Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/R19zKrilJNZlpYxXqp6_m5-IVF0.roa
File: R19zKrilJNZlpYxXqp6_m5-IVF0.roa (raw, json)
Hash identifier: ezLy6j92ZAfgOVEdJQPJxVkIbnD81w1d0CJ+DNW1Rcw=
Subject key identifier: 47:5F:73:2A:B8:A5:24:D6:65:A5:8C:57:AA:9E:BF:9B:9F:88:54:5D
Certificate issuer: /CN=d793a8d736beb92be16d193b101f93be55325919
Certificate serial: 018413FBAE9F0213907B553084B7165A51E8
Authority key identifier: D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/R19zKrilJNZlpYxXqp6_m5-IVF0.roa
Signing time: Wed 26 Oct 2022 11:09:32 +0000
ROA not before: Wed 26 Oct 2022 11:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:fb:ae:9f:02:13:90:7b:55:30:84:b7:16:5a:51:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d793a8d736beb92be16d193b101f93be55325919
Validity
Not Before: Oct 26 11:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=475f732ab8a524d665a58c57aa9ebf9b9f88545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1d:3e:9b:b6:5d:97:1d:f0:4e:28:2b:e1:c5:
62:a0:94:88:c8:34:90:56:5a:c6:22:66:b8:1b:c7:
f4:56:c5:ff:81:b2:77:c2:31:ba:74:b9:99:21:01:
5e:b6:06:e7:74:ae:01:ac:d0:9e:72:35:df:23:93:
2c:60:42:66:17:5c:49:83:9b:8b:15:83:b7:79:00:
d2:69:18:74:8d:9f:85:51:55:2b:03:5c:21:7b:f6:
bf:f1:b8:cc:55:21:e3:3e:a8:b1:55:b7:54:42:8a:
bd:e7:8f:82:f2:5b:19:a2:6a:5f:22:4f:c8:67:0d:
03:31:e9:d0:e1:54:7e:7d:77:14:cd:d5:05:88:e3:
db:c6:32:e2:c7:f8:25:a4:d9:90:19:50:87:3a:0b:
99:d3:37:43:4d:9b:06:29:6b:a0:7a:29:ca:44:f9:
7f:cd:ef:d2:6b:53:47:28:0e:d9:27:cb:fb:1e:79:
1a:d5:18:9c:8c:aa:13:a3:51:36:cb:d0:8e:76:ad:
f6:07:89:c2:ac:59:24:11:63:ea:4a:60:40:28:74:
e1:9a:c4:c4:8e:74:36:5e:34:c3:7f:db:20:3a:69:
42:ad:0c:66:de:4d:71:a9:8c:eb:b5:fa:5c:3e:de:
28:dc:d2:23:97:76:97:49:f0:ae:a7:70:58:61:2b:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:73:2A:B8:A5:24:D6:65:A5:8C:57:AA:9E:BF:9B:9F:88:54:5D
X509v3 Authority Key Identifier:
keyid:D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/R19zKrilJNZlpYxXqp6_m5-IVF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.152.0/22
Signature Algorithm: sha256WithRSAEncryption
29:06:a9:8b:e6:d6:61:68:73:6e:52:9b:78:72:f1:0f:75:15:
99:9e:55:60:bf:0f:07:23:99:e0:13:b2:02:fd:86:e3:5f:1f:
42:b3:d5:53:21:4a:9f:73:17:5e:53:1e:d4:21:be:90:47:1b:
91:d0:0d:de:60:a1:d1:30:22:39:ea:b3:fc:ce:89:63:6d:bd:
9f:76:cf:5b:eb:03:50:5c:0a:d7:72:79:0f:3f:43:ed:99:af:
71:3f:f5:bc:2b:a6:49:35:19:94:88:7d:3c:97:2c:89:ba:43:
cc:59:6d:6f:0c:0e:27:a2:fc:06:35:14:5c:f7:1d:62:7c:6c:
75:58:5c:30:e5:50:70:b1:bb:a8:65:48:43:22:e0:f6:2e:38:
19:9a:a7:b4:da:7b:9e:8b:90:ac:31:f7:e0:81:28:67:57:24:
24:f8:79:34:6c:60:b2:56:f9:82:3e:1c:d9:7b:00:d8:93:93:
88:5b:64:3b:b6:b8:82:a0:f4:87:64:2b:23:87:a0:32:b3:74:
73:40:8c:99:f8:51:f9:5c:d3:5d:7a:3e:a9:46:c4:ec:8c:cc:
ed:66:e6:b7:20:63:17:05:7e:29:74:71:5c:5f:99:e2:37:60:
40:f2:cb:b5:6b:2e:7f:b2:e1:44:7a:54:ed:a7:1c:09:59:6a:
03:ed:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:08 2025 by rpki-client