Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/l7aBbJkfIa-pTrvflL6O6XSTnCM.roa
File: l7aBbJkfIa-pTrvflL6O6XSTnCM.roa (raw, json)
Hash identifier: 3v3CE5Y7QdSmJ/DCiX6/0W2pRLDHbvbymfyWQ/yyHuo=
Subject key identifier: 97:B6:81:6C:99:1F:21:AF:A9:4E:BB:DF:94:BE:8E:E9:74:93:9C:23
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184D4AE14A5984DA3E811CBB6A563977DD9
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/l7aBbJkfIa-pTrvflL6O6XSTnCM.roa
Signing time: Fri 02 Dec 2022 21:11:28 +0000
ROA not before: Fri 02 Dec 2022 21:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 5.181.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:ae:14:a5:98:4d:a3:e8:11:cb:b6:a5:63:97:7d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 2 21:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97b6816c991f21afa94ebbdf94be8ee974939c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:dc:3f:a8:a2:70:cd:f9:03:e6:d1:1a:42:
04:ea:62:64:05:20:8e:93:35:74:8e:7c:59:6f:01:
e6:49:d3:6f:d2:b8:10:a4:a3:94:80:f7:a8:0d:64:
5b:5b:7a:69:31:1f:3b:2b:6c:98:fd:26:a8:08:ee:
06:21:3b:1b:ac:2f:9f:e6:00:6c:b3:2d:e8:74:3f:
a9:bb:b9:96:da:31:32:66:5b:fb:23:d9:1e:b3:64:
a6:cf:6c:85:b4:8c:aa:e9:f8:46:05:de:84:fb:df:
f3:75:f6:5c:45:7b:be:03:50:6d:28:d8:14:7d:94:
60:f1:13:a0:4f:f0:9b:15:b4:28:44:3e:d7:af:d7:
40:8d:57:be:ac:e7:6c:74:ed:41:0f:1a:d6:d4:31:
0b:b2:4d:d8:ba:e4:41:a2:85:6f:b6:88:78:66:74:
86:f7:4e:ac:41:18:f0:56:b2:66:c7:1d:25:26:97:
37:a0:a8:84:13:ac:57:68:05:bb:01:dd:0f:b0:8a:
df:87:f5:ef:4d:5a:2f:e3:0d:1f:86:45:10:ca:07:
87:74:e5:ae:b3:20:54:af:28:eb:dc:63:ca:86:43:
0f:5d:8c:2d:d2:2c:8e:14:da:1d:54:84:ef:ec:8a:
90:61:c8:30:53:93:6c:aa:fc:9e:8f:6b:77:2f:f7:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:81:6C:99:1F:21:AF:A9:4E:BB:DF:94:BE:8E:E9:74:93:9C:23
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/l7aBbJkfIa-pTrvflL6O6XSTnCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cf:53:f5:67:df:ce:8a:98:20:d8:e0:6a:07:83:7e:a2:43:
47:cb:a8:54:5a:f6:7b:bd:1b:59:34:b0:0c:cc:19:5f:d6:87:
ef:b2:af:e9:ea:9f:5c:5a:05:85:14:15:ab:a7:50:5a:c7:a6:
d3:02:ec:04:81:2a:ec:f1:a3:fc:66:4f:c5:87:5c:fc:9f:0f:
82:72:5d:b5:c5:fc:da:21:00:e4:2a:1d:ee:8f:6a:65:c3:15:
60:6f:b6:22:f0:ce:44:8b:60:24:38:15:f3:50:a8:f7:31:b0:
66:2b:92:be:23:51:39:e0:67:3f:9d:dc:3c:fa:b2:1c:af:0f:
6a:46:39:42:e6:9e:b7:a7:d3:83:4e:88:bc:7c:4f:da:7a:d1:
fa:b9:07:50:ef:da:06:ad:b7:0a:46:0f:04:79:90:07:4d:4b:
ee:f3:e3:15:20:eb:f2:41:79:ed:3c:26:49:7f:4a:47:05:a2:
ec:b8:e5:35:37:e7:5d:19:72:ec:56:ac:0d:ac:1c:b0:0e:e3:
eb:db:8d:59:24:d7:ea:f0:cf:b2:d0:c4:83:32:8a:5d:d0:84:
6e:eb:00:11:b3:d8:54:39:b1:8f:18:c4:56:4d:e8:a2:ef:0a:
be:6e:cc:a6:07:c1:e9:6c:98:59:b2:8f:53:94:43:1b:3f:f8:
0a:c1:fe:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org