Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/t5Suai7yJG-4ukUI4nBjMoEoU_o.roa
File: t5Suai7yJG-4ukUI4nBjMoEoU_o.roa (raw, json)
Hash identifier: IwSbKu35QKjwOxxrOJtEOX2uJNMg79T4vg+lb54SoGU=
Subject key identifier: B7:94:AE:6A:2E:F2:24:6F:B8:BA:45:08:E2:70:63:32:81:28:53:FA
Certificate issuer: /CN=bf72ff4c79c6f8175b4835ab656a1bcf1e457432
Certificate serial: 018CC6B91DEDEEF87F5B4ED438CF87213B62
Authority key identifier: BF:72:FF:4C:79:C6:F8:17:5B:48:35:AB:65:6A:1B:CF:1E:45:74:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3L_THnG-BdbSDWrZWobzx5FdDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/t5Suai7yJG-4ukUI4nBjMoEoU_o.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 5.42.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1d:ed:ee:f8:7f:5b:4e:d4:38:cf:87:21:3b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf72ff4c79c6f8175b4835ab656a1bcf1e457432
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b794ae6a2ef2246fb8ba4508e2706332812853fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:d1:6f:87:fd:b1:1b:bc:a6:1e:a1:59:e8:
69:5d:7f:40:fa:3d:a5:20:31:72:af:84:7d:87:4c:
76:c3:36:e1:f8:97:b3:aa:06:5b:84:3c:82:59:f2:
f4:43:92:8f:8f:a8:21:2c:d3:c0:d2:e6:62:35:9b:
ca:0b:ee:e0:c0:82:01:07:d8:c0:b6:e3:48:21:44:
d8:59:72:99:e7:87:41:19:92:90:e6:c3:56:a0:58:
dc:05:ce:0d:78:83:1c:dc:a5:3e:c6:4a:9b:d8:f8:
07:b3:93:d1:38:23:27:09:c2:e7:9c:1c:05:e9:0c:
b1:e5:bd:13:7a:46:1b:e2:44:97:56:86:4c:66:38:
8f:61:3b:0a:eb:6a:2c:ce:89:2c:16:44:10:9f:39:
92:6c:66:72:b6:53:eb:6f:ab:54:45:41:c2:d0:e6:
41:28:fb:93:a2:19:8b:42:ca:ff:73:6e:a7:98:3b:
48:bb:b4:94:a6:5b:61:3a:f7:e4:44:f4:f1:af:d1:
f9:80:ea:c6:d4:c7:f0:11:0c:52:6c:8b:65:fc:d5:
e7:52:49:b3:59:cf:54:5c:65:ef:7f:0f:c9:fe:66:
8c:4e:f1:33:fa:c7:22:a1:a8:c4:a2:24:dd:f9:83:
91:76:5d:26:87:7e:f6:66:ef:2a:16:92:d8:52:fa:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:AE:6A:2E:F2:24:6F:B8:BA:45:08:E2:70:63:32:81:28:53:FA
X509v3 Authority Key Identifier:
keyid:BF:72:FF:4C:79:C6:F8:17:5B:48:35:AB:65:6A:1B:CF:1E:45:74:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3L_THnG-BdbSDWrZWobzx5FdDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/t5Suai7yJG-4ukUI4nBjMoEoU_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/309858-25b0-4b04-a78a-a38c871b93b4/1/v3L_THnG-BdbSDWrZWobzx5FdDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.220.0/24
Signature Algorithm: sha256WithRSAEncryption
71:97:83:4c:e5:20:1e:87:6b:dc:d1:9a:5c:5b:90:3a:d2:c3:
1d:cb:0d:2c:6d:1d:5c:66:5c:b8:74:69:8f:ff:03:dd:73:db:
23:be:76:dc:12:7c:cc:87:52:43:7c:1a:7e:46:da:f3:a5:84:
c6:fe:2e:79:4e:4e:32:06:f1:23:38:b0:c4:65:a8:c3:7f:7f:
22:b2:81:4f:7e:21:e4:57:bf:50:1f:6f:2d:14:19:36:f0:e3:
89:96:ce:2f:1c:88:0a:bb:a0:56:49:84:6a:a4:b1:ce:0b:c1:
af:3a:4e:a8:f1:ba:e5:2a:77:dd:64:32:04:f3:34:b1:50:a2:
7e:9b:f7:45:96:75:bf:52:ff:1f:91:ea:30:f1:2b:48:e2:c0:
18:b8:74:63:e5:8d:97:a5:4a:12:04:c8:e4:cb:fc:00:8f:bf:
28:36:ec:cd:49:98:78:c7:a7:ce:a1:67:cd:6d:b8:d9:6f:97:
0b:00:8c:29:71:9d:94:17:81:1a:f9:ca:38:67:6e:70:27:9d:
6a:1f:91:dd:8e:7c:8d:69:ec:71:c1:b0:0d:bf:ff:66:a8:ef:
65:0f:cd:00:eb:f0:66:40:71:99:f6:f3:d9:c7:45:4b:c9:6c:
0c:15:0d:dd:25:73:53:71:c3:64:d8:36:63:25:21:f2:66:c2:
d9:ca:7e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:34 2024 by rpki-client on console-fra.rpki-client.org