Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/RTcioBpLBr-zKva2UboygdPc6e4.roa
File: RTcioBpLBr-zKva2UboygdPc6e4.roa (raw, json)
Hash identifier: CqSjsHsIoHQvYLffMVsg0AFw1r7idHMSmD7dZsF2veY=
Subject key identifier: 45:37:22:A0:1A:4B:06:BF:B3:2A:F6:B6:51:BA:32:81:D3:DC:E9:EE
Certificate issuer: /CN=06653b049325fc287373325d0da4d9631c951e78
Certificate serial: 01856CEF3E9922EB76C3DB16BED3CC1E3FA0
Authority key identifier: 06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/RTcioBpLBr-zKva2UboygdPc6e4.roa
Signing time: Sun 01 Jan 2023 10:44:56 +0000
ROA not before: Sun 01 Jan 2023 10:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51487
IP address blocks: 5.252.92.0/22 maxlen: 22
5.252.92.0/24 maxlen: 24
5.252.95.0/24 maxlen: 24
5.252.94.0/24 maxlen: 24
5.252.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:3e:99:22:eb:76:c3:db:16:be:d3:cc:1e:3f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06653b049325fc287373325d0da4d9631c951e78
Validity
Not Before: Jan 1 10:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453722a01a4b06bfb32af6b651ba3281d3dce9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:ac:17:06:72:86:35:5b:28:8d:4f:c3:00:
94:3d:85:33:48:88:47:01:3f:96:34:6d:bf:a5:10:
96:46:8f:9c:80:c3:94:99:93:ec:ff:bf:20:61:29:
ae:b1:58:c3:97:11:48:6d:4a:ba:8d:85:f9:40:3f:
22:92:b2:67:2a:ad:e5:76:c7:b2:46:00:46:86:87:
4d:7d:80:0b:46:08:82:05:cc:fd:d6:b2:94:fc:b1:
66:35:a6:4e:46:ff:e3:a8:30:e7:40:2a:9d:b1:08:
f4:29:36:12:12:4e:f9:1f:ec:2a:b1:48:8b:cc:04:
fe:44:33:50:d6:35:a0:92:3c:90:35:ae:8d:c8:2c:
01:69:32:33:db:60:49:67:45:db:95:a3:84:4b:30:
ae:d0:69:c3:7e:1c:39:b7:19:67:0b:93:39:a0:44:
0c:b1:d1:51:91:89:ed:47:77:f1:4d:fa:e0:b4:ed:
df:8d:47:de:75:78:2d:da:01:17:a0:0c:e8:d7:90:
16:83:f8:7c:c2:4f:c2:61:7b:fe:c9:f2:72:ab:62:
fd:ee:59:4b:97:3d:04:29:62:36:70:85:9f:33:c0:
30:d8:86:c2:ce:d0:ea:77:c8:eb:2b:67:ff:91:66:
9f:c5:93:aa:40:a6:24:96:a2:6c:c3:08:48:5d:7d:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:22:A0:1A:4B:06:BF:B3:2A:F6:B6:51:BA:32:81:D3:DC:E9:EE
X509v3 Authority Key Identifier:
keyid:06:65:3B:04:93:25:FC:28:73:73:32:5D:0D:A4:D9:63:1C:95:1E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmU7BJMl_ChzczJdDaTZYxyVHng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/RTcioBpLBr-zKva2UboygdPc6e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/65c891-bb51-4918-b279-1c9aa1ed4c9d/1/BmU7BJMl_ChzczJdDaTZYxyVHng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.92.0/22
Signature Algorithm: sha256WithRSAEncryption
90:be:5f:7f:03:e8:75:34:69:4f:6a:fa:06:fe:ca:78:5a:c1:
c8:53:60:8d:10:1b:dd:c9:dc:11:e6:30:b5:12:42:bd:e3:f0:
af:0a:1f:5b:9c:c0:fd:a8:d6:b2:f1:4c:21:e1:b3:ea:03:bb:
73:bd:85:6c:f4:86:df:6c:98:22:90:7e:4e:a3:9f:e2:dd:5b:
cb:49:6e:86:ab:43:6c:fb:37:c8:78:a2:2d:be:a8:b9:fd:0b:
a1:4e:7b:5d:4d:bb:60:82:d1:c8:89:51:58:7b:10:a5:39:39:
35:7b:8d:cb:2b:76:77:df:f9:67:ef:4c:fa:fc:44:17:05:17:
74:08:16:3c:ce:97:0e:4d:f0:cd:5f:01:ba:4a:ac:69:45:2e:
21:d8:19:4c:f6:af:8c:b7:99:8f:6b:74:a7:80:e3:76:21:cd:
d1:c2:f6:b8:38:5a:ce:b5:01:64:d1:69:f9:eb:05:21:37:7d:
fa:4f:30:45:c9:5d:ed:f5:b0:35:cd:3b:9d:1f:f9:45:c4:21:
9b:e9:fe:5b:a9:d4:f4:06:21:c3:8b:fd:ca:67:e8:ce:d6:20:
e8:1c:23:36:b0:5f:33:c2:f2:7c:13:f7:c4:8d:fb:8a:a4:8a:
7a:26:bf:99:55:c7:26:83:ff:2a:fe:03:73:a3:1c:24:ea:5f:
74:88:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 16:48:24 2023 by rpki-client on console-fra.rpki-client.org