Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/4wtiVmlocQ9xEZwaBgl_7P3Vq5E.roa
File: 4wtiVmlocQ9xEZwaBgl_7P3Vq5E.roa (raw, json)
Hash identifier: 3YncXP3nYgsk4HRsIs4K2hoptIwI0qpq/4r/D+3Ecms=
Subject key identifier: E3:0B:62:56:69:68:71:0F:71:11:9C:1A:06:09:7F:EC:FD:D5:AB:91
Certificate issuer: /CN=06653b049325fc287373325d0da4d9631c951e78
Certificate serial: 01856CEF3F104C999B863BA74C4991C9AB5A
Authority key identifier: 06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/4wtiVmlocQ9xEZwaBgl_7P3Vq5E.roa
Signing time: Sun 01 Jan 2023 10:44:56 +0000
ROA not before: Sun 01 Jan 2023 10:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209910
IP address blocks: 5.252.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:3f:10:4c:99:9b:86:3b:a7:4c:49:91:c9:ab:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06653b049325fc287373325d0da4d9631c951e78
Validity
Not Before: Jan 1 10:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e30b62566968710f71119c1a06097fecfdd5ab91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:46:3e:39:f5:ad:a8:ab:e0:40:f4:f8:05:
7b:74:af:72:65:72:55:b6:26:c7:c7:e2:d2:2b:02:
39:99:ef:88:eb:a0:ff:40:0a:b7:b3:71:eb:3f:d3:
4b:60:ef:5e:81:91:23:06:38:c5:95:0a:ab:84:a1:
17:36:b3:07:30:9b:1b:17:da:4d:7e:67:86:54:30:
19:a9:7f:cb:27:c3:26:a9:88:44:f0:8e:16:47:fa:
51:02:4a:63:18:12:da:e8:ef:96:93:8d:4f:59:17:
45:aa:b0:a6:d0:46:5f:e7:28:e9:ca:06:84:26:ff:
39:d7:c4:f7:6c:f7:f9:2d:7d:db:d4:14:d9:f9:46:
5a:35:bf:35:0e:51:fe:c8:16:ca:6e:fc:ab:32:ca:
d2:3c:82:6e:89:eb:fb:ad:d1:b9:c6:54:74:f7:2e:
fb:d7:22:bf:10:ec:02:e5:e7:0e:f8:44:45:e4:5f:
f9:f9:18:3b:32:a6:7c:2b:ea:61:13:ac:46:f1:be:
d8:47:3d:04:7c:09:58:87:ba:d0:54:11:8f:0a:c6:
85:a5:d7:8c:13:4e:e7:16:97:ee:72:12:0b:f9:6a:
37:02:9f:16:67:aa:db:07:9d:14:0a:5c:1e:2b:1e:
22:46:8f:0f:58:6f:7b:50:c6:7e:a7:bf:ef:3b:ea:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:62:56:69:68:71:0F:71:11:9C:1A:06:09:7F:EC:FD:D5:AB:91
X509v3 Authority Key Identifier:
keyid:06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/4wtiVmlocQ9xEZwaBgl_7P3Vq5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/BmU7BJMl_ChzczJdDaTZYxyVHng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.92.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:0a:c4:4e:77:1a:27:26:9e:69:8d:2e:ee:6a:11:f9:30:ce:
a1:79:e7:3b:f4:1b:87:10:6c:a8:4d:14:f9:99:db:3b:ba:e9:
43:ad:fa:30:27:a4:4d:69:9d:b6:82:ef:79:58:ff:7a:14:f5:
85:0b:a7:42:7d:c8:56:b8:f2:a9:d0:64:db:8e:17:b7:ab:21:
95:23:38:ed:8b:2b:84:67:90:78:e5:cb:45:54:2c:ff:61:9b:
10:26:9f:7b:cf:f6:2a:2a:ce:b7:5f:e9:9b:73:67:b3:c3:d1:
f5:cc:b0:4d:d0:de:ef:87:54:32:5c:6c:c7:4f:79:6c:8d:8c:
e3:c1:c2:36:71:ea:fc:f7:dd:2e:a9:99:49:4d:6a:35:e8:eb:
e3:fb:bd:26:c2:df:de:60:bf:fe:48:55:58:2f:30:a4:9b:02:
49:bc:0b:8f:cd:b6:df:e5:50:24:c0:6f:f0:18:67:87:26:d5:
fc:5e:0c:c7:9b:57:cd:e8:1d:32:bb:95:dc:f6:41:39:41:c4:
3d:f2:e4:8d:45:17:b2:30:44:e5:4e:b8:60:c0:63:d8:f4:49:
02:40:a4:d1:64:b4:47:54:91:8c:43:61:d8:b2:97:12:b0:54:
12:93:eb:55:46:dc:d6:dc:7d:0e:db:ec:c1:95:ff:41:d8:99:
15:16:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 16:48:24 2023 by rpki-client on console-fra.rpki-client.org