Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/TSJ10Uur-pTy-5fm3r1QCQey9oc.roa
File: TSJ10Uur-pTy-5fm3r1QCQey9oc.roa (raw, json)
Hash identifier: /ppKoGNhpr/zjZTtCUTtOzXgxXmEsoRF7lGfeBm00sM=
Subject key identifier: 4D:22:75:D1:4B:AB:FA:94:F2:FB:97:E6:DE:BD:50:09:07:B2:F6:87
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0183F3830031A271C71B04C56996E9FE3D3B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/TSJ10Uur-pTy-5fm3r1QCQey9oc.roa
Signing time: Thu 20 Oct 2022 03:49:52 +0000
ROA not before: Thu 20 Oct 2022 03:49:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 5.181.177.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f3:83:00:31:a2:71:c7:1b:04:c5:69:96:e9:fe:3d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 20 03:49:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d2275d14babfa94f2fb97e6debd500907b2f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:89:00:44:19:0f:05:be:f5:27:c7:f1:ad:
8e:af:24:de:62:98:06:ae:44:02:b1:77:1f:09:40:
dc:66:9e:06:46:53:b2:4b:85:6c:7e:05:70:84:13:
50:3d:00:b2:3a:d7:42:1f:7d:5d:53:08:b1:53:9a:
c5:cf:f9:c6:a0:23:c9:dc:d7:28:38:ef:78:d9:28:
17:f0:d5:67:63:a3:05:9f:72:b1:74:00:44:e7:7b:
33:71:eb:1a:3e:08:3a:b0:3f:b9:cd:0d:c5:0b:7f:
0b:83:2a:24:6a:39:f5:10:23:03:41:f9:71:1f:ec:
31:fa:20:08:19:f3:e4:b6:9f:23:df:6f:5b:40:19:
6c:d9:53:a8:18:34:12:70:fd:6a:bd:ed:0f:b5:65:
38:65:38:d4:74:24:a4:c7:10:29:87:04:05:a2:22:
10:95:ae:39:62:d0:9f:83:7e:ff:91:37:db:ad:c7:
6b:bf:05:2c:88:4e:59:d9:9d:72:c5:24:3a:af:bf:
e4:4c:78:29:9d:c8:c8:2e:bd:ec:a6:f7:e5:39:bb:
6c:52:3e:d0:be:f6:10:bb:66:a3:14:ea:0d:4f:72:
49:77:62:e6:87:ff:db:54:01:67:f7:8b:20:51:80:
8b:5d:f3:28:c9:4a:34:fd:9b:b0:9d:ff:ce:95:c3:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:75:D1:4B:AB:FA:94:F2:FB:97:E6:DE:BD:50:09:07:B2:F6:87
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/TSJ10Uur-pTy-5fm3r1QCQey9oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.177.0/24
45.137.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7e:a6:e1:fe:c3:ac:e5:58:3a:f7:54:82:ef:d9:be:8e:a1:
85:f4:e7:e9:5d:5f:0c:2d:d8:78:1f:16:9e:45:41:ba:1b:0e:
96:59:07:c4:2e:fa:18:3b:ea:8d:ac:58:17:5d:e0:2c:53:d4:
97:6a:63:12:93:fa:24:db:5c:52:cf:55:4c:e0:eb:40:01:4d:
d4:58:4b:56:d7:e0:27:b8:69:7b:e2:a0:b5:be:d0:86:6b:58:
2e:92:29:2b:04:17:88:a6:c9:bd:1b:38:b2:f4:6f:ef:b6:2c:
44:5b:14:39:00:8b:a4:12:1b:de:d1:6d:e8:8e:c2:95:ff:6a:
8d:bd:b9:eb:cd:73:16:33:7f:00:9f:07:56:22:96:cc:04:c3:
7a:9a:14:51:b3:05:ea:c6:26:41:50:11:b4:aa:07:52:0b:49:
4d:57:0e:0a:d1:fb:7c:de:0b:8c:65:bf:71:59:a7:6c:61:5b:
01:60:4f:2c:3f:45:f2:ca:41:04:f1:60:7a:96:24:cf:ec:28:
0e:ec:7d:00:f7:0b:e2:d0:c2:c5:a5:61:b2:4f:68:82:cc:5f:
db:99:58:ca:da:fc:75:23:74:06:21:1b:c6:c0:1a:f5:eb:c1:
a3:7f:92:dc:60:c9:06:9d:42:ea:a5:77:6e:52:9a:05:0d:5d:
b5:49:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org