:a3:66:cf:5a:38:e3:47:a4:64:a2:5c:5a:c3:87:
2a:de:97:8e:5d:e6:aa:12:f0:87:22:f2:16:ef:22:
ba:f4:e9:9d:dc:1a:b2:79:29:09:06:c2:f0:45:27:
5e:d3:7f:3b:32:dc:f3:aa:4a:23:d7:d6:17:0d:cd:
1d:0f:51:46:46:fb:c1:3d:9b:37:ab:98:3c:85:fc:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:46:AA:CE:6F:74:E4:BB:67:00:8B:CC:4B:32:77:A3:B3:94:16
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SJZGqs5vdOS7ZwCLzEsyd6OzlBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f8:4d:3a:3e:e9:a3:30:6f:31:fb:ac:8a:ed:39:11:64:45:
94:c1:15:39:dd:f3:09:ff:28:d3:e3:35:35:12:60:81:4f:59:
1f:84:2d:1e:2e:1c:27:cc:88:cd:de:1a:65:5c:79:3e:34:4c:
62:82:95:15:2d:29:5b:a3:75:60:27:1f:b3:49:05:80:74:2b:
6b:18:d6:63:3c:5b:11:00:3d:2e:fd:64:ef:1b:25:f0:9a:f0:
bc:ea:e3:f3:0d:dd:2b:4c:ce:91:93:0f:0b:46:fd:80:c6:a4:
b9:57:64:93:61:34:50:a6:39:24:d6:99:5a:27:39:44:ee:30:
83:24:d8:cb:99:93:e4:8d:d9:62:4e:d9:da:82:c3:0e:e4:19:
8f:1b:59:b6:22:d1:03:b5:d8:5e:ea:15:1c:4a:99:37:ca:db:
bd:2d:4f:a1:20:27:65:38:df:af:df:8b:09:f1:26:06:9d:cb:
d3:73:69:91:7f:40:dd:0c:df:62:54:88:2d:c1:d4:cd:d0:a9:
17:80:5e:a7:a2:17:45:a7:ad:a9:58:77:2f:13:ff:78:0e:0d:
f9:2f:c9:0d:68:b4:4a:d3:2f:33:c4:25:c9:39:63:18:c9:47:
f1:83:d1:cf:71:2c:73:be:b3:72:f4:bf:24:f3:d8:83:49:e7:
e9:f0:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org