Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/G1fZR7IXZGXrhqssJii6jaMTBF8.roa
File: G1fZR7IXZGXrhqssJii6jaMTBF8.roa (raw, json)
Hash identifier: h4BtYqWepAnor1aMXRzaVzgt6+WpdPkCtvpntZF9lzc=
Subject key identifier: 1B:57:D9:47:B2:17:64:65:EB:86:AB:2C:26:28:BA:8D:A3:13:04:5F
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0185719E87FC2D2FE54B8228A031EF10270C
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/G1fZR7IXZGXrhqssJii6jaMTBF8.roa
Signing time: Mon 02 Jan 2023 08:34:53 +0000
ROA not before: Mon 02 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64411
IP address blocks: 158.172.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:87:fc:2d:2f:e5:4b:82:28:a0:31:ef:10:27:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b57d947b2176465eb86ab2c2628ba8da313045f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:49:8d:c8:b0:c8:ae:df:1a:36:52:c5:dd:
02:8d:2e:84:4b:68:79:3d:9f:f1:e0:5c:26:a6:bb:
9d:98:b4:0e:c8:37:ef:16:f1:db:56:68:01:09:fb:
4a:98:ef:03:b0:7b:45:e3:21:15:48:96:6a:32:65:
ce:f7:33:74:b4:2c:a9:85:6a:3f:14:7d:2b:30:da:
16:9c:68:81:7e:6f:91:21:19:4a:d9:3b:b3:1e:2a:
a0:b7:10:0b:f0:24:82:fd:dc:c1:af:40:f1:18:4d:
90:a7:d9:73:ae:89:39:cb:43:21:7d:9a:79:1f:d0:
e8:0f:ac:3b:62:6a:00:a6:c6:5f:a3:48:23:26:29:
36:2e:2a:5a:ae:4c:c4:4a:5f:11:8e:e2:88:fa:04:
8e:c8:17:6f:b4:90:fa:9c:66:50:fd:57:1d:6b:ff:
bc:b3:e0:5f:ab:7d:d0:b4:fd:c9:04:63:99:a7:6b:
2b:6e:8a:e0:9a:70:3a:e8:47:c3:c8:5c:2b:02:65:
9d:c0:25:c5:93:27:99:23:9b:8f:b7:92:4d:57:c4:
a5:e1:ce:79:46:2a:df:1c:14:08:df:d6:2b:d5:4d:
5b:31:ca:da:c4:fb:c3:d0:7b:9c:6a:cb:b5:b1:70:
3d:6a:7c:a4:4a:fc:7c:6f:9f:9b:89:3d:e0:dd:91:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:D9:47:B2:17:64:65:EB:86:AB:2C:26:28:BA:8D:A3:13:04:5F
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/G1fZR7IXZGXrhqssJii6jaMTBF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.0.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:5b:38:97:eb:1c:91:8a:95:20:0b:48:bd:52:76:2d:90:2e:
8b:6f:af:c6:07:29:c5:a7:2f:07:a8:9d:ac:cd:cc:1b:5a:12:
83:e1:46:5a:ff:18:d6:93:6c:72:a7:e6:c1:6f:42:53:ce:db:
d5:70:9b:9a:bd:53:98:8a:17:5e:62:2f:33:db:70:ba:c2:7b:
ce:87:e1:6d:a5:7f:5e:11:24:5c:ac:73:93:68:15:51:d8:2b:
61:7b:7a:34:06:43:a4:88:b2:58:8c:a7:e9:ba:e0:f5:37:2e:
70:72:4d:99:38:bc:dd:67:50:ee:27:0c:23:74:59:18:70:7e:
bb:c6:9d:5c:6b:7f:8f:1f:1b:0f:87:00:40:5b:0a:44:c6:67:
8d:25:c7:66:27:e2:cf:45:27:b8:34:94:a3:45:cb:c8:be:f4:
49:88:4d:8b:e8:34:6a:dd:7b:98:4a:82:91:17:5f:a2:56:91:
be:8f:f4:bb:0f:86:ff:30:a0:ea:bf:ec:e4:f6:26:72:26:97:
e0:01:d2:e7:54:a0:2a:8f:d0:ff:07:25:09:95:20:3c:c3:6c:
dc:67:4f:de:c4:2e:a6:e8:4e:98:72:54:ae:82:a0:8d:0e:3a:
eb:a2:0d:75:ed:fe:c3:3e:50:9a:3c:d1:74:cf:3f:ed:2a:49:
6d:67:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:57 2025 by rpki-client