Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/rM68zlQxx7bmgVBFMC7FfKWgX9k.roa
File: rM68zlQxx7bmgVBFMC7FfKWgX9k.roa (raw, json)
Hash identifier: lIuM2dMk95ePyHIixonWygW32+jKOaSvA5HLSFQSP5s=
Subject key identifier: AC:CE:BC:CE:54:31:C7:B6:E6:81:50:45:30:2E:C5:7C:A5:A0:5F:D9
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D7868E6E7838F53A55B0D7697009FF1
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/rM68zlQxx7bmgVBFMC7FfKWgX9k.roa
Signing time: Sun 01 Jan 2023 13:14:45 +0000
ROA not before: Sun 01 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 5.181.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:68:e6:e7:83:8f:53:a5:5b:0d:76:97:00:9f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=accebcce5431c7b6e6815045302ec57ca5a05fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:23:a3:5d:0d:28:10:47:bb:7e:36:94:69:
d0:0c:db:bb:41:c0:f9:3c:d3:8e:f1:15:93:a3:c5:
f6:8f:ff:29:2a:2d:8d:d0:be:47:b8:24:d9:af:6f:
07:5b:bb:c8:de:9c:54:21:6c:5a:f0:ca:c4:38:fe:
3f:f9:19:eb:95:78:ea:99:87:f4:c3:7b:b0:88:1e:
10:07:49:16:04:78:5d:42:2d:78:64:bf:bd:8b:f8:
b7:25:b3:c4:dc:e9:b2:8b:a4:ab:7a:ef:32:2e:10:
be:54:a7:57:94:a1:e9:22:55:b6:cd:9a:f9:d8:cd:
5a:74:a0:77:8b:f8:d4:b0:0f:b7:a1:89:60:27:69:
9b:d5:29:24:1f:33:f9:d4:2c:3d:a2:fd:16:32:36:
15:76:c4:7f:b5:53:40:3f:fd:42:77:4a:1a:59:56:
e9:12:5b:6e:69:69:0a:ec:1b:77:50:bd:35:46:85:
78:59:d1:80:e6:42:76:ba:79:f8:b5:2c:c8:a1:7a:
dd:bd:95:14:75:af:9e:5e:70:62:cd:af:1f:b5:13:
4b:35:74:58:89:bf:31:5f:8c:9c:93:9d:1d:90:78:
44:01:27:bd:21:a4:8e:41:58:70:47:ba:75:e1:05:
db:05:f4:d0:26:17:6e:ba:7a:4a:ce:c7:2d:6e:50:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CE:BC:CE:54:31:C7:B6:E6:81:50:45:30:2E:C5:7C:A5:A0:5F:D9
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/rM68zlQxx7bmgVBFMC7FfKWgX9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:dc:dd:e9:89:85:89:5a:f6:e6:6d:c4:a6:17:33:c4:2e:68:
bf:18:98:36:ef:bc:1c:01:d6:1b:81:f0:5f:ad:7b:05:06:39:
98:ae:84:2d:1e:4b:84:a7:05:20:df:cf:5e:1e:8d:52:e6:ab:
37:f6:28:2e:b8:ba:0e:56:1a:5e:5a:d8:ad:da:01:00:e1:9b:
53:af:6b:c9:a8:37:27:3b:4a:20:ad:c3:42:61:b0:e8:83:10:
a6:20:ec:7c:a8:39:2a:07:49:d1:b0:5b:dd:23:bd:74:53:a0:
ed:70:69:e4:e9:ac:6e:aa:3e:28:c2:ce:a4:dc:e4:e0:e4:6f:
9c:5a:7b:c6:58:48:aa:35:c3:9d:1f:37:57:8d:6e:aa:ba:6a:
2c:8c:b4:26:d6:71:61:9a:e5:aa:14:0a:f6:a9:0b:3c:8b:e9:
9c:82:e7:fa:9c:d5:1d:1d:01:52:bb:4f:1b:e1:2f:a2:55:81:
3a:78:21:d4:5b:25:a2:bb:ca:9e:c8:4a:25:21:ad:47:6d:3b:
e4:73:aa:7d:54:56:c3:e4:27:29:be:13:29:d1:9c:24:5a:41:
bf:f0:a7:93:fb:c3:07:f0:8e:b2:cd:cb:13:2e:54:04:9d:d1:
29:af:b8:ff:13:2e:74:6a:2a:cf:46:af:8c:35:f3:44:8d:53:
a3:48:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:34 2023 by rpki-client on console-ams.rpki-client.org