Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/56Ki1ECcIadPZ8x_3lQDJ4557aI.roa
File: 56Ki1ECcIadPZ8x_3lQDJ4557aI.roa (raw, json)
Hash identifier: TLdAKDCi+KiVdnG5s7pULSP7VIGkSPJmamlvIF00QW4=
Subject key identifier: E7:A2:A2:D4:40:9C:21:A7:4F:67:CC:7F:DE:54:03:27:8E:79:ED:A2
Certificate issuer: /CN=db3f546b24b7dbb0984a09c62660a52bad287757
Certificate serial: 01882086AFFE01FF349F92A654675157E1DB
Authority key identifier: DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/56Ki1ECcIadPZ8x_3lQDJ4557aI.roa
Signing time: Mon 15 May 2023 17:47:57 +0000
ROA not before: Mon 15 May 2023 17:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 5.172.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:af:fe:01:ff:34:9f:92:a6:54:67:51:57:e1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db3f546b24b7dbb0984a09c62660a52bad287757
Validity
Not Before: May 15 17:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a2a2d4409c21a74f67cc7fde5403278e79eda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:d5:c4:d6:b5:cd:a6:ee:99:af:63:6e:c8:
80:5b:3a:1b:6c:07:a6:12:2e:93:98:95:30:2e:5c:
80:4b:f6:c8:ef:cd:18:f2:4f:d1:15:29:4a:5d:44:
56:85:f8:9b:fd:e1:e0:36:a9:9e:17:b8:fb:99:2b:
2d:bf:bf:d0:62:6b:4b:1c:4c:51:ea:56:56:ae:bb:
c4:69:49:9e:b7:34:8f:cf:92:47:5a:97:47:e2:9b:
cc:72:86:7d:e1:19:3a:75:20:32:09:09:07:1d:bf:
4a:e3:c8:f2:ec:b9:9a:60:20:55:e6:78:7b:9c:0b:
0b:c6:33:e6:a1:b6:50:10:bf:11:cc:1e:9a:16:1f:
7b:75:e6:8a:ee:f8:86:a5:5e:4a:2d:9e:8c:9e:66:
71:a6:b6:f7:a3:f2:c7:e1:67:78:f6:ae:92:27:14:
27:33:a7:bd:ee:fc:8f:19:e2:9f:e3:9a:96:62:b3:
26:f8:43:4d:15:76:89:b8:22:63:2e:01:56:e6:d5:
a8:20:ef:dc:c7:de:69:7c:01:ea:36:73:27:bd:e8:
98:c6:29:09:cb:4f:72:51:b3:84:ba:a9:89:00:f2:
de:4d:e0:79:cc:af:20:2e:ab:96:8f:c8:38:6c:e5:
1c:d9:13:5f:b7:b8:e6:da:a9:19:aa:1a:ba:8b:24:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A2:A2:D4:40:9C:21:A7:4F:67:CC:7F:DE:54:03:27:8E:79:ED:A2
X509v3 Authority Key Identifier:
keyid:DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/56Ki1ECcIadPZ8x_3lQDJ4557aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.180.0/24
Signature Algorithm: sha256WithRSAEncryption
08:46:e4:46:7b:7b:cd:09:bf:2b:93:4a:cf:d5:95:ad:0c:73:
64:3e:06:72:02:d1:24:cf:6b:0b:13:01:aa:7e:81:cd:a3:34:
78:cc:b5:fb:3c:8e:d3:7f:f7:c8:c2:26:1c:7d:c3:5b:38:b2:
fe:9f:c7:a8:52:24:6e:77:29:02:00:b6:df:10:32:fe:6a:88:
3c:2c:df:0a:25:14:8d:34:88:1d:02:5e:dd:f2:c2:39:19:4d:
74:a9:5d:ef:d1:63:1b:ec:6f:e7:39:50:67:af:1b:60:08:bf:
ab:8a:33:55:82:86:3c:85:68:19:2d:0f:b6:1e:9b:97:d1:01:
de:d7:26:57:38:d4:b8:ab:00:23:2a:3b:39:27:7b:d4:89:ee:
1b:77:5e:ff:b2:64:5a:cd:b6:ec:08:66:b2:ee:1b:8c:02:74:
a0:08:c1:0c:56:c3:01:b7:26:c3:4a:cc:28:d9:71:0e:59:7f:
18:21:6f:60:0e:37:c3:ce:44:64:68:62:ee:1e:08:0c:c6:0e:
b2:32:1a:41:38:fb:6c:36:03:8e:40:2a:fc:95:e6:12:ba:21:
b3:8f:7f:73:67:f3:41:72:ee:ca:46:08:ed:06:81:e0:aa:61:
fb:28:0c:ac:e0:84:8f:75:ca:7a:b2:d6:12:25:21:e6:33:7a:
42:32:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:44 2025 by rpki-client