Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/UP-krYMLwo3cMOCQZux86k3UEHM.roa
File: UP-krYMLwo3cMOCQZux86k3UEHM.roa (raw, json)
Hash identifier: 6EfqGA9htV6ibmB8WqCnv+Yft4oOXL0kkiwQeniYnTs=
Subject key identifier: 50:FF:A4:AD:83:0B:C2:8D:DC:30:E0:90:66:EC:7C:EA:4D:D4:10:73
Certificate issuer: /CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Certificate serial: 182AB3D9
Authority key identifier: 70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/UP-krYMLwo3cMOCQZux86k3UEHM.roa
Signing time: Tue 07 Jun 2022 11:14:02 +0000
ROA not before: Tue 07 Jun 2022 11:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34655
IP address blocks: 109.71.163.0/24 maxlen: 24
109.71.162.0/24 maxlen: 24
109.71.166.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
109.71.164.0/24 maxlen: 24
109.71.160.0/24 maxlen: 24
109.71.167.0/24 maxlen: 24
5.159.216.0/24 maxlen: 24
5.159.219.0/24 maxlen: 24
5.159.218.0/24 maxlen: 24
5.159.217.0/24 maxlen: 24
185.13.88.0/24 maxlen: 24
185.13.91.0/24 maxlen: 24
185.13.90.0/24 maxlen: 24
95.128.120.0/24 maxlen: 24
95.128.123.0/24 maxlen: 24
95.128.122.0/24 maxlen: 24
95.128.121.0/24 maxlen: 24
95.128.125.0/24 maxlen: 24
95.128.124.0/24 maxlen: 24
95.128.126.0/24 maxlen: 24
95.128.127.0/24 maxlen: 24
93.93.50.0/24 maxlen: 24
93.93.53.0/24 maxlen: 24
93.93.54.0/24 maxlen: 24
2a03:9c40::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405451737 (0x182ab3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Validity
Not Before: Jun 7 11:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50ffa4ad830bc28ddc30e09066ec7cea4dd41073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:eb:8d:b5:97:ea:eb:9a:6c:6a:1a:69:ab:
2e:f6:dd:f8:5b:60:26:7c:62:d2:4c:95:b2:bf:28:
d6:71:2e:45:e8:7c:21:7b:89:99:9c:42:84:40:96:
8f:3b:e4:32:aa:63:fb:a8:93:63:f0:00:f9:03:b6:
30:1e:56:10:8d:63:42:90:0e:b5:da:40:d8:72:f9:
b3:bf:93:b2:99:08:a6:77:8e:1d:3c:6f:c7:8f:da:
dd:85:c8:70:77:fa:5b:d4:ad:62:ed:ed:75:ff:79:
0a:b7:3d:72:72:40:f3:c2:9f:80:4f:b7:18:c1:6e:
a8:ad:1a:55:eb:e8:2c:52:e0:b0:b3:8a:a3:97:0b:
75:ca:61:82:1f:01:1c:fc:35:42:5b:68:9d:97:92:
bf:82:74:31:20:8a:b1:c9:0d:4d:20:20:fb:55:c5:
6f:59:bf:6d:4a:8f:eb:1d:a1:bc:e9:bf:70:7f:78:
ed:07:30:b7:e8:10:b4:ca:6e:20:df:a7:7b:1f:e8:
0c:8a:67:52:da:2b:c5:fe:68:bb:17:75:b3:c3:a7:
91:6d:f2:7f:19:a1:d3:93:00:e4:04:7d:fe:2b:ec:
bc:e9:8a:04:ec:1c:52:b2:5b:e6:7b:89:79:fe:b4:
74:b0:a1:30:12:6b:9d:0a:2e:2a:28:f2:53:19:16:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FF:A4:AD:83:0B:C2:8D:DC:30:E0:90:66:EC:7C:EA:4D:D4:10:73
X509v3 Authority Key Identifier:
keyid:70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/UP-krYMLwo3cMOCQZux86k3UEHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/cE6wMksWcpndYGTbvzQNL5nEAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.216.0/22
93.93.50.0/24
93.93.53.0-93.93.54.255
95.128.120.0/21
109.71.160.0/24
109.71.162.0-109.71.167.255
185.13.88.0/24
185.13.90.0/23
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
Signature Algorithm: sha256WithRSAEncryption
9a:fd:95:76:6a:c7:8b:09:b9:84:c2:ac:db:6d:ca:6e:5c:93:
18:ed:c9:c6:bd:8f:e8:ca:d3:f4:92:a1:86:96:a1:53:72:bc:
64:da:52:4d:14:19:88:87:7c:b2:79:27:03:3a:5d:c2:0f:90:
f0:06:54:f7:14:ee:82:22:9f:27:39:e1:e4:fb:41:da:9a:c5:
e1:9d:36:d7:df:8c:af:ca:cd:07:8c:4b:e3:ce:cc:56:fc:0e:
25:fc:38:9c:76:e6:88:b4:74:ca:57:18:fb:5b:ff:38:c9:a8:
da:5b:f8:a6:cd:ae:15:2a:4b:56:33:09:ee:1f:40:4a:ea:4a:
80:22:12:88:27:95:d8:c1:18:74:80:75:f3:98:ff:4d:49:ed:
e1:0c:ac:cb:05:f2:b6:43:ac:7a:b6:a2:7b:94:82:5a:08:8a:
92:1a:97:3d:c4:57:7b:a4:ef:05:2c:2b:e9:c7:ec:dd:7c:1c:
76:11:da:a0:75:d7:59:14:3e:9f:4b:72:52:9c:3c:4a:06:46:
7e:3d:d2:fe:95:23:79:6e:57:d9:3c:28:bc:cf:5d:a9:8c:10:
50:19:36:2b:d6:a5:f4:81:53:30:d4:55:c4:0f:f5:ed:4c:98:
70:1c:00:7d:8a:d4:f0:da:4b:6e:fe:3c:a9:36:e0:09:7d:db:
33:0c:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org