Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/58b7a5-4ee1-4552-aef2-0d5eaf2a876e/1/xDuSjn7Zh3xRrl3H60yZL1WfMzk.roa
File: xDuSjn7Zh3xRrl3H60yZL1WfMzk.roa (raw, json)
Hash identifier: kEGrtCw0dmIL/dzG7TxC7OTuFDqLShhybAY+lIIPXOE=
Subject key identifier: C4:3B:92:8E:7E:D9:87:7C:51:AE:5D:C7:EB:4C:99:2F:55:9F:33:39
Certificate issuer: /CN=d3e1c0eeaa5da4a9c5195b298c228726abfe52af
Certificate serial: 01856CCAC0CD98AE5952B2E0EB74480130DA
Authority key identifier: D3:E1:C0:EE:AA:5D:A4:A9:C5:19:5B:29:8C:22:87:26:AB:FE:52:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-HA7qpdpKnFGVspjCKHJqv-Uq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/58b7a5-4ee1-4552-aef2-0d5eaf2a876e/1/xDuSjn7Zh3xRrl3H60yZL1WfMzk.roa
Signing time: Sun 01 Jan 2023 10:05:05 +0000
ROA not before: Sun 01 Jan 2023 10:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.181.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:c0:cd:98:ae:59:52:b2:e0:eb:74:48:01:30:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e1c0eeaa5da4a9c5195b298c228726abfe52af
Validity
Not Before: Jan 1 10:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43b928e7ed9877c51ae5dc7eb4c992f559f3339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:d3:0b:94:a0:9c:f6:5f:e6:54:1a:eb:56:
0c:a8:05:c5:71:61:c2:37:4d:b4:2a:fb:63:f3:76:
d2:31:89:12:94:67:a3:be:01:ff:2f:b6:b1:c5:53:
c5:f6:a3:93:93:dc:ac:36:87:ad:9d:c0:8f:9e:f3:
e0:31:02:20:1c:ac:9a:8a:8d:bb:d1:53:a9:97:bf:
0d:c7:6e:22:bf:1b:01:6b:c3:28:1a:ae:8d:6a:d0:
83:4a:eb:1c:6b:06:6c:11:80:30:fd:a8:06:0a:4f:
9f:68:52:d0:94:ae:41:34:a9:1e:4c:f6:9d:a8:43:
c4:c9:e0:75:5c:b8:9d:07:92:b4:fa:86:16:c6:90:
97:31:59:49:2d:d6:29:44:d5:df:b6:ef:e1:be:9b:
25:cb:f9:1d:d1:a6:57:c7:08:7e:6b:11:74:1a:73:
c6:a4:5b:6c:8b:0d:64:65:94:e6:8b:e3:f1:e3:81:
4a:db:fe:02:f9:9e:45:16:f3:91:70:21:8e:bb:b8:
18:a2:e9:d9:de:e8:28:fa:2f:1a:f4:37:96:6c:33:
63:9f:e3:5c:d4:b7:62:b9:af:65:d4:aa:5b:ee:db:
90:43:d8:bf:e8:09:f6:b4:0e:64:44:a9:b3:75:67:
88:aa:2b:93:b1:61:24:ec:20:f1:fc:e8:99:15:2d:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3B:92:8E:7E:D9:87:7C:51:AE:5D:C7:EB:4C:99:2F:55:9F:33:39
X509v3 Authority Key Identifier:
keyid:D3:E1:C0:EE:AA:5D:A4:A9:C5:19:5B:29:8C:22:87:26:AB:FE:52:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-HA7qpdpKnFGVspjCKHJqv-Uq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/58b7a5-4ee1-4552-aef2-0d5eaf2a876e/1/xDuSjn7Zh3xRrl3H60yZL1WfMzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/58b7a5-4ee1-4552-aef2-0d5eaf2a876e/1/0-HA7qpdpKnFGVspjCKHJqv-Uq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.54.0/24
Signature Algorithm: sha256WithRSAEncryption
95:18:05:c4:a3:74:75:c6:05:3c:d6:8d:9f:6b:5a:bb:fd:25:
1b:3c:9b:14:30:af:e0:83:a6:76:61:8b:80:8c:5c:e6:f2:b3:
3d:a4:b8:03:2f:a2:3d:1d:19:34:0d:c9:7b:14:b0:f3:a6:1e:
3f:f7:3e:e6:85:3b:e8:cf:95:0b:94:a6:38:d9:f8:60:61:b4:
44:cb:d6:45:62:eb:d5:d9:71:4c:f1:73:f9:af:d5:91:01:5a:
ce:be:cb:19:28:5b:c0:1a:a0:aa:8a:6f:7a:a8:d0:f6:5e:f5:
a0:fa:19:de:54:ff:d3:b3:49:c9:cb:9a:cc:10:ac:db:06:7a:
5b:91:e7:63:e9:68:cb:f9:21:9e:77:70:72:64:c6:83:87:5c:
e0:3c:71:00:53:c5:b9:0c:5b:96:0b:08:3c:7c:4f:4b:97:6e:
be:f8:80:71:ce:1d:e0:5e:d4:cd:76:3d:bb:63:04:47:0d:54:
12:fa:b8:a9:26:d5:65:71:6f:6e:34:ed:4f:db:ee:ba:23:db:
54:86:6d:f5:d7:5c:5b:ce:93:85:e5:9b:5e:75:b4:3c:79:62:
3a:15:86:c3:79:09:3c:73:37:3c:e7:03:29:51:fa:50:06:d9:
84:18:d8:61:81:b9:05:0d:44:d7:3c:76:6e:9f:be:a1:9c:3a:
38:1e:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-ams.rpki-client.org