Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4adc61-4a35-4e3d-a648-898ea8838639/1/MmiB0djOOBw7QGmppiVsVK1OHeU.roa
File: MmiB0djOOBw7QGmppiVsVK1OHeU.roa (raw, json)
Hash identifier: GGlJ88Vokd59BFyZSjjNLwn2cJgVjkXHwQQNQV4s07Y=
Subject key identifier: 32:68:81:D1:D8:CE:38:1C:3B:40:69:A9:A6:25:6C:54:AD:4E:1D:E5
Certificate issuer: /CN=2fc8ca56da16608ae0a2bf275085997d39c9db6a
Certificate serial: 0126301A
Authority key identifier: 2F:C8:CA:56:DA:16:60:8A:E0:A2:BF:27:50:85:99:7D:39:C9:DB:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8jKVtoWYIrgor8nUIWZfTnJ22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4adc61-4a35-4e3d-a648-898ea8838639/1/MmiB0djOOBw7QGmppiVsVK1OHeU.roa
Signing time: Sat 01 Jan 2022 05:00:45 +0000
ROA not before: Sat 01 Jan 2022 05:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 5.180.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19279898 (0x126301a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc8ca56da16608ae0a2bf275085997d39c9db6a
Validity
Not Before: Jan 1 05:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=326881d1d8ce381c3b4069a9a6256c54ad4e1de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:e8:2c:73:1c:15:80:6b:de:e9:07:7a:a6:
22:ce:04:64:fb:a7:08:06:e2:3e:f5:47:ca:91:54:
1e:30:99:f9:f2:f8:20:03:8c:a8:56:b3:36:38:a5:
f2:c4:dc:50:9e:f7:eb:85:8a:a0:8a:c5:86:f0:0b:
87:f0:73:dd:ee:f2:4d:88:f6:a0:a3:a0:7a:76:52:
3f:5e:28:cc:6a:60:d0:be:64:e5:9f:59:67:70:96:
42:81:19:1f:30:f0:43:b0:d6:ce:b8:38:66:96:c0:
89:b7:15:65:9b:0f:e8:e3:0d:bf:43:18:c8:b0:de:
42:39:d7:f2:1d:61:9b:22:a2:1c:7a:1a:e9:59:53:
a0:69:4e:a9:a8:74:fc:80:40:10:81:75:08:c2:92:
80:44:f8:4d:d1:a6:c6:e4:f1:d8:5a:f8:b8:c4:b6:
e2:35:c3:1f:f9:98:48:4f:0c:ec:85:99:06:7a:d1:
54:e2:86:42:f9:e0:d8:2e:38:37:ac:0f:a6:2a:62:
34:7c:07:1b:d1:3e:95:af:8e:2e:a6:3b:46:7d:a7:
c1:ab:1d:1b:e7:d0:22:77:7d:84:de:59:a9:4a:ef:
25:9d:3a:1a:31:57:60:38:8f:41:4e:ee:af:4e:07:
29:29:c7:50:4f:ba:6d:b5:81:77:e6:47:63:a7:12:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:81:D1:D8:CE:38:1C:3B:40:69:A9:A6:25:6C:54:AD:4E:1D:E5
X509v3 Authority Key Identifier:
keyid:2F:C8:CA:56:DA:16:60:8A:E0:A2:BF:27:50:85:99:7D:39:C9:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8jKVtoWYIrgor8nUIWZfTnJ22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4adc61-4a35-4e3d-a648-898ea8838639/1/MmiB0djOOBw7QGmppiVsVK1OHeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4adc61-4a35-4e3d-a648-898ea8838639/1/L8jKVtoWYIrgor8nUIWZfTnJ22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.177.0/24
Signature Algorithm: sha256WithRSAEncryption
17:85:73:e2:58:52:6f:f4:ad:c2:0a:70:2e:2a:89:05:6d:8e:
85:a8:91:97:fc:1f:67:64:7f:32:5b:e5:57:64:73:40:0f:48:
4e:ae:8b:ac:79:4f:15:57:d2:d8:ae:70:5d:d4:82:5a:4b:d4:
74:53:6f:7f:f7:55:35:79:6c:be:e5:3f:8c:6c:f0:0e:9e:3a:
94:ba:a4:1f:91:e3:c9:37:4c:63:18:e6:a6:1f:6b:d8:86:69:
c9:fc:5f:f0:ec:2b:7c:8b:da:eb:06:20:c1:36:49:86:d3:4c:
3c:8e:56:87:f2:40:e7:4e:1f:55:b3:7d:d3:35:1b:ac:03:b2:
99:b0:15:a0:0e:20:a0:b0:17:ab:f7:4b:71:29:53:dc:02:da:
df:09:47:1f:49:70:83:2d:68:98:aa:c6:64:3d:84:a5:9a:49:
7b:7d:24:39:71:a9:ed:47:62:e9:f8:72:b9:32:5b:a3:59:1c:
66:c7:a7:52:aa:34:40:8c:a7:d5:9f:20:e7:f4:63:ae:df:e4:
07:cb:59:30:6e:c9:c8:96:93:4f:f9:2e:0e:e7:b8:dc:f2:5f:
24:34:8f:29:dd:c9:f9:3a:35:7a:ec:c0:95:8a:eb:67:06:2c:
f3:76:ea:3a:81:ca:c1:ce:75:50:04:ea:5d:d8:1b:24:b4:03:
d0:31:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org