Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tYbz34N5GHhG349NzcFXjcG69HE.roa
File: tYbz34N5GHhG349NzcFXjcG69HE.roa (raw, json)
Hash identifier: OqTXjexN5FpkUOlnMidQOdxatzGvwpTbvR7ZC/qqEdg=
Subject key identifier: B5:86:F3:DF:83:79:18:78:46:DF:8F:4D:CD:C1:57:8D:C1:BA:F4:71
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0183CEC677D92B201EFC9D38D7838D369D8E
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tYbz34N5GHhG349NzcFXjcG69HE.roa
Signing time: Thu 13 Oct 2022 00:37:36 +0000
ROA not before: Thu 13 Oct 2022 00:37:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.176.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ce:c6:77:d9:2b:20:1e:fc:9d:38:d7:83:8d:36:9d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 13 00:37:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b586f3df8379187846df8f4dcdc1578dc1baf471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:91:4c:10:06:04:f0:1a:e9:40:80:e5:5f:
35:11:2c:bd:2e:8f:29:3c:ee:b9:09:5f:61:e5:cd:
19:f1:17:93:88:bd:bb:07:17:51:20:27:18:b6:41:
9e:81:e9:6c:c2:1a:76:45:45:95:8e:53:6a:45:6e:
b7:d4:37:3e:25:4d:79:03:2b:a1:8f:9d:c5:6f:c9:
87:a6:1a:ef:61:5a:cb:21:0b:cc:47:af:b2:1e:0a:
23:1c:71:c1:41:a3:66:51:7c:ad:97:d6:58:45:ba:
3f:89:4e:2a:89:44:37:e3:46:ec:3f:cd:92:75:e0:
92:63:9d:ad:21:29:66:1c:6f:c2:11:41:02:11:d7:
e6:76:90:57:e6:6d:4d:2b:3c:8b:4b:9a:cd:07:93:
74:8b:63:68:b5:1a:63:db:fb:35:31:8b:6b:89:73:
04:4e:84:c0:a1:43:06:9b:15:2f:c8:28:12:49:4c:
2e:b6:f6:5d:3a:1d:aa:a5:a8:9e:06:66:66:31:42:
12:16:98:b9:b0:87:9e:f0:7e:76:a8:aa:63:42:00:
31:f6:b8:cb:b0:fd:87:c3:0a:83:d8:d6:e2:2e:09:
16:55:ce:79:cc:1d:7a:6c:ca:87:74:6c:36:b6:37:
ee:1e:92:a0:8a:2c:55:ac:bc:1f:96:52:c5:41:8b:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:86:F3:DF:83:79:18:78:46:DF:8F:4D:CD:C1:57:8D:C1:BA:F4:71
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tYbz34N5GHhG349NzcFXjcG69HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
45.137.97.0/24
85.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
99:cb:fb:56:83:9e:c0:b8:de:c5:0d:eb:f5:c4:7b:0e:5a:ed:
fc:67:aa:ab:7b:42:59:c8:0f:4f:4a:e9:85:47:03:9a:7d:e3:
a7:62:e2:6f:d2:e4:89:a4:a5:0a:dc:6a:ec:08:e7:43:e1:cc:
28:55:21:0a:02:39:e3:fd:6c:f5:56:c5:5a:52:d1:a9:24:36:
86:4e:4e:b8:9a:a9:10:03:41:11:1a:38:1e:9a:0d:89:e1:b7:
b5:83:9d:5d:b2:82:01:30:79:96:3b:90:5a:32:57:fe:de:a8:
5b:49:6d:cd:67:bb:4a:27:db:27:cc:cb:89:df:22:9e:a0:f3:
1a:dc:ec:a7:19:63:3f:57:10:bc:53:31:64:4b:82:f9:05:48:
b2:11:14:22:88:f9:47:da:50:cf:d2:f9:d8:14:c6:09:c3:bd:
12:fa:d3:16:87:4e:fa:f8:84:d6:63:ee:7e:f3:52:8c:1c:30:
3c:c1:da:34:48:a6:3a:9e:f0:f8:02:90:57:ca:b2:34:6f:de:
09:9e:14:dd:67:78:1a:37:cb:18:aa:59:26:43:f9:85:c4:45:
99:de:83:94:28:8d:33:0b:93:e8:66:3d:42:74:73:f8:d7:7e:
0c:2d:1c:d5:77:f7:dc:fd:2d:2e:97:1f:79:41:f1:92:83:d3:
76:b2:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org