Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/0EOUFQ2A43fHxECF5NyArCZ1OjY.roa
File: 0EOUFQ2A43fHxECF5NyArCZ1OjY.roa (raw, json)
Hash identifier: HapQR0mOJDTGGraT6KQm1vuExY0KXyTc0NFGCEont7I=
Subject key identifier: D0:43:94:15:0D:80:E3:77:C7:C4:40:85:E4:DC:80:AC:26:75:3A:36
Certificate issuer: /CN=db3f546b24b7dbb0984a09c62660a52bad287757
Certificate serial: 01856C011B2494EBDF6188A951C87D812848
Authority key identifier: DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/0EOUFQ2A43fHxECF5NyArCZ1OjY.roa
Signing time: Sun 01 Jan 2023 06:24:49 +0000
ROA not before: Sun 01 Jan 2023 06:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.172.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:1b:24:94:eb:df:61:88:a9:51:c8:7d:81:28:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db3f546b24b7dbb0984a09c62660a52bad287757
Validity
Not Before: Jan 1 06:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d04394150d80e377c7c44085e4dc80ac26753a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:9c:a7:1d:cc:a1:c2:39:08:ef:2a:af:df:
04:19:3e:36:46:d5:cf:8c:9f:9b:4d:1c:3c:c1:ca:
73:15:b5:56:25:fd:89:45:1a:ba:7b:78:87:90:5a:
37:1a:c2:94:ae:08:71:46:6e:ad:b6:dd:07:94:bf:
75:d6:3c:09:38:e8:c7:ea:43:1e:28:a5:77:a0:f4:
c9:ea:9b:7e:7d:0e:45:e1:e1:71:d7:c0:b1:03:e5:
f2:49:00:a5:96:f7:29:88:72:94:06:7e:8d:67:a1:
2e:42:d8:ea:45:f9:50:6f:28:41:25:77:5e:bb:5c:
af:cf:e9:e9:3a:ce:99:ad:2b:8c:2c:67:97:6f:23:
d8:2a:18:04:73:9d:cf:e3:1d:b2:e7:5f:94:97:73:
ba:7f:db:5c:70:a2:32:b6:ed:4b:62:bf:9f:b0:fb:
45:5b:67:37:74:23:a5:c1:64:5b:f6:fc:95:00:24:
ba:7c:da:95:f8:44:0e:9a:56:6b:99:c7:e1:47:5a:
d7:70:53:4d:fe:fd:20:80:31:af:79:35:76:07:c0:
17:e5:c8:c3:6c:b2:a0:cd:16:2e:9c:74:76:e6:d6:
ef:8b:0b:7a:39:86:7b:a5:13:78:b5:0b:53:5b:1c:
eb:3a:a6:82:d1:6d:e4:22:81:e4:81:f4:fe:67:55:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:94:15:0D:80:E3:77:C7:C4:40:85:E4:DC:80:AC:26:75:3A:36
X509v3 Authority Key Identifier:
keyid:DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/0EOUFQ2A43fHxECF5NyArCZ1OjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:92:2c:28:48:4f:6b:e1:6b:da:13:a7:ac:2f:73:cb:c9:0e:
0e:b3:cb:6d:60:a3:bf:4d:8f:7c:84:ef:a2:c1:da:dd:af:49:
6c:8b:d2:e3:9a:8c:09:5f:ce:24:56:a1:de:13:f5:43:61:8f:
8b:89:d4:07:1e:c5:dd:18:bd:04:33:20:04:38:b5:f5:ee:c0:
37:cb:5b:8f:66:d6:e5:06:8c:4b:12:db:68:14:0e:ee:d5:26:
b5:c5:67:bc:c8:9c:f5:bc:6b:c8:be:09:88:51:21:a0:23:91:
cf:8f:3c:ff:d1:5c:dd:58:47:73:d4:06:fe:85:73:b8:77:dd:
15:35:44:93:a8:ec:f2:14:df:2c:12:06:7c:2c:31:e8:b0:79:
dd:74:d3:a1:c9:74:40:5a:26:84:12:b7:31:e1:e1:7e:09:2e:
65:65:26:f8:72:a8:89:85:6f:66:dd:a9:07:63:77:cf:f8:20:
c5:51:a1:6c:b1:cf:39:bf:6c:81:78:3a:d4:81:92:5b:a4:26:
67:f8:50:8e:4f:8a:2e:23:79:7b:e8:85:1b:d1:02:bc:0a:7f:
93:31:a8:17:8b:a4:26:51:e7:a2:9f:68:5d:5c:4f:c3:44:fc:
6d:13:e9:ea:48:35:0a:2f:87:df:5d:ff:10:e9:b3:28:e1:f7:
b2:c8:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:40 2023 by rpki-client on console.sobornost.net