Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qKZZ2_RGIx7ahFJNmrE-jetkZUI.roa
File: qKZZ2_RGIx7ahFJNmrE-jetkZUI.roa (raw, json)
Hash identifier: T+c9Lp9uCSJOF5oBi57bOO+dpN8unuK4Hq9Oem8uBI4=
Subject key identifier: A8:A6:59:DB:F4:46:23:1E:DA:84:52:4D:9A:B1:3E:8D:EB:64:65:42
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01825A78E826A11FCC4D2FD97BB467F96421
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qKZZ2_RGIx7ahFJNmrE-jetkZUI.roa
Signing time: Mon 01 Aug 2022 17:34:09 +0000
ROA not before: Mon 01 Aug 2022 17:34:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400039
IP address blocks: 5.181.179.0/24 maxlen: 24
45.158.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:78:e8:26:a1:1f:cc:4d:2f:d9:7b:b4:67:f9:64:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Aug 1 17:34:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8a659dbf446231eda84524d9ab13e8deb646542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:3a:64:8e:4c:cf:98:52:ce:d8:92:16:fc:
9b:8e:32:51:a9:86:57:70:64:1b:47:b2:22:74:c3:
77:d3:39:99:c4:d4:03:20:f8:91:cf:e6:3f:7b:13:
63:81:ff:66:41:d3:2c:27:80:e8:b2:a4:74:60:5b:
f1:78:cd:6a:80:84:9a:c2:8c:84:72:bc:15:d1:ee:
13:33:53:9a:e7:05:63:e3:85:c4:93:cf:1c:9c:1d:
fb:a8:88:02:7c:b1:40:8a:2b:d0:d7:50:20:4a:69:
5e:09:8d:4b:f3:34:c3:cc:91:ec:ab:f3:de:cb:03:
09:6c:52:d7:2b:b6:d8:bb:6a:6a:a8:66:ac:76:8b:
6b:26:18:41:fe:b7:33:49:2d:55:d7:e1:b4:49:7f:
6c:71:ae:a7:6e:04:cd:ca:dc:1a:e0:3c:22:c6:ee:
a6:a0:b0:83:f9:1f:76:ca:92:fd:02:eb:8a:4f:9a:
0a:d1:ee:9f:4b:58:1b:a4:64:2d:f5:d7:9c:b7:57:
37:3c:29:26:da:21:82:94:39:27:37:e7:f5:54:0f:
15:69:8d:a6:09:e4:0e:51:2c:06:f3:cd:b3:2b:52:
01:21:bd:0f:97:67:2a:1a:ec:bf:17:05:bd:8b:69:
ef:01:c6:8b:3a:4d:ce:42:2a:62:73:c1:26:47:51:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:59:DB:F4:46:23:1E:DA:84:52:4D:9A:B1:3E:8D:EB:64:65:42
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qKZZ2_RGIx7ahFJNmrE-jetkZUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.179.0/24
45.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f0:16:05:99:56:48:2c:7f:f0:3d:e4:a3:d0:a8:6a:7f:1b:
47:c8:e7:a8:04:1f:c4:ca:ff:df:1f:55:b9:f1:6f:a3:48:a0:
96:61:ea:10:65:7b:99:68:3c:d6:f0:c6:cf:d1:4b:4e:9f:a5:
39:58:8c:45:35:99:80:f7:54:60:93:31:b1:20:56:40:c4:ca:
b1:ac:de:68:9c:1e:26:98:e1:b1:d1:e2:49:e4:9b:89:c3:c5:
15:08:d9:d6:3c:b7:18:36:12:a2:39:af:ff:60:7f:91:3b:53:
83:cb:f0:e7:42:7b:23:48:25:35:05:8d:cc:d0:75:af:f0:be:
0a:4b:dc:f8:8b:d7:6f:bb:b2:0d:82:ef:df:36:87:ef:be:5b:
83:2f:5a:54:ef:54:17:35:36:ae:fc:e1:a6:25:81:0d:cb:5b:
b4:78:c9:3a:0c:c8:9e:8f:5f:e2:8c:dc:1a:07:01:85:ef:ff:
64:dd:79:2e:b0:93:ec:fd:b5:38:a8:4a:32:eb:a0:61:86:88:
ce:9c:8d:83:92:bc:6f:30:2c:a6:3f:92:36:12:e1:64:6a:9c:
37:76:08:53:82:ba:54:98:41:55:29:35:de:7b:54:b7:cc:72:
aa:72:ff:5b:a1:e2:19:e6:9b:cb:f2:64:45:0f:bb:a7:91:c1:
d6:14:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org