Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Uejrgoi0hjicVB8se6PJFP59WDo.roa
File: Uejrgoi0hjicVB8se6PJFP59WDo.roa (raw, json)
Hash identifier: M+cxFUp5eZWgrH+Wr6XCwW14XxJDGETGww/8hEwyD6A=
Subject key identifier: 51:E8:EB:82:88:B4:86:38:9C:54:1F:2C:7B:A3:C9:14:FE:7D:58:3A
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186B3461893ED1F4D2C9B648CC0FE4B116E
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Uejrgoi0hjicVB8se6PJFP59WDo.roa
Signing time: Sun 05 Mar 2023 19:36:00 +0000
ROA not before: Sun 05 Mar 2023 19:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 5.181.178.0/24 maxlen: 24
45.137.98.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:46:18:93:ed:1f:4d:2c:9b:64:8c:c0:fe:4b:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 5 19:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51e8eb8288b486389c541f2c7ba3c914fe7d583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:44:13:2d:ad:21:7a:87:d6:b7:73:a7:ab:
af:05:5e:89:c4:28:d2:1a:d2:22:51:54:49:ae:7b:
c2:96:c7:59:81:b2:ad:dd:9e:5c:9a:84:57:f7:a6:
19:54:ca:37:36:f2:c8:df:86:ac:26:b5:a0:1d:e8:
eb:e1:42:b2:b8:15:3e:1f:98:ea:2d:dc:f3:f8:00:
ea:f3:6e:65:d7:71:34:69:91:16:97:b3:ad:82:56:
f2:1b:05:de:d5:67:67:d0:43:03:74:39:0e:1c:f0:
c1:81:90:7b:fb:89:47:f2:ac:c6:91:ca:c6:3f:e0:
98:47:bd:45:6e:9c:0e:9c:a9:33:1c:cf:53:44:dd:
12:04:bd:65:72:fe:40:49:ef:2a:d4:c1:40:83:cc:
cf:54:1a:b2:3c:21:fa:d2:a1:65:cd:d0:71:8a:6e:
ef:a6:e0:a0:93:a1:b5:70:89:19:bb:49:a0:cb:d3:
86:c2:76:0e:b0:aa:bb:12:4c:4d:87:36:12:60:8a:
a5:d6:dd:e9:73:23:f0:4b:c9:75:b1:86:e1:2b:30:
27:dc:df:25:d2:bc:22:19:69:7c:ff:71:e4:6b:50:
2b:c2:49:d1:7e:65:a1:8c:3b:ef:a3:24:d2:a4:bf:
c7:09:1f:96:34:e6:a2:cc:00:e7:32:55:29:fe:3c:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:EB:82:88:B4:86:38:9C:54:1F:2C:7B:A3:C9:14:FE:7D:58:3A
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Uejrgoi0hjicVB8se6PJFP59WDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
5.181.178.0/24
45.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
32:79:e5:d6:a2:24:ce:7a:0a:7c:b4:87:0f:f6:ff:31:dc:2d:
16:f1:8a:dc:70:f6:ba:24:13:ac:eb:fa:4e:bc:d3:38:01:c7:
49:c6:5d:eb:bb:8d:91:3d:71:b1:a6:60:06:50:d7:ba:a4:7e:
01:3b:57:fe:b7:41:e5:1f:5a:1d:3c:7a:b7:f5:bd:cd:b9:cf:
c7:26:57:79:6d:90:2c:ef:01:d3:6c:01:85:54:11:9c:92:fc:
28:63:c5:30:7a:f1:d6:60:de:b0:30:73:46:08:f0:17:62:3b:
54:3d:d6:ec:a0:df:6f:80:b2:8f:cf:ea:1e:49:58:46:bf:6c:
d4:d8:0b:23:e7:8d:13:b6:c2:ca:8c:35:07:ba:14:1a:a3:34:
86:16:18:ab:15:b9:2c:56:27:be:b8:5d:c7:19:e3:ea:de:18:
88:3b:8e:7f:68:1e:53:3a:11:cf:25:bd:0d:2d:28:21:f8:7a:
e9:ac:8e:56:fa:c1:4c:b8:d4:96:51:49:4a:a0:c2:a4:08:79:
6d:eb:ab:26:ff:01:51:73:bd:b6:00:3d:2c:41:11:3c:82:60:
c1:ca:e9:eb:6c:a8:4d:5d:fb:de:d7:5d:19:93:05:26:f5:89:
95:4f:97:e4:67:40:00:89:19:cd:43:33:83:07:2e:40:c7:f8:
d1:ba:44:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org