Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a6a83c-6e11-483a-9f2e-54bf5454bc88/1/5X0AB-Tzjf2EcQUh2HGnYcSz3Q4.roa
File: 5X0AB-Tzjf2EcQUh2HGnYcSz3Q4.roa (raw, json)
Hash identifier: 2ZkTaRl8HWuUvIJ9JU4ppxbgItvdb9VvtWCTIcbSW6Q=
Subject key identifier: E5:7D:00:07:E4:F3:8D:FD:84:71:05:21:D8:71:A7:61:C4:B3:DD:0E
Certificate issuer: /CN=b4ac45bd21926abb3d00adce85479ab605469f11
Certificate serial: 09ECA7E4
Authority key identifier: B4:AC:45:BD:21:92:6A:BB:3D:00:AD:CE:85:47:9A:B6:05:46:9F:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKxFvSGSars9AK3OhUeatgVGnxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a6a83c-6e11-483a-9f2e-54bf5454bc88/1/5X0AB-Tzjf2EcQUh2HGnYcSz3Q4.roa
Signing time: Sat 01 Jan 2022 14:57:34 +0000
ROA not before: Sat 01 Jan 2022 14:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47650
IP address blocks: 195.34.220.0/22 maxlen: 22
195.34.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166504420 (0x9eca7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ac45bd21926abb3d00adce85479ab605469f11
Validity
Not Before: Jan 1 14:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e57d0007e4f38dfd84710521d871a761c4b3dd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:84:93:17:60:a3:37:4e:d1:fd:c2:3a:c5:
dd:88:07:74:59:41:13:f0:2e:16:dd:a0:ab:d5:3a:
1c:bc:d3:c1:3a:ff:72:6c:b7:fc:4c:30:f3:dd:1f:
6f:d3:ea:78:de:15:51:99:62:c3:0f:0e:63:a4:57:
5e:75:2d:35:ca:b2:a4:e1:ad:7c:26:c6:dd:ae:f5:
9d:47:e0:9a:72:93:fb:81:cd:37:53:39:d2:11:2a:
58:c2:1d:c2:44:ec:13:f3:85:00:af:83:2b:54:4a:
02:a8:f6:9a:20:bc:cb:e0:38:b4:04:7a:fa:d0:6c:
33:3d:e7:a8:f7:4c:59:ce:1b:24:22:ea:47:72:1b:
a9:a5:79:66:5a:14:e1:53:fe:f0:84:42:4a:c0:9f:
32:1f:60:5d:fc:82:78:cb:7e:7e:df:1c:53:e8:d0:
67:06:a7:0d:24:8c:ff:d1:e2:bb:eb:98:57:47:25:
0a:13:d9:ce:67:6a:36:db:52:f7:12:f6:87:f3:66:
38:26:11:89:c8:04:c1:59:95:e1:24:3a:2d:ce:d3:
9b:ec:24:ce:95:3f:34:f3:14:88:eb:d9:af:ed:a4:
98:66:57:e5:14:80:cf:af:de:10:13:d2:20:5e:46:
a4:62:f7:f3:19:88:28:b5:8d:7f:0f:bc:48:2e:04:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:00:07:E4:F3:8D:FD:84:71:05:21:D8:71:A7:61:C4:B3:DD:0E
X509v3 Authority Key Identifier:
keyid:B4:AC:45:BD:21:92:6A:BB:3D:00:AD:CE:85:47:9A:B6:05:46:9F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKxFvSGSars9AK3OhUeatgVGnxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a6a83c-6e11-483a-9f2e-54bf5454bc88/1/5X0AB-Tzjf2EcQUh2HGnYcSz3Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a6a83c-6e11-483a-9f2e-54bf5454bc88/1/tKxFvSGSars9AK3OhUeatgVGnxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.220.0/22
Signature Algorithm: sha256WithRSAEncryption
61:3d:99:48:7a:d3:f7:d0:e1:4f:97:23:e5:9d:b4:92:56:3c:
65:39:21:4e:61:1f:76:d6:82:7c:41:a8:8f:de:a1:f3:4c:06:
93:a5:e5:a5:de:22:c4:50:fe:ff:5a:44:18:4f:ed:c8:8d:0c:
ec:4c:93:e0:a8:3b:42:c6:82:5b:e2:53:75:87:dd:b1:f7:c9:
c4:f3:5b:aa:d7:72:32:96:23:e9:c2:4f:3d:e7:17:cb:30:00:
40:79:7a:cf:19:f6:f5:07:11:ee:69:83:88:87:ff:aa:4b:8c:
b2:3f:30:5e:42:34:03:cf:d9:9d:98:cf:d2:7d:5f:3a:79:e3:
81:60:d3:e8:ac:b8:e8:83:1d:68:ef:e2:ef:a1:a0:54:40:61:
7f:26:8b:01:10:98:8e:33:f6:20:cd:3d:61:6d:b5:11:6c:8b:
7f:3f:b8:44:f0:9b:9e:c4:96:1c:09:21:9f:31:60:d5:f3:34:
b8:a7:ab:4c:8a:f7:84:5e:5f:1f:5b:7c:06:ef:17:40:e7:8d:
44:d3:9f:9e:67:ce:1b:31:15:7b:72:f3:03:ce:41:a9:0e:4d:
c2:f1:af:41:51:cc:1b:9f:b0:84:a2:cc:1d:8a:9e:c8:bc:32:
98:6e:cb:79:eb:db:74:44:ba:20:a0:3a:9d:0e:98:e4:a8:2a:
ce:d5:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:18 2024 by rpki-client on console-fra.rpki-client.org