Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8083e0-2c54-4a98-8cc2-36749769f9a3/1/5zIaV-3T9h053ZrOttxD3eTpC4Y.roa
File: 5zIaV-3T9h053ZrOttxD3eTpC4Y.roa (raw, json)
Hash identifier: WRlmSarYmj0UKB7pliWBaVAcfxEQ3HxuX5mUXZMjAYo=
Subject key identifier: E7:32:1A:57:ED:D3:F6:1D:39:DD:9A:CE:B6:DC:43:DD:E4:E9:0B:86
Certificate issuer: /CN=115c3c43761c08952b969a496abef6fa75f7f537
Certificate serial: 0185704BA532E089C233B3CC0B4B527D0E9B
Authority key identifier: 11:5C:3C:43:76:1C:08:95:2B:96:9A:49:6A:BE:F6:FA:75:F7:F5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVw8Q3YcCJUrlppJar72-nX39Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8083e0-2c54-4a98-8cc2-36749769f9a3/1/5zIaV-3T9h053ZrOttxD3eTpC4Y.roa
Signing time: Mon 02 Jan 2023 02:24:43 +0000
ROA not before: Mon 02 Jan 2023 02:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.180.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:a5:32:e0:89:c2:33:b3:cc:0b:4b:52:7d:0e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115c3c43761c08952b969a496abef6fa75f7f537
Validity
Not Before: Jan 2 02:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7321a57edd3f61d39dd9aceb6dc43dde4e90b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:0c:4f:d3:a3:66:cd:23:cb:c9:7e:8d:62:
d9:4c:c9:a6:27:01:ac:0e:e2:1a:93:a9:e5:7b:26:
99:62:4c:ce:f4:fa:3a:f1:57:75:46:ad:87:15:16:
80:11:ac:70:61:e4:33:80:f7:4a:6b:2d:5e:e1:cb:
05:6d:68:7e:5a:ef:80:00:08:b9:58:90:c1:06:be:
ed:fa:33:c9:70:82:8a:e8:4e:34:64:8f:e5:d2:79:
83:6c:08:05:87:b6:3d:ba:b7:b5:43:91:11:27:f8:
7d:e2:c7:34:87:bd:26:31:26:9b:25:5a:b1:29:03:
b4:f9:03:82:96:99:c0:1c:ed:a4:9b:7e:e4:57:e0:
fe:4a:9d:92:02:fa:ed:ab:50:38:f7:82:6b:e3:a9:
2f:5f:61:4b:f5:13:3f:b9:1c:21:be:70:77:26:56:
82:eb:ea:20:80:57:ae:ca:c8:e8:71:46:d5:f5:ff:
51:29:0d:12:eb:49:cf:31:3e:e7:f2:f0:01:7b:fb:
e4:80:00:ea:23:22:22:d8:eb:6d:87:b4:54:e1:f8:
d5:15:c1:91:d3:88:30:53:c6:3f:0c:a3:7a:66:c8:
22:06:e2:d0:6e:f6:a5:88:26:77:00:43:00:b7:1b:
d1:ab:a2:e7:b5:81:9c:f7:50:c1:b7:62:c7:68:38:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:1A:57:ED:D3:F6:1D:39:DD:9A:CE:B6:DC:43:DD:E4:E9:0B:86
X509v3 Authority Key Identifier:
keyid:11:5C:3C:43:76:1C:08:95:2B:96:9A:49:6A:BE:F6:FA:75:F7:F5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVw8Q3YcCJUrlppJar72-nX39Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8083e0-2c54-4a98-8cc2-36749769f9a3/1/5zIaV-3T9h053ZrOttxD3eTpC4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8083e0-2c54-4a98-8cc2-36749769f9a3/1/EVw8Q3YcCJUrlppJar72-nX39Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:46:da:2a:b9:1b:ee:75:f9:88:14:8d:13:33:27:08:02:bd:
c0:38:30:5b:bc:50:0f:78:4a:ec:be:4b:ef:71:3c:32:ca:5f:
8b:df:a6:08:32:a3:cd:bb:b7:87:98:0a:0f:5f:c8:bb:c1:af:
53:17:b9:9a:7f:eb:af:39:c8:4f:21:13:85:70:07:b0:08:ca:
62:dc:7e:e9:12:16:61:1f:f9:b2:4c:81:96:d0:8c:23:d9:f9:
f2:9b:77:ca:98:08:c1:e4:f4:43:f1:88:b7:54:60:bf:aa:cb:
4f:29:08:85:e5:c4:60:3f:97:d5:e8:37:58:9e:ac:b0:d1:71:
87:05:32:a0:c5:ed:32:44:63:87:0d:7a:55:fc:c3:4b:45:0c:
97:73:6a:f3:59:4a:cc:42:e3:eb:ce:ed:a6:47:a9:2c:49:93:
bd:3f:e2:da:df:4e:87:d1:17:42:a2:7f:f4:22:71:e8:bd:0c:
6d:0f:13:f4:63:e3:36:4a:27:ab:4b:0f:6a:2f:0b:d7:6d:e4:
d0:6b:3d:8b:26:be:a6:e7:ac:04:25:38:fa:ab:ef:08:b4:48:
58:24:30:4b:bc:b0:2f:84:bd:e5:81:23:a1:3c:d0:44:f1:7e:
83:75:a9:b9:10:8d:01:f4:d4:c8:17:42:77:0a:d8:2f:56:29:
67:a3:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:20 2024 by rpki-client on console-fra.rpki-client.org