Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1ff86e-6704-4374-ad69-772f11b365fb/1/Lkxf35y5FkX-GwfpjU866i74ZT0.roa
File: Lkxf35y5FkX-GwfpjU866i74ZT0.roa (raw, json)
Hash identifier: 4GbCYZp8ZeKVjU/yfUFpe+uXl8SO+tpH1LOsL7c+ayQ=
Subject key identifier: 2E:4C:5F:DF:9C:B9:16:45:FE:1B:07:E9:8D:4F:3A:EA:2E:F8:65:3D
Certificate issuer: /CN=e9b097cbfc55d8a54edcdef4b44d80071d0775f0
Certificate serial: 0182DE4D61B472A255ECFB06162E7115300E
Authority key identifier: E9:B0:97:CB:FC:55:D8:A5:4E:DC:DE:F4:B4:4D:80:07:1D:07:75:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bCXy_xV2KVO3N70tE2ABx0HdfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1ff86e-6704-4374-ad69-772f11b365fb/1/Lkxf35y5FkX-GwfpjU866i74ZT0.roa
Signing time: Sat 27 Aug 2022 07:56:29 +0000
ROA not before: Sat 27 Aug 2022 07:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 5.253.58.0/24 maxlen: 24
5.253.57.0/24 maxlen: 24
5.253.56.0/24 maxlen: 24
5.253.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:4d:61:b4:72:a2:55:ec:fb:06:16:2e:71:15:30:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b097cbfc55d8a54edcdef4b44d80071d0775f0
Validity
Not Before: Aug 27 07:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e4c5fdf9cb91645fe1b07e98d4f3aea2ef8653d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ef:b2:d6:6d:c8:c8:7b:27:71:5f:df:4c:e2:
6d:77:dd:32:9f:75:3a:89:fd:38:f3:2a:c7:14:f6:
9c:ce:ab:10:ce:9f:55:c9:89:bb:6d:f3:58:81:ae:
72:67:41:11:95:0b:1c:49:0d:ee:1b:0a:a4:e8:f1:
e7:4e:84:8d:87:83:66:9a:53:dc:f0:fb:9f:4d:18:
39:22:aa:00:d0:4f:c0:ef:b0:ba:84:45:47:a0:e2:
12:4b:7f:bd:a6:17:df:ff:a8:45:63:4f:ec:3d:15:
44:14:48:83:ab:ba:6c:38:6d:8d:53:bd:59:d8:a5:
af:25:04:f7:d2:43:81:ab:07:fc:95:e3:ed:ae:1b:
fe:ec:78:af:5b:39:95:25:89:a6:63:7e:7b:62:7e:
ee:f1:d9:21:f7:2e:e6:5f:89:4c:ea:11:3a:75:28:
de:62:e0:4c:9a:b8:63:30:5f:30:0c:5c:23:f4:28:
ce:d3:1f:13:59:8a:c7:39:d1:c5:26:93:85:3f:59:
2a:a1:bc:87:70:d4:2f:9b:b8:13:f7:3a:a7:84:dc:
e5:8d:40:56:b4:8b:d3:73:d6:cf:4d:ee:48:8f:aa:
1f:ed:8e:0d:db:b9:2c:75:d7:b3:a3:01:4d:5b:b2:
12:58:3a:a5:7d:57:03:5a:f7:b0:81:a5:97:68:b0:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:5F:DF:9C:B9:16:45:FE:1B:07:E9:8D:4F:3A:EA:2E:F8:65:3D
X509v3 Authority Key Identifier:
keyid:E9:B0:97:CB:FC:55:D8:A5:4E:DC:DE:F4:B4:4D:80:07:1D:07:75:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bCXy_xV2KVO3N70tE2ABx0HdfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1ff86e-6704-4374-ad69-772f11b365fb/1/Lkxf35y5FkX-GwfpjU866i74ZT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1ff86e-6704-4374-ad69-772f11b365fb/1/6bCXy_xV2KVO3N70tE2ABx0HdfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:68:6e:3b:e8:1a:a1:65:9d:56:05:c0:2c:80:2d:ae:97:0c:
5f:6c:91:0c:6a:94:3e:66:92:f3:30:d1:47:4d:98:0e:00:6d:
56:1f:14:5b:db:65:c1:c6:34:f6:0c:7c:4e:13:eb:a8:a5:18:
b0:3f:41:89:f1:98:d4:97:27:ab:81:af:ca:75:44:3d:eb:ae:
8d:b4:f3:a0:51:55:35:50:de:a4:b5:e2:1f:98:60:c2:af:53:
b3:d3:fa:76:1b:a5:07:b5:a6:04:a0:4a:25:63:85:c9:91:00:
68:57:01:2f:26:92:d7:72:71:0e:e8:98:c2:f2:87:2b:0a:57:
f2:1a:18:65:f8:c2:a1:d5:d1:f0:ef:14:74:d4:27:2f:65:82:
28:af:b4:e1:bb:c6:68:3d:5b:3a:64:23:dd:39:e9:16:e4:3d:
d0:86:93:c2:bb:a4:d7:21:c0:7d:64:39:7d:94:2d:41:4e:2f:
60:bd:82:37:34:79:e8:36:6a:5b:74:bd:0b:d7:76:0d:c4:74:
f7:38:4d:87:34:a7:c0:e8:e5:68:67:52:22:f2:f5:95:47:b1:
cd:8c:97:3f:cc:91:02:8a:10:6f:4c:d9:d7:5c:df:a2:c8:92:
a7:99:08:ff:66:15:02:41:7d:b6:89:08:94:93:27:89:93:67:
06:3a:43:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLeTWG0cqJV7PsGFi5xFTAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjA5N2NiZmM1NWQ4YTU0ZWRjZGVmNGI0NGQ4MDA3MWQw
Nzc1ZjAwHhcNMjIwODI3MDc1NjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTRjNWZkZjljYjkxNjQ1ZmUxYjA3ZTk4ZDRmM2FlYTJlZjg2NTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu+y1m3IyHsncV/fTOJtd90yn3U6
if048yrHFPaczqsQzp9VyYm7bfNYga5yZ0ERlQscSQ3uGwqk6PHnToSNh4NmmlPc
8PufTRg5IqoA0E/A77C6hEVHoOISS3+9phff/6hFY0/sPRVEFEiDq7psOG2NU71Z
2KWvJQT30kOBqwf8lePtrhv+7HivWzmVJYmmY357Yn7u8dkh9y7mX4lM6hE6dSje
YuBMmrhjMF8wDFwj9CjO0x8TWYrHOdHFJpOFP1kqobyHcNQvm7gT9zqnhNzljUBW
tIvTc9bPTe5Ij6of7Y4N27ksddezowFNW7ISWDqlfVcDWvewgaWXaLBbIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC5MX9+cuRZF/hsH6Y1POuou+GU9MB8GA1UdIwQY
MBaAFOmwl8v8VdilTtze9LRNgAcdB3XwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJDWHlfeFYyS1ZPM043MHRFMkFCeDBIZGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xZmY4NmUtNjcwNC00Mzc0LWFkNjkt
NzcyZjExYjM2NWZiLzEvTGt4ZjM1eTVGa1gtR3dmcGpVODY2aTc0WlQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xZmY4NmUtNjcwNC00Mzc0LWFkNjktNzcyZjExYjM2NWZi
LzEvNmJDWHlfeFYyS1ZPM043MHRFMkFCeDBIZGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBf04MA0G
CSqGSIb3DQEBCwUAA4IBAQDXaG476BqhZZ1WBcAsgC2ulwxfbJEMapQ+ZpLzMNFH
TZgOAG1WHxRb22XBxjT2DHxOE+uopRiwP0GJ8ZjUlyerga/KdUQ9666NtPOgUVU1
UN6kteIfmGDCr1Oz0/p2G6UHtaYEoEolY4XJkQBoVwEvJpLXcnEO6JjC8ocrClfy
Ghhl+MKh1dHw7xR01CcvZYIor7Thu8ZoPVs6ZCPdOekW5D3QhpPCu6TXIcB9ZDl9
lC1BTi9gvYI3NHnoNmpbdL0L13YNxHT3OE2HNKfA6OVoZ1Ii8vWVR7HNjJc/zJEC
ihBvTNnXXN+iyJKnmQj/ZhUCQX22iQiUkyeJk2cGOkNe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:33 2024 by rpki-client on console-fra.rpki-client.org