Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/npiKgGfIy9XT2cZ8Im0leqkxK-g.roa
File: npiKgGfIy9XT2cZ8Im0leqkxK-g.roa (raw, json)
Hash identifier: 9alVodyVyLPjWmd5ROdyU/6Wnv5xWy3Ex7ATdCnqpQA=
Subject key identifier: 9E:98:8A:80:67:C8:CB:D5:D3:D9:C6:7C:22:6D:25:7A:A9:31:2B:E8
Certificate issuer: /CN=d793a8d736beb92be16d193b101f93be55325919
Certificate serial: 018288CA1A185A2846D0A604A4FCEDE8D65C
Authority key identifier: D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/npiKgGfIy9XT2cZ8Im0leqkxK-g.roa
Signing time: Wed 10 Aug 2022 17:25:22 +0000
ROA not before: Wed 10 Aug 2022 17:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.152.0/22 maxlen: 24
5.180.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:ca:1a:18:5a:28:46:d0:a6:04:a4:fc:ed:e8:d6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d793a8d736beb92be16d193b101f93be55325919
Validity
Not Before: Aug 10 17:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e988a8067c8cbd5d3d9c67c226d257aa9312be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:ec:f4:cc:ec:0e:88:37:df:94:3b:d0:28:
e5:6c:f7:78:b3:ad:4c:b7:b1:ef:8f:fa:02:69:14:
e5:47:ef:4a:f3:e2:53:22:19:2e:b6:91:2b:a4:9f:
e6:4e:dc:e4:d9:ea:67:2c:aa:f1:48:43:05:48:4e:
af:ea:7e:8b:43:b6:32:73:48:9e:39:d9:d3:3a:e0:
f5:d4:c8:5e:ab:1b:56:ec:6c:77:aa:1c:f9:be:2a:
10:a5:42:d6:79:d0:dc:a9:e9:77:7e:cc:98:6e:28:
33:ad:f1:f7:2d:fc:d3:05:cc:65:d8:2f:70:01:98:
cf:42:82:1d:05:60:d1:2f:a0:0e:f6:9d:59:13:48:
cf:8c:fd:b5:66:50:dd:4e:fe:e0:a9:e7:d4:96:03:
78:14:8e:5f:6b:ad:5a:61:20:99:ff:1b:ae:cd:91:
1a:41:6d:6a:5d:f1:52:24:52:dc:65:04:c1:34:a5:
20:be:3a:a4:9a:3e:3d:0b:2b:cd:23:bf:86:87:08:
24:1a:ab:e4:b8:d3:23:b9:36:de:5d:d8:fc:2a:e5:
ba:7e:83:68:be:a2:2a:e2:16:96:e2:06:2b:02:db:
b6:86:10:de:1b:a6:2c:69:20:dc:17:3b:70:66:c0:
86:78:d9:71:70:77:5b:ba:d5:98:86:b0:56:f2:38:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:8A:80:67:C8:CB:D5:D3:D9:C6:7C:22:6D:25:7A:A9:31:2B:E8
X509v3 Authority Key Identifier:
keyid:D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/npiKgGfIy9XT2cZ8Im0leqkxK-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.152.0/22
Signature Algorithm: sha256WithRSAEncryption
67:2c:c8:b5:2c:80:47:fd:3e:c1:2a:55:be:e7:12:a7:d3:15:
6f:af:ba:0b:31:34:f9:66:55:25:90:e6:1f:2d:71:ee:e1:1c:
7d:75:58:28:ef:cb:91:5b:9c:dc:da:e5:89:ee:94:09:49:b1:
83:27:36:04:78:e2:4e:34:ac:c9:ee:f4:33:42:21:76:09:92:
a4:17:66:fe:a6:fc:29:47:37:35:b2:ea:f2:93:d8:d3:6b:45:
fd:39:a6:7b:8d:24:f8:e4:4f:d9:1f:b8:51:de:73:04:71:71:
e2:d8:ba:fe:52:68:f2:56:86:87:54:52:15:b9:00:7d:b8:12:
76:7a:fc:bd:3a:5c:57:03:cc:42:bb:1f:81:67:9f:db:3c:4e:
cb:38:68:7f:cc:bf:1d:56:b2:e1:63:00:1b:cc:82:de:73:85:
69:eb:b2:18:12:7b:cb:43:5f:74:87:03:ed:88:be:06:9d:12:
66:3a:17:73:54:33:0c:e4:2c:77:9c:9e:be:a5:25:13:be:3e:
e8:c1:3e:07:07:b0:22:7c:13:df:a1:af:4f:ee:24:a2:18:eb:
e6:b7:0e:ff:90:e4:e5:e2:26:47:53:0e:d9:7d:ec:84:2f:6b:
b6:49:89:43:ea:e7:7f:31:1a:6f:7c:ce:58:1e:0e:a5:dd:71:
3c:a8:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org