Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/G5KxPDU2h6B-GQ3GyCPx6U-iQ8U.roa
File: G5KxPDU2h6B-GQ3GyCPx6U-iQ8U.roa (raw, json)
Hash identifier: eFNvcsOtGHONflcUQZNF6SMGktFeeJqDFSA7k+Ops3A=
Subject key identifier: 1B:92:B1:3C:35:36:87:A0:7E:19:0D:C6:C8:23:F1:E9:4F:A2:43:C5
Certificate issuer: /CN=9abe61fbf58bc8f281f567b9c814a270eb530655
Certificate serial: 302170C4
Authority key identifier: 9A:BE:61:FB:F5:8B:C8:F2:81:F5:67:B9:C8:14:A2:70:EB:53:06:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mr5h-_WLyPKB9We5yBSicOtTBlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/G5KxPDU2h6B-GQ3GyCPx6U-iQ8U.roa
Signing time: Sat 01 Jan 2022 15:55:31 +0000
ROA not before: Sat 01 Jan 2022 15:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60409
IP address blocks: 81.25.96.0/20 maxlen: 20
81.25.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807497924 (0x302170c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abe61fbf58bc8f281f567b9c814a270eb530655
Validity
Not Before: Jan 1 15:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b92b13c353687a07e190dc6c823f1e94fa243c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:26:03:c9:b4:37:4b:ae:a6:26:cc:04:ee:
5a:a3:df:3b:fa:9e:0f:bd:22:05:ba:b1:12:47:87:
77:6a:99:22:5d:03:6c:a6:d8:74:cf:49:70:4c:92:
77:e6:39:32:44:58:e7:08:56:f2:cf:ea:3c:e8:64:
46:e8:6b:83:3e:c8:25:02:e4:b9:9d:62:d7:83:24:
9f:cb:92:4c:0f:62:98:bd:f4:98:f0:ec:30:be:81:
be:e2:17:87:a3:85:c2:55:be:8c:23:89:b5:6a:9b:
76:d9:97:12:83:5b:89:42:7c:d8:10:6f:58:1b:66:
7f:0f:54:4a:ef:91:41:77:10:cf:f3:83:0c:24:72:
8e:64:9d:ae:a4:b0:d5:fc:b2:68:c5:23:d0:61:c6:
1f:c3:f4:16:65:38:4d:88:d7:95:19:59:78:ec:d8:
e9:59:3e:8c:77:15:10:e0:4a:5c:d4:74:ed:f3:72:
b7:6f:0d:06:53:40:bc:26:df:fc:f0:61:18:96:9d:
5b:93:f0:ac:f1:f3:73:15:60:b5:44:6f:b6:01:da:
d3:f4:c3:2d:50:fa:9b:c0:05:1c:f8:78:96:0f:54:
93:82:1a:3a:a4:b9:c7:87:a7:3e:98:5f:e4:94:25:
2e:69:8a:2e:0d:ad:00:92:bc:a9:61:b4:5e:27:50:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:B1:3C:35:36:87:A0:7E:19:0D:C6:C8:23:F1:E9:4F:A2:43:C5
X509v3 Authority Key Identifier:
keyid:9A:BE:61:FB:F5:8B:C8:F2:81:F5:67:B9:C8:14:A2:70:EB:53:06:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mr5h-_WLyPKB9We5yBSicOtTBlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/G5KxPDU2h6B-GQ3GyCPx6U-iQ8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/mr5h-_WLyPKB9We5yBSicOtTBlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:de:8d:5a:c9:f2:3f:b8:3a:03:44:f2:5e:64:61:b1:be:96:
18:56:9d:c1:f7:d4:cd:31:b9:49:90:a6:9f:18:55:cd:eb:2d:
69:28:f0:de:38:da:bc:a4:49:a3:5e:c8:78:35:7d:07:b8:9e:
9c:99:cc:9d:58:1c:df:e0:41:09:61:30:82:f0:ce:be:25:65:
a2:76:95:3f:1d:b1:4d:89:6d:eb:5a:85:12:4a:31:92:36:e9:
f2:29:e9:cb:ca:e9:4c:bd:5d:0d:02:4e:71:fd:68:d7:9b:51:
3f:b9:f5:34:f2:ab:bf:45:93:25:f3:82:8e:0c:fa:da:d7:38:
f5:d0:85:28:1a:8b:cf:e2:fb:e9:e0:91:0d:bb:33:21:28:1c:
0d:1f:6d:ac:df:2f:f1:b8:44:6a:1e:4d:ac:b5:cd:dc:43:3b:
54:2c:03:91:c8:f6:93:b2:01:67:ff:97:d5:09:26:82:d1:b1:
1c:87:9a:d6:57:5b:24:e2:2a:1f:17:34:20:c3:68:ba:d7:af:
bb:f2:6a:99:41:35:d1:4d:34:b9:b6:49:cd:15:99:ef:1a:a2:
53:9a:da:40:c5:91:bc:79:66:db:2d:83:50:88:43:bd:30:46:
03:b9:67:35:99:5b:89:7e:7f:72:d4:00:64:fc:dd:05:da:65:
e2:16:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:11 2024 by rpki-client on console-fra.rpki-client.org