Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yGNTvX5ECXwgLRLyKgGLliN1U_s.roa
File: yGNTvX5ECXwgLRLyKgGLliN1U_s.roa (raw, json)
Hash identifier: qVJpGc4nDGYaYRwc6SDSkDXwzt8zPsw1uHw2TNkc2vw=
Subject key identifier: C8:63:53:BD:7E:44:09:7C:20:2D:12:F2:2A:01:8B:96:23:75:53:FB
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01864712EDCB16060032A33651745FBFE1B7
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yGNTvX5ECXwgLRLyKgGLliN1U_s.roa
Signing time: Sun 12 Feb 2023 19:21:08 +0000
ROA not before: Sun 12 Feb 2023 19:21:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.176.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
45.91.139.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:47:12:ed:cb:16:06:00:32:a3:36:51:74:5f:bf:e1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 12 19:21:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c86353bd7e44097c202d12f22a018b96237553fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:d7:95:4c:f5:df:5e:96:92:b6:01:64:cf:
a7:57:d7:13:bd:2c:87:50:3d:f2:9f:70:3f:87:4a:
1a:a5:aa:fd:30:5e:30:8d:99:52:65:c7:0d:26:d4:
9e:c0:24:96:34:e5:26:0c:b2:41:68:23:80:23:32:
38:0c:1d:d8:3d:2c:f7:11:7d:ce:e0:e5:b7:dc:00:
ce:73:95:1f:26:66:3c:56:21:fc:a5:e7:60:b0:7f:
c1:d5:d6:c0:6a:bf:1b:23:d1:44:6e:be:53:ce:dd:
67:ba:7a:80:af:48:12:a5:4a:4f:9d:80:b1:fd:64:
0a:fa:6c:14:08:f1:8d:43:fa:4a:b1:ef:52:a8:1f:
1d:3d:c8:ad:bc:b8:2c:b6:43:f1:c4:7a:69:19:43:
cb:bc:2f:a0:06:f4:28:02:a6:99:0e:d8:d9:d9:0a:
86:a8:54:24:94:f6:6f:10:56:18:70:1e:c2:c6:42:
b2:46:b8:6e:90:1b:41:37:c1:b6:8a:e5:a9:86:1f:
ef:a2:d0:2a:b5:b1:26:e4:72:50:cc:f4:a1:2b:d9:
a5:15:d2:14:c8:02:fb:83:d5:3f:90:14:b9:ea:8c:
b0:a0:d6:6c:4c:2b:9e:f1:9e:a8:c6:85:63:7d:23:
39:91:e4:d1:3a:80:b0:18:32:01:af:34:44:19:a9:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:53:BD:7E:44:09:7C:20:2D:12:F2:2A:01:8B:96:23:75:53:FB
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yGNTvX5ECXwgLRLyKgGLliN1U_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.176.0/24
45.91.139.0/24
45.137.97.0/24
85.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b7:5d:bc:9d:3d:d7:3d:9f:97:d9:f5:bd:0d:98:2d:56:d1:
97:6d:b2:b3:85:1a:ec:e8:e4:8f:36:6c:fd:6e:d0:e2:41:d9:
ee:bd:24:09:f6:f8:7f:ec:4b:d3:3f:ac:9e:71:a3:de:fe:fc:
c1:f7:3a:8f:5a:13:e6:ef:07:88:f5:9b:3d:e8:fa:3b:82:2e:
af:5d:ff:02:95:e4:1a:c1:2b:5e:e6:2c:79:42:d6:ee:4d:85:
d7:7e:b0:45:ed:8c:54:21:9d:39:20:15:ab:41:a1:6a:96:8e:
ae:df:8b:e6:67:03:30:7f:f0:05:65:98:c5:86:45:7e:db:eb:
07:81:06:5a:80:6a:6f:8b:d3:d2:c7:68:c0:83:ec:f1:b8:f2:
4c:9d:d0:bd:4b:df:e3:f2:5a:c1:35:5a:10:b2:24:39:4b:73:
08:b1:30:9b:84:0c:38:1e:3b:f7:03:db:d2:a9:dc:c4:88:b2:
86:70:ee:ba:2b:e4:3a:82:c4:b1:b5:66:83:bc:82:d0:80:f0:
6a:28:7b:8f:6f:66:28:d7:e0:29:e9:fd:84:e5:fc:cd:37:0e:
48:8b:0a:9f:30:6e:f1:36:13:12:e0:45:23:66:ff:d0:e8:93:
52:27:ee:3d:dd:25:c5:3c:30:55:05:1a:1e:66:f3:ec:a9:67:
f4:6f:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org