Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/1b0KtogmiUXmICMLQdKUh0xweQw.roa
File: 1b0KtogmiUXmICMLQdKUh0xweQw.roa (raw, json)
Hash identifier: PXT42dzjJ5OQE0OjfNWRkq4oKFjT+/EKY9a0uEyaFXI=
Subject key identifier: D5:BD:0A:B6:88:26:89:45:E6:20:23:0B:41:D2:94:87:4C:70:79:0C
Certificate issuer: /CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Certificate serial: 33047F
Authority key identifier: 5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/1b0KtogmiUXmICMLQdKUh0xweQw.roa
Signing time: Sat 01 Jan 2022 02:53:11 +0000
ROA not before: Sat 01 Jan 2022 02:53:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 130.255.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3343487 (0x33047f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Validity
Not Before: Jan 1 02:53:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5bd0ab688268945e620230b41d294874c70790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:b3:e4:05:dc:92:5b:74:e2:5e:38:df:df:
e3:1f:e1:e8:02:e5:8f:27:44:c8:d7:15:1b:bb:e8:
a4:96:56:21:57:d5:79:fe:0b:c5:87:e4:28:79:e0:
a5:3f:98:6e:de:c0:ab:f5:d5:3f:f1:cc:21:5c:ad:
a7:43:41:37:60:e7:7e:c1:04:cb:5c:e8:d4:0b:23:
96:51:e4:62:9b:9e:8f:80:44:a7:05:6e:f6:cf:8a:
1e:4a:9c:54:95:40:fc:ad:06:64:b7:17:3a:a4:7e:
20:d6:c4:4d:77:74:1d:95:97:1a:60:a6:5c:c3:10:
9f:a5:64:d9:c0:14:a1:20:73:db:c6:23:e2:77:8b:
fc:a7:a0:ac:66:5f:b3:92:fd:41:db:33:1b:6e:ba:
ee:a7:0e:53:c4:b6:75:15:ed:62:07:1e:8a:2d:5f:
cf:31:96:29:44:18:37:95:a2:57:06:aa:f8:37:0a:
c9:ee:11:9d:45:81:50:ca:65:8d:47:08:e5:fa:d9:
e0:42:03:a2:a2:55:46:97:ad:a0:64:8e:dd:8d:ad:
cc:4f:02:c7:8c:dc:8e:e8:0e:a2:5d:6c:49:ff:cb:
85:f5:ce:2b:b7:72:9c:e8:ff:fa:55:09:ba:ee:42:
81:f1:72:98:2b:6c:0d:2e:26:2f:30:ad:00:88:0e:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BD:0A:B6:88:26:89:45:E6:20:23:0B:41:D2:94:87:4C:70:79:0C
X509v3 Authority Key Identifier:
keyid:5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/1b0KtogmiUXmICMLQdKUh0xweQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.174.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cc:c2:ac:90:6b:45:87:87:4a:3c:6e:3a:f3:26:c1:82:7f:
b4:a0:f2:69:f1:b3:fd:98:37:8e:99:d0:c5:ac:e5:f1:e0:f0:
9a:94:a9:47:f2:6d:61:fa:9b:c6:51:c8:2d:fd:e6:5a:6e:11:
47:40:20:2f:a8:fd:25:53:b9:5b:53:d0:79:86:be:8f:51:7e:
23:10:04:bb:53:f1:f3:f8:f4:9e:35:e8:62:cd:05:2a:ab:0a:
99:4a:92:e9:2e:c2:65:c6:8d:55:7b:df:74:37:b6:5d:0c:fd:
d8:92:19:29:14:12:cb:31:33:5f:1e:ab:f3:f5:4d:5a:c4:e1:
52:e3:00:a1:dd:f0:3d:f4:0c:be:32:cb:9f:1e:b1:16:fe:27:
c8:ed:42:cd:93:a9:56:b2:a3:57:e8:cc:69:d9:5d:e6:87:d4:
4e:23:6c:d5:5a:a8:e3:3a:70:7c:af:5b:81:99:75:eb:2b:bc:
ea:1c:b3:78:2b:00:77:b1:87:53:c9:ae:26:ec:15:80:8d:2b:
f8:39:73:96:1f:fd:ef:e9:d0:b1:94:a2:9d:b0:3d:a2:9b:0d:
f6:8c:20:ca:0b:5d:e9:e8:03:ed:b2:a3:6c:88:a8:12:dc:a2:
06:30:33:3f:99:b8:61:77:d0:eb:56:9b:bf:14:47:42:c1:1b:
12:62:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:03 2024 by rpki-client on console-ams.rpki-client.org