Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/U1GJFfqzZCa_yfMn8hCWbo99CIo.roa
File: U1GJFfqzZCa_yfMn8hCWbo99CIo.roa (raw, json)
Hash identifier: HfBi1U6tQ6x/33WPbI+E2lQHgxDiy/c5WsKBEjzq098=
Subject key identifier: 53:51:89:15:FA:B3:64:26:BF:C9:F3:27:F2:10:96:6E:8F:7D:08:8A
Certificate issuer: /CN=cd5aca299d355aadfe1ef939546280e588d249a3
Certificate serial: 0188208679D9D4FFB7CEC5A7107DA34166D2
Authority key identifier: CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/U1GJFfqzZCa_yfMn8hCWbo99CIo.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 5.172.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:79:d9:d4:ff:b7:ce:c5:a7:10:7d:a3:41:66:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5aca299d355aadfe1ef939546280e588d249a3
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53518915fab36426bfc9f327f210966e8f7d088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:f6:33:24:ca:6c:53:ac:f2:3a:ca:a3:67:
ea:0c:5b:49:5c:31:3c:a9:cd:6c:71:c0:21:97:14:
3e:14:2d:29:fa:8b:9b:0e:47:3f:f4:cd:54:6b:f9:
90:1c:e4:a5:f3:f8:0c:b6:63:92:d3:64:0d:d4:dd:
cf:a4:f0:11:19:91:bc:06:33:33:47:ce:04:fe:02:
8a:19:a7:12:30:93:3c:c6:35:5a:46:b4:cf:51:1c:
3c:e8:6c:06:99:e9:17:c1:09:a4:19:7e:42:c0:db:
36:19:a4:1c:f0:e8:1b:12:ee:29:06:4d:9c:6a:a9:
39:86:60:13:ce:f0:64:6c:2a:cd:fb:30:c8:18:c6:
26:a1:d6:02:48:2e:07:93:1e:01:03:fe:03:f2:47:
2d:9d:7a:6a:5e:c9:ed:03:e2:e1:de:a5:0b:2a:1e:
fd:21:80:fd:8f:70:14:1f:52:6a:05:e8:fa:1b:f1:
66:82:d3:ca:45:fb:ad:bf:dd:b5:b3:97:48:a5:76:
16:9f:b7:4c:6a:cf:58:64:27:34:cb:8a:15:ba:0b:
52:f2:46:dd:29:35:b9:fc:63:00:0b:ab:cc:ba:51:
fc:53:81:ae:48:00:56:88:5c:d3:55:8d:66:84:1e:
8d:05:e5:e1:c3:78:23:a0:94:e9:6e:41:fe:8c:f2:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:89:15:FA:B3:64:26:BF:C9:F3:27:F2:10:96:6E:8F:7D:08:8A
X509v3 Authority Key Identifier:
keyid:CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/U1GJFfqzZCa_yfMn8hCWbo99CIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.176.0/24
Signature Algorithm: sha256WithRSAEncryption
22:66:bf:42:49:8c:91:3b:24:bf:0d:d6:7f:83:d7:ed:81:c3:
85:8c:28:f7:18:64:32:7f:98:9b:bd:23:2c:8b:e1:04:e0:f3:
73:78:3a:a5:56:2b:62:25:80:b5:7a:02:e7:4c:44:70:df:e9:
01:80:c2:e3:c5:8d:4b:55:18:bb:03:ea:5b:a4:3b:8f:0f:05:
53:15:69:d9:fe:94:45:c9:65:70:c6:9e:8e:f6:0b:d5:8f:1e:
78:c2:85:a1:0f:56:6b:67:8d:de:e9:e7:a5:e4:08:07:21:e0:
2b:b6:d3:ea:09:e1:5a:8f:b2:b0:59:5d:63:8c:67:ec:ec:25:
eb:84:a2:14:e7:ff:eb:7f:de:e2:54:a6:ac:e2:48:ba:f8:e4:
52:48:39:45:0c:45:6e:a0:7a:ba:c4:db:e9:b5:7b:97:3a:de:
10:b1:a1:79:de:ca:42:13:76:e4:58:3f:60:2a:9a:88:b9:9e:
6a:d6:10:98:a2:7f:d4:87:63:9c:8d:9f:5d:4e:65:bf:a3:4a:
2d:7a:7c:d6:f3:13:c2:aa:eb:62:3d:46:f7:9e:a3:29:27:2d:
be:ab:d8:d8:58:16:fe:df:55:9d:80:f7:91:ba:04:a3:3b:e1:
a2:32:0a:78:ad:73:3e:47:e7:20:cb:f4:d8:31:94:b1:85:07:
8c:ea:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:25:38 2023 by rpki-client on console-fra.rpki-client.org