Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/24b795-3c72-4029-8ce4-9e19add807f1/1/CKbfX35cVeZP8rwBtYtQXGJAL78.roa
File: CKbfX35cVeZP8rwBtYtQXGJAL78.roa (raw, json)
Hash identifier: ulTCgUrnbQs40uG/+pK5jSVEkXPiGtOF0nGVxE909R8=
Subject key identifier: 08:A6:DF:5F:7E:5C:55:E6:4F:F2:BC:01:B5:8B:50:5C:62:40:2F:BF
Certificate issuer: /CN=dc3e6b5d18150c93f8429e63920e967ae4ec6018
Certificate serial: 038691CA
Authority key identifier: DC:3E:6B:5D:18:15:0C:93:F8:42:9E:63:92:0E:96:7A:E4:EC:60:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D5rXRgVDJP4Qp5jkg6WeuTsYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/24b795-3c72-4029-8ce4-9e19add807f1/1/CKbfX35cVeZP8rwBtYtQXGJAL78.roa
Signing time: Sat 01 Jan 2022 06:56:17 +0000
ROA not before: Sat 01 Jan 2022 06:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48173
IP address blocks: 5.183.22.0/23 maxlen: 23
5.183.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59150794 (0x38691ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e6b5d18150c93f8429e63920e967ae4ec6018
Validity
Not Before: Jan 1 06:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08a6df5f7e5c55e64ff2bc01b58b505c62402fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:57:cf:af:e7:d1:b4:d4:27:a6:ac:f3:18:
a9:cf:ed:85:b9:a7:b2:76:ae:50:79:e1:5a:b3:f3:
99:df:db:83:1a:1e:a3:60:9b:a7:5d:03:e4:a8:6c:
dd:e2:60:91:b8:c3:ce:70:e4:b2:0a:05:57:f2:13:
e0:0f:9a:c4:f0:04:71:11:2d:04:b8:08:b0:3c:4b:
0a:9e:a3:51:a3:57:88:4b:74:fb:db:20:0d:fa:12:
91:bf:4f:bf:49:d2:32:83:56:2a:5b:20:5d:b1:bc:
28:2d:bf:ea:24:7d:ad:ff:2f:00:4a:90:b6:b7:ac:
ce:6c:1c:3b:0b:ef:20:39:a0:0e:a0:5a:51:a2:53:
20:8a:a3:be:05:48:d4:e9:bf:84:cc:ab:ed:3b:74:
b1:10:22:b9:dc:5a:0a:86:97:f0:14:40:ac:b4:e9:
b1:21:2d:e8:80:6a:2d:db:59:78:cb:84:97:33:59:
d8:6f:35:33:e5:27:03:66:6c:27:6e:55:50:93:98:
78:b7:0a:fc:d1:38:b7:8b:2c:5e:e2:ca:d7:4d:6a:
88:07:be:0a:9d:a6:b5:ff:8f:65:41:e3:f1:96:1d:
a6:82:24:22:76:63:45:1f:f8:00:27:f2:44:31:d2:
25:be:94:42:e2:03:52:72:c4:c7:b9:92:e4:c8:8b:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A6:DF:5F:7E:5C:55:E6:4F:F2:BC:01:B5:8B:50:5C:62:40:2F:BF
X509v3 Authority Key Identifier:
keyid:DC:3E:6B:5D:18:15:0C:93:F8:42:9E:63:92:0E:96:7A:E4:EC:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D5rXRgVDJP4Qp5jkg6WeuTsYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/24b795-3c72-4029-8ce4-9e19add807f1/1/CKbfX35cVeZP8rwBtYtQXGJAL78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/24b795-3c72-4029-8ce4-9e19add807f1/1/3D5rXRgVDJP4Qp5jkg6WeuTsYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:1b:46:0c:2b:27:39:38:ba:f2:a5:44:a8:37:b8:03:4b:4d:
cd:09:2b:c1:dc:1c:e2:5e:90:20:63:ba:2e:67:bb:75:0a:e4:
8d:15:be:39:75:86:3d:e4:08:d5:49:96:97:93:17:a6:8a:28:
05:e4:94:7b:f6:b2:ce:92:f8:7c:4b:8c:0a:15:59:7e:ae:3e:
8f:60:23:0f:c3:6b:e3:be:56:8b:b6:74:34:93:88:f8:6d:be:
6b:25:24:88:59:9e:d4:79:db:61:b0:60:2a:04:0e:c7:a4:c9:
da:b8:78:9d:1c:db:37:d6:53:80:14:bf:84:de:80:e4:c3:b3:
f4:e4:ac:b8:d2:6b:e6:76:d3:cb:97:11:ae:20:5e:84:e4:95:
02:0f:c2:eb:fc:55:c9:e2:bb:50:14:76:b4:86:fb:4f:fa:5f:
34:6d:fa:3c:a5:fb:d2:9f:5f:0f:6c:3f:9c:6b:6b:46:34:b3:
58:b6:1d:8e:c9:33:f8:b5:2e:78:22:8a:ec:fc:ee:4c:4c:b6:
10:6a:9d:ce:72:17:a2:45:6c:86:a3:7b:23:04:ee:48:55:18:
5d:b4:ed:f3:df:1e:ba:a0:2a:4b:90:eb:7f:71:fd:04:6a:78:
97:bd:66:95:db:84:7d:e4:2e:c5:d5:d8:5d:41:9c:81:a1:fc:
21:8e:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:40 2024 by rpki-client on console-fra.rpki-client.org