Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/SuXzL3qyYLOHcKGh2kXFMMG-J3w.roa
File: SuXzL3qyYLOHcKGh2kXFMMG-J3w.roa (raw, json)
Hash identifier: FK6CABNehcHtxzrNzVQDZThFJbqDZEcPGekrT+FQ3r8=
Subject key identifier: 4A:E5:F3:2F:7A:B2:60:B3:87:70:A1:A1:DA:45:C5:30:C1:BE:27:7C
Certificate issuer: /CN=e6c2d510b8f05507a71142ebfb239a51b2717a91
Certificate serial: 018CC9BC6B4B29FB8FE2F9B4CB0C66181F47
Authority key identifier: E6:C2:D5:10:B8:F0:55:07:A7:11:42:EB:FB:23:9A:51:B2:71:7A:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLVELjwVQenEULr-yOaUbJxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/SuXzL3qyYLOHcKGh2kXFMMG-J3w.roa
Signing time: Tue 02 Jan 2024 10:33:37 +0000
ROA not before: Tue 02 Jan 2024 10:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 5.42.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6b:4b:29:fb:8f:e2:f9:b4:cb:0c:66:18:1f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2d510b8f05507a71142ebfb239a51b2717a91
Validity
Not Before: Jan 2 10:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ae5f32f7ab260b38770a1a1da45c530c1be277c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:91:6f:c9:90:6a:0e:02:1b:e1:99:7b:c7:
5c:68:10:9d:01:af:48:7c:18:d7:04:63:a2:83:90:
26:3c:fd:47:aa:b7:64:34:62:fb:cb:05:d6:5c:a4:
2a:31:b2:a9:f0:48:ea:ed:91:20:d5:db:0f:ba:dd:
76:29:e2:54:ee:e5:23:64:bf:e2:77:93:75:bc:fe:
a7:f8:be:77:f5:82:b7:ff:1e:56:b3:67:08:c3:3c:
92:59:dc:f5:69:05:87:18:74:97:d6:34:0f:73:e6:
fa:4d:92:50:13:41:c6:a7:4c:05:cf:7b:03:5b:96:
3d:45:41:77:c2:a5:e9:cc:86:61:81:52:4c:39:29:
fc:9a:49:7f:3d:c1:16:de:81:7b:42:f5:10:00:de:
9f:58:ce:a6:f8:8f:a9:02:9e:ef:34:e3:09:23:b0:
7a:15:eb:8a:2a:34:72:b5:c5:dd:27:1c:aa:ca:51:
3b:a4:02:ed:46:7e:3d:95:96:e1:ff:75:8c:16:87:
e4:f0:33:2d:e7:14:b3:2e:2a:3a:d6:00:16:ac:07:
05:e3:fe:c7:92:38:c4:df:31:95:ec:d7:26:d0:30:
29:35:2a:6b:d4:eb:df:d9:8c:88:15:37:92:99:dc:
07:2f:6f:cd:bd:44:9e:4d:8a:55:5d:64:60:97:ae:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E5:F3:2F:7A:B2:60:B3:87:70:A1:A1:DA:45:C5:30:C1:BE:27:7C
X509v3 Authority Key Identifier:
keyid:E6:C2:D5:10:B8:F0:55:07:A7:11:42:EB:FB:23:9A:51:B2:71:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLVELjwVQenEULr-yOaUbJxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/SuXzL3qyYLOHcKGh2kXFMMG-J3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/5sLVELjwVQenEULr-yOaUbJxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b2:5a:a1:db:48:4f:ac:71:7c:c9:e5:03:d0:bf:be:4b:1d:
e0:c7:c0:e9:41:b0:48:2c:ff:93:d5:5d:72:d1:65:c4:52:7f:
4d:1f:b3:c9:03:2f:38:56:40:7c:73:0a:7c:56:6e:d3:94:d9:
90:c1:41:34:7d:cc:4c:19:fa:09:b1:77:d5:a6:87:9c:be:fc:
b4:38:97:db:23:23:9d:61:5a:a8:de:ea:1c:8d:91:78:a7:9c:
b4:0d:9f:56:3e:7f:07:1f:3f:bf:fd:8d:2d:ed:62:05:bb:05:
88:31:65:17:26:7e:d5:14:3a:26:b8:57:c5:d4:2b:d0:ba:e0:
9a:ad:bc:31:09:75:9a:10:6d:cc:cf:2a:13:a1:8f:6b:a7:eb:
13:19:ea:12:4f:36:15:a3:f4:51:90:aa:9b:64:2e:b4:44:3f:
ed:22:6d:0e:ba:e5:a9:fc:93:23:a1:9d:20:4c:9a:e3:60:24:
33:26:81:5f:96:8c:ca:c3:3d:e0:be:a5:a0:8b:eb:86:e5:be:
0a:09:16:76:b5:a7:a2:ca:fa:f3:b6:6d:c0:e4:fb:04:32:d7:
27:0b:f0:92:c0:6e:f4:17:9d:33:e1:06:d5:61:36:d4:9d:2e:
f8:00:68:37:20:2f:21:f5:d5:64:09:dd:51:02:a1:52:7a:cd:
c1:90:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 12:12:01 2024 by rpki-client on console-ams.rpki-client.org