Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/jFkpoK7Bm2Fu9HNtl6Jx4BoX8SI.roa
File: jFkpoK7Bm2Fu9HNtl6Jx4BoX8SI.roa (raw, json)
Hash identifier: 46KpWyihFYY8Dn8lqhpHXxravYIYR+lkjskpMFqCDKo=
Subject key identifier: 8C:59:29:A0:AE:C1:9B:61:6E:F4:73:6D:97:A2:71:E0:1A:17:F1:22
Certificate issuer: /CN=bf72ff4c79c6f8175b4835ab656a1bcf1e457432
Certificate serial: 01856FA6D30ED64F6C365E366B25BACE792E
Authority key identifier: BF:72:FF:4C:79:C6:F8:17:5B:48:35:AB:65:6A:1B:CF:1E:45:74:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3L_THnG-BdbSDWrZWobzx5FdDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/jFkpoK7Bm2Fu9HNtl6Jx4BoX8SI.roa
Signing time: Sun 01 Jan 2023 23:24:42 +0000
ROA not before: Sun 01 Jan 2023 23:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50089
IP address blocks: 5.42.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d3:0e:d6:4f:6c:36:5e:36:6b:25:ba:ce:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf72ff4c79c6f8175b4835ab656a1bcf1e457432
Validity
Not Before: Jan 1 23:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c5929a0aec19b616ef4736d97a271e01a17f122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:4a:5b:40:87:6e:1d:e7:74:02:76:25:e0:
73:34:ab:6c:c9:bc:ec:ec:fc:29:24:b1:d8:fa:4e:
ba:3c:e9:11:f0:bc:ff:c3:2c:f1:db:38:1c:30:9e:
2f:d6:08:82:f7:35:b7:4e:99:b3:d1:d6:8b:ef:1b:
31:de:e2:65:1b:b0:89:c2:a5:f9:9d:c6:b7:43:03:
0d:60:77:21:0f:c4:d7:67:45:74:42:e3:05:aa:9e:
62:63:f3:e2:ba:d2:80:ef:56:a6:28:3a:49:4e:55:
1e:b5:00:6e:bd:65:91:ba:36:61:a0:14:88:74:70:
d3:04:11:7a:28:d2:ea:5d:96:61:fd:ba:71:c7:e9:
36:3b:3a:db:64:65:b0:90:30:cc:b5:eb:23:9f:74:
86:6d:b8:ff:78:e3:34:42:b8:33:32:8c:da:30:82:
3a:78:d2:44:9f:a8:c7:fd:f1:08:90:12:55:ac:4e:
28:94:ba:25:89:9c:d4:7f:1d:8c:6a:bc:13:24:4a:
b6:c3:13:fe:59:e4:3f:ed:84:09:c9:74:df:d2:53:
e8:60:c5:5b:b1:27:eb:b0:7e:db:ca:e0:a7:8d:78:
fa:31:13:36:4a:05:1b:31:f6:18:70:5a:8d:60:00:
10:b5:e5:b5:2e:a1:6a:32:dd:fd:b5:70:0e:86:60:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:59:29:A0:AE:C1:9B:61:6E:F4:73:6D:97:A2:71:E0:1A:17:F1:22
X509v3 Authority Key Identifier:
keyid:BF:72:FF:4C:79:C6:F8:17:5B:48:35:AB:65:6A:1B:CF:1E:45:74:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3L_THnG-BdbSDWrZWobzx5FdDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/jFkpoK7Bm2Fu9HNtl6Jx4BoX8SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/v3L_THnG-BdbSDWrZWobzx5FdDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.220.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b0:5f:11:be:6f:e6:f9:e1:c0:74:44:7c:2d:f4:8e:14:92:
71:61:ac:64:aa:76:00:cd:d5:c9:cf:e4:2e:90:30:05:3b:bd:
40:8a:a4:c9:64:11:ef:46:52:d2:37:b3:c1:6a:bb:d5:85:d8:
79:7e:70:21:01:87:f6:fe:0f:46:b7:f7:3d:cc:12:30:df:be:
f2:34:9d:4e:af:1e:6c:75:02:96:a1:c4:bc:47:7d:34:65:d7:
ad:44:02:24:74:af:0b:d4:bb:27:b2:2e:26:a7:0e:83:ad:ad:
2b:c8:64:82:d8:37:d3:56:72:e8:a0:cf:74:60:84:48:b3:14:
f6:10:9d:a6:1a:bd:5c:64:3d:d4:08:d5:b8:0c:54:33:25:06:
53:76:40:87:e1:ff:72:27:82:1f:a5:f9:b3:2c:5d:50:30:a7:
38:97:f0:fe:95:d0:f5:9c:ed:4f:8e:b7:a4:c2:18:52:03:c2:
e5:9c:9c:21:79:ef:9c:74:28:5d:f6:a0:69:17:ca:3b:20:f7:
48:76:0f:f9:88:0e:10:c0:cb:d5:e9:68:cd:c3:5e:f8:af:0b:
d3:6d:e6:0e:ac:35:dd:c9:56:7e:a2:f4:65:83:a8:7f:5b:25:
6a:31:01:b2:44:cf:94:c7:20:01:ee:3a:8c:71:cf:1c:15:de:
a6:e1:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:15 2024 by rpki-client on console-ams.rpki-client.org