Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/oMJLQ67_a3Q2zyaLRrtEot6EgkY.roa
File: oMJLQ67_a3Q2zyaLRrtEot6EgkY.roa (raw, json)
Hash identifier: /5mrt9NRbbeH6XuwV5vjphRnB6g5WBN3LHNup9ZqZb0=
Subject key identifier: A0:C2:4B:43:AE:FF:6B:74:36:CF:26:8B:46:BB:44:A2:DE:84:82:46
Certificate issuer: /CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Certificate serial: 0183401AB6FCEA62F43D13DC14B3D9E55B78
Authority key identifier: BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/oMJLQ67_a3Q2zyaLRrtEot6EgkY.roa
Signing time: Thu 15 Sep 2022 07:43:55 +0000
ROA not before: Thu 15 Sep 2022 07:43:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197248
IP address blocks: 5.149.241.0/24 maxlen: 24
5.149.242.0/24 maxlen: 24
185.235.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:1a:b6:fc:ea:62:f4:3d:13:dc:14:b3:d9:e5:5b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Validity
Not Before: Sep 15 07:43:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0c24b43aeff6b7436cf268b46bb44a2de848246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:2a:f5:a7:14:3c:48:1e:64:e0:56:b3:10:
c4:45:d0:1c:a2:9a:12:c1:5b:54:40:37:d9:3c:fd:
d7:af:02:12:8b:13:86:90:7f:a4:68:2a:3a:3e:f3:
15:6e:1f:ee:c9:6d:32:bf:41:9b:d1:11:1e:a8:fb:
46:0c:04:17:44:a5:d5:12:d9:af:86:30:cc:3f:16:
b1:c6:d3:6a:52:6b:4d:ee:2f:c3:0f:17:6c:25:9b:
69:06:91:4e:25:cb:ab:c1:4e:b9:77:52:fc:39:48:
eb:8f:aa:e2:08:5f:40:48:fc:20:37:3a:9d:81:72:
09:e3:25:a4:b5:df:8e:74:78:02:60:29:c6:38:2c:
74:3d:0c:78:c3:63:02:70:e4:e1:f8:12:8a:8c:3c:
02:d2:4e:39:df:91:6b:0b:7f:66:2c:2d:a7:c3:74:
7c:83:ba:f6:5a:1d:f6:bd:5c:65:12:74:88:51:12:
1c:0c:2e:ce:4c:4d:9b:e8:3d:2c:be:49:91:ba:f7:
f9:48:e2:e9:b6:54:e5:ae:f3:ff:53:38:7e:7f:a0:
63:c5:62:52:95:03:2c:f7:d2:e3:ff:81:9e:ce:ca:
9d:da:18:66:b9:ed:a4:39:13:08:ea:31:17:0c:f2:
3c:b3:a3:92:ee:54:fb:2f:bc:55:7f:e8:99:82:8a:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:4B:43:AE:FF:6B:74:36:CF:26:8B:46:BB:44:A2:DE:84:82:46
X509v3 Authority Key Identifier:
keyid:BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/oMJLQ67_a3Q2zyaLRrtEot6EgkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.241.0-5.149.242.255
185.235.33.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3e:c7:52:a9:3c:85:4a:81:a5:3b:8b:04:f3:62:e7:3b:d3:
d9:2c:e0:41:b7:8d:5c:c9:22:4b:d4:1a:27:c0:d8:b7:39:52:
9b:90:86:1f:c6:72:a8:9b:74:b6:e7:b4:33:d9:63:8f:5a:51:
7d:68:ba:cf:bb:86:0b:8d:87:d3:8f:04:f9:81:08:8c:17:7d:
70:ca:88:18:d3:65:f5:0f:dd:bc:2f:82:7b:c2:55:4c:22:9b:
47:cc:14:30:80:30:ac:c9:0a:f4:cc:dd:45:cb:95:4c:06:23:
a2:84:c7:4f:0f:94:d9:95:35:e0:9a:c5:12:3e:ff:a5:63:0e:
d3:c2:c1:b0:e4:df:cb:b1:8f:81:0a:c6:15:05:3a:12:d4:fa:
ac:db:9b:a7:44:07:bc:19:99:cb:ce:4f:20:fc:29:03:51:2d:
b4:12:c8:26:2b:77:b5:32:d9:3b:6f:7d:85:7d:14:66:5c:1f:
4f:52:2f:70:de:86:43:fd:89:21:8a:25:60:a4:bd:fd:5f:81:
fa:f4:73:d6:ae:a5:f7:e0:eb:14:be:b5:ac:5e:6d:4d:50:b0:
c9:68:ba:80:70:98:60:af:ee:14:74:23:de:37:e1:d8:fe:06:
2d:27:6a:2d:39:ee:8d:af:a7:85:12:01:a8:9f:83:f6:a7:45:
77:87:98:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-fra.rpki-client.org