Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/s5zxLYLYKGnL8IVpULqUVfsN5QM.roa
File: s5zxLYLYKGnL8IVpULqUVfsN5QM.roa (raw, json)
Hash identifier: FmAP3/5jqNyRfHsTthwZJ0CvByC+idADLzwg+UNJ1VM=
Subject key identifier: B3:9C:F1:2D:82:D8:28:69:CB:F0:85:69:50:BA:94:55:FB:0D:E5:03
Certificate issuer: /CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Certificate serial: 0188AA00B1CF218B934DD3C6A7F40CA8D288
Authority key identifier: 43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/s5zxLYLYKGnL8IVpULqUVfsN5QM.roa
Signing time: Sun 11 Jun 2023 10:29:12 +0000
ROA not before: Sun 11 Jun 2023 10:29:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15969
IP address blocks: 194.187.75.0/24 maxlen: 24
194.187.72.0/24 maxlen: 24
2a01:5e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:00:b1:cf:21:8b:93:4d:d3:c6:a7:f4:0c:a8:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Validity
Not Before: Jun 11 10:29:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b39cf12d82d82869cbf0856950ba9455fb0de503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:a0:5b:c9:18:b8:0b:af:fc:a4:1b:96:ad:
90:80:fe:dc:34:f2:34:dc:df:85:f7:79:af:52:37:
a8:e3:0c:38:fa:af:04:68:64:ae:65:1d:58:e1:00:
a1:e3:6d:44:8e:0f:57:a9:8a:00:24:35:aa:d9:48:
cc:10:62:df:b7:2a:94:09:9f:bc:3e:e1:4c:17:fb:
83:b8:0b:33:9b:78:3c:8f:39:4d:8e:97:93:00:bf:
e0:b9:95:6f:d9:0c:2b:4e:0b:ec:6a:2c:57:4e:b8:
79:14:f6:35:a6:51:4c:ef:c4:9d:b7:65:de:de:3f:
3a:41:85:d4:29:6e:a9:27:38:c9:60:5f:76:b8:fa:
64:30:08:4a:b1:5a:ee:8e:f9:9c:a4:b9:e7:90:64:
9f:87:7a:52:9a:03:6a:89:6d:3a:27:68:09:35:29:
d5:60:57:e4:c0:c1:fd:39:ed:5d:2d:b4:26:3a:99:
a7:7e:dd:fc:c8:7d:ac:6e:eb:cb:68:7e:d7:61:74:
8d:82:cf:af:f8:bd:91:4a:3c:a0:5a:8d:ec:7d:11:
c9:36:75:37:60:a5:3c:0a:1b:18:f0:54:eb:21:30:
99:bc:45:48:23:7a:57:f1:af:0c:39:71:8f:b1:ef:
e7:da:e2:27:0f:f2:8f:6f:97:dd:b9:14:90:e7:67:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9C:F1:2D:82:D8:28:69:CB:F0:85:69:50:BA:94:55:FB:0D:E5:03
X509v3 Authority Key Identifier:
keyid:43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/s5zxLYLYKGnL8IVpULqUVfsN5QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.72.0/24
194.187.75.0/24
IPv6:
2a01:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
8a:6b:f2:c5:7f:62:14:ab:2a:46:a2:99:48:0b:25:2c:18:10:
41:e8:e7:8f:52:90:1d:09:42:14:42:c9:f2:67:79:03:c6:7f:
01:eb:4b:7c:c4:86:38:ef:67:4e:53:6a:af:c0:2f:d3:35:91:
a0:96:61:23:2d:09:84:40:7f:c8:c2:c5:89:63:a8:fc:f5:b6:
e5:fb:48:18:21:6d:37:37:74:64:b7:d3:72:44:a6:37:e6:94:
3f:f3:3b:35:56:93:3a:6b:47:2f:a5:4a:25:54:a1:98:fd:50:
07:96:c0:9f:e7:90:ee:af:a9:6c:21:82:33:56:68:df:6a:c7:
55:b6:ff:8e:10:15:12:c4:17:9e:79:21:bb:ec:e9:1f:62:74:
94:17:2b:6d:f7:1c:f1:5b:c1:a1:dc:c5:2f:38:bd:36:6f:a2:
4d:48:76:be:4c:1c:d2:f7:34:62:4f:97:e7:ed:3b:7d:80:19:
ef:36:57:7c:02:ec:c2:05:a6:1f:2c:86:55:05:6d:c2:57:25:
21:ba:65:dd:e3:89:17:52:4a:f4:a3:7c:0c:f2:4a:a8:06:70:
9c:92:49:6b:4d:f5:93:95:20:51:91:69:7e:b2:04:69:d7:09:
5d:d0:bb:af:f0:65:5f:51:85:ed:e4:0f:3d:85:21:c5:9a:b2:
91:15:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:17 2024 by rpki-client on console-fra.rpki-client.org