Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/UAFWPH40jqhQjmf_Cx1MpX8zPHw.roa
File: UAFWPH40jqhQjmf_Cx1MpX8zPHw.roa (raw, json)
Hash identifier: yTW/B/818Y309cmMs8w+vUBcKNlIqwGQnS3UR1t3Hdw=
Subject key identifier: 50:01:56:3C:7E:34:8E:A8:50:8E:67:FF:0B:1D:4C:A5:7F:33:3C:7C
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 02CCDA37
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/UAFWPH40jqhQjmf_Cx1MpX8zPHw.roa
Signing time: Sat 01 Jan 2022 13:02:33 +0000
ROA not before: Sat 01 Jan 2022 13:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59631
IP address blocks: 158.172.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46979639 (0x2ccda37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 13:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5001563c7e348ea8508e67ff0b1d4ca57f333c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:3e:57:01:30:cc:d2:3b:7c:8c:2e:d7:3e:
b8:a5:02:97:09:38:b8:f5:8f:a6:7e:29:30:cd:f3:
e6:a9:4d:34:b1:c4:c6:03:52:32:9d:a2:2d:ca:74:
4b:b0:6d:56:60:0b:d5:8f:f3:35:fd:b3:22:ab:b1:
41:6b:0a:b0:ec:60:1d:a4:c3:ab:da:44:0f:85:c4:
b0:49:80:cc:9a:36:c4:88:4e:18:83:01:69:66:a9:
7e:e6:e0:ff:c0:a0:3a:66:f5:96:09:fe:28:c1:cf:
cf:1a:b4:c8:0b:49:d7:5b:82:bd:29:0e:bc:1a:27:
cc:c0:e4:d1:6b:3c:43:31:81:77:e7:1d:6c:65:0d:
9e:fb:5d:30:1b:4a:5a:f8:bd:d5:a8:f8:70:0c:ef:
bd:60:76:52:39:84:24:23:92:a2:87:d3:6e:fd:cf:
c3:43:ba:87:20:3d:c1:da:cb:30:6d:62:d0:97:78:
19:63:5b:bf:e0:ab:d2:14:a6:49:b5:86:23:11:20:
f3:e0:21:14:6d:34:c2:5e:c4:4e:11:7a:38:f0:bc:
c5:73:7d:94:1d:43:05:5c:78:d6:c5:99:bd:04:99:
6b:de:f3:19:a2:83:20:68:41:2a:6b:bc:2c:8d:2e:
dd:48:b2:f1:47:1b:d4:96:4d:eb:ba:0b:83:18:d6:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:56:3C:7E:34:8E:A8:50:8E:67:FF:0B:1D:4C:A5:7F:33:3C:7C
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/UAFWPH40jqhQjmf_Cx1MpX8zPHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:22:49:67:01:02:c6:1a:6a:0a:9d:ac:eb:e1:5f:ca:0c:d7:
4b:6a:5f:d1:13:8c:63:14:f2:15:9b:3f:6e:03:e8:0d:80:db:
43:4f:03:8d:73:7c:9b:98:dd:9e:1f:16:ae:af:12:0c:9d:90:
19:ae:d1:c5:34:2a:fb:c2:f0:63:45:55:45:12:b9:75:4a:31:
fd:9f:82:81:8b:f6:80:88:3f:cb:2e:63:15:e3:8d:c1:0e:9a:
9a:bf:d8:39:e9:ce:f0:b9:b1:9f:d9:9c:fd:f7:6a:fa:4a:19:
3e:11:d2:ac:ef:6f:6b:4e:e3:16:6c:1a:e8:62:9a:e4:70:3a:
bb:c8:b4:52:22:0c:44:0a:2d:08:f2:d0:80:b5:8a:e8:bc:a7:
f7:dc:99:71:9e:ca:e4:00:ab:6a:d1:ff:56:4a:36:6b:ac:0e:
bf:73:f0:61:e7:69:6d:a9:33:96:fe:0f:5b:dc:03:f3:31:e1:
67:1d:61:6d:3d:b2:f0:c1:e7:de:f3:51:7f:b5:81:72:48:47:
d4:58:df:37:95:14:2f:88:37:db:88:49:9e:d5:d1:ba:cb:c3:
0b:5d:ab:eb:6a:b6:60:24:31:e6:b1:a4:df:1a:94:bd:67:a8:
a6:23:1f:4e:06:51:46:fc:4e:4d:72:61:a5:92:a2:f0:7a:e8:
e1:40:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:24 2025 by rpki-client