Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/8ScD9Z5tmUJiCZu8oxreCZOTFCE.roa
File: 8ScD9Z5tmUJiCZu8oxreCZOTFCE.roa (raw, json)
Hash identifier: 50z6WebC1Z4J2GI8GhDC4fCSqSSqa61OwY/+WztDQbM=
Subject key identifier: F1:27:03:F5:9E:6D:99:42:62:09:9B:BC:A3:1A:DE:09:93:93:14:21
Certificate issuer: /CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Certificate serial: 01856BD34F20E8CD6DCBEC7848D895EEECE4
Authority key identifier: BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/8ScD9Z5tmUJiCZu8oxreCZOTFCE.roa
Signing time: Sun 01 Jan 2023 05:34:48 +0000
ROA not before: Sun 01 Jan 2023 05:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206974
IP address blocks: 5.149.240.0/24 maxlen: 24
5.149.241.0/24 maxlen: 24
5.149.245.0/24 maxlen: 24
5.149.240.0/21 maxlen: 21
5.149.244.0/24 maxlen: 24
5.149.246.0/24 maxlen: 24
5.149.243.0/24 maxlen: 24
5.149.242.0/24 maxlen: 24
5.149.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:4f:20:e8:cd:6d:cb:ec:78:48:d8:95:ee:ec:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Validity
Not Before: Jan 1 05:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f12703f59e6d994262099bbca31ade0993931421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:ab:57:6e:4b:8e:15:f4:9d:72:f0:1a:72:
62:a8:d7:79:67:23:63:66:ed:11:b3:4c:4f:bb:3b:
30:57:8f:1f:16:3f:2b:ae:b2:52:2f:2e:c1:8d:23:
d7:f1:5b:53:2a:1a:b6:30:4a:1a:79:03:7a:ab:3d:
5b:c0:9b:99:e7:ad:ac:2f:cf:88:17:68:fa:0e:a2:
9a:77:a5:5f:7d:d3:61:76:f0:a2:b5:e1:45:c2:13:
5e:b4:b2:d5:d9:07:8f:ff:9b:2c:70:1c:ea:7b:21:
b4:f1:7b:5d:c7:09:1d:60:d1:e0:ed:cc:d8:18:36:
b3:d3:aa:6b:3d:58:39:33:e5:e4:f0:8b:ff:b9:31:
b2:1f:aa:a9:e7:2c:71:0c:1d:47:a5:d8:e6:fc:df:
99:8c:97:97:fb:6b:ce:25:f9:99:f6:a2:f4:04:7f:
05:2f:2f:19:71:d3:c2:bd:7c:b1:d8:1b:dc:44:2b:
b0:7c:af:f5:0d:d8:36:89:bf:04:66:40:88:46:7c:
32:a7:59:a5:c1:84:86:93:43:76:94:0d:ee:e8:28:
c6:5c:92:04:29:c7:7c:36:ec:f5:51:ae:bf:63:ff:
99:c3:11:fc:a6:85:f5:0c:98:cc:ed:28:54:64:9b:
62:9b:25:64:32:fc:ad:90:5d:c8:c8:fe:73:36:b3:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:03:F5:9E:6D:99:42:62:09:9B:BC:A3:1A:DE:09:93:93:14:21
X509v3 Authority Key Identifier:
keyid:BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/8ScD9Z5tmUJiCZu8oxreCZOTFCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.240.0/21
Signature Algorithm: sha256WithRSAEncryption
61:ff:46:4d:6e:39:6a:b7:c3:75:e7:c8:ea:98:00:f4:8c:87:
9a:42:f5:07:0b:96:b6:32:1c:9a:df:8a:5c:10:29:2c:20:6c:
9f:4a:6d:5e:ee:ff:45:5a:3a:70:7a:bb:b4:46:e4:a5:a6:63:
ba:cd:68:a2:95:e6:44:d5:9e:f4:d1:dd:e9:96:d0:d6:d8:83:
f7:08:05:1b:6b:bc:1d:54:11:7e:39:d7:0a:10:8d:e7:a3:c5:
19:23:91:37:20:1f:0a:29:2f:54:b3:ca:fd:8d:7d:d2:95:7a:
80:63:08:ac:62:6a:91:30:54:b1:62:6c:8b:5d:85:27:c5:63:
e7:af:9f:fd:f3:b5:c7:5d:1f:4a:d6:02:2f:b0:64:a4:d2:20:
aa:66:f7:8a:35:ed:78:b2:7b:c8:64:f6:b6:19:92:53:65:7a:
2f:1e:32:a8:a0:9e:55:5a:a1:f0:d6:fe:28:e3:48:b7:23:67:
b6:ca:a9:d7:b0:c6:cd:c5:4e:e8:a2:6a:95:06:1e:b7:7d:cb:
56:ec:97:45:c3:eb:41:da:c9:71:25:87:88:69:35:58:bb:0f:
c7:e4:14:ac:18:c3:55:b7:51:02:83:c8:0b:fa:2d:7d:08:93:
78:03:bb:33:1f:9f:a8:a9:6c:c3:59:7b:fa:cf:19:c3:64:f0:
01:d1:cc:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr008g6M1ty+x4SNiV7uzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTVjMmEzNDU0MmVhNzY3ZTYyZDRmYTVkYTU5MDcxNDY3
YmUxYWMwHhcNMjMwMTAxMDUzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTI3MDNmNTllNmQ5OTQyNjIwOTliYmNhMzFhZGUwOTkzOTMxNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hirV25LjhX0nXLwGnJiqNd5ZyNj
Zu0Rs0xPuzswV48fFj8rrrJSLy7BjSPX8VtTKhq2MEoaeQN6qz1bwJuZ562sL8+I
F2j6DqKad6VffdNhdvCiteFFwhNetLLV2QeP/5sscBzqeyG08XtdxwkdYNHg7czY
GDaz06prPVg5M+Xk8Iv/uTGyH6qp5yxxDB1Hpdjm/N+ZjJeX+2vOJfmZ9qL0BH8F
Ly8ZcdPCvXyx2BvcRCuwfK/1Ddg2ib8EZkCIRnwyp1mlwYSGk0N2lA3u6CjGXJIE
Kcd8Nuz1Ua6/Y/+ZwxH8poX1DJjM7ShUZJtimyVkMvytkF3IyP5zNrM6qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEnA/WebZlCYgmbvKMa3gmTkxQhMB8GA1UdIwQY
MBaAFL6lwqNFQup2fmLU+l2lkHFGe+GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFYQ28wVkM2blotWXRUNlhhV1FjVVo3NGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85YWU2ZDAtZDczMS00NTRkLWI4NzAt
NTI4NjM4NGFlMjM2LzEvOFNjRDlaNXRtVUppQ1p1OG94cmVDWk9URkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85YWU2ZDAtZDczMS00NTRkLWI4NzAtNTI4NjM4NGFlMjM2
LzEvdnFYQ28wVkM2blotWXRUNlhhV1FjVVo3NGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBZXwMA0G
CSqGSIb3DQEBCwUAA4IBAQBh/0ZNbjlqt8N158jqmAD0jIeaQvUHC5a2Mhya34pc
ECksIGyfSm1e7v9FWjpweru0RuSlpmO6zWiileZE1Z700d3pltDW2IP3CAUba7wd
VBF+OdcKEI3no8UZI5E3IB8KKS9Us8r9jX3SlXqAYwisYmqRMFSxYmyLXYUnxWPn
r5/987XHXR9K1gIvsGSk0iCqZveKNe14snvIZPa2GZJTZXovHjKooJ5VWqHw1v4o
40i3I2e2yqnXsMbNxU7oomqVBh63fctW7JdFw+tB2slxJYeIaTVYuw/H5BSsGMNV
t1ECg8gL+i19CJN4A7szH5+oqWzDWXv6zxnDZPAB0cxA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:55 2024 by rpki-client on console-ams.rpki-client.org