Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/5hS1aC_PRIACcQAxaLoWcpanKLk.roa
File: 5hS1aC_PRIACcQAxaLoWcpanKLk.roa (raw, json)
Hash identifier: VcNfzQFiSHhxf36afGJKq3OsMpchtMYhTTfXoPoCR2o=
Subject key identifier: E6:14:B5:68:2F:CF:44:80:02:71:00:31:68:BA:16:72:96:A7:28:B9
Certificate issuer: /CN=6b20a80a6b31655d09f9305a4f0a59cd3313ddfb
Certificate serial: 0564DDA1
Authority key identifier: 6B:20:A8:0A:6B:31:65:5D:09:F9:30:5A:4F:0A:59:CD:33:13:DD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCoCmsxZV0J-TBaTwpZzTMT3fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/5hS1aC_PRIACcQAxaLoWcpanKLk.roa
Signing time: Fri 14 Jan 2022 15:42:05 +0000
ROA not before: Fri 14 Jan 2022 15:42:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34444
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90496417 (0x564dda1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20a80a6b31655d09f9305a4f0a59cd3313ddfb
Validity
Not Before: Jan 14 15:42:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e614b5682fcf44800271003168ba167296a728b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:c5:b5:49:e3:2e:06:1f:e0:34:67:19:9f:
c4:dd:44:bb:dc:d7:93:29:9f:13:ba:ed:be:e6:81:
85:5d:b0:6a:04:3c:41:f7:43:4a:c9:f0:8a:f3:c1:
a9:e9:22:a0:ab:e8:73:e8:74:4e:5a:9a:c1:7e:cb:
c5:25:00:46:3d:e7:28:e5:b7:dc:bc:9e:2f:bb:df:
81:27:17:28:0f:1e:52:8a:0e:df:e5:17:4d:42:e6:
c5:f7:65:ac:8f:7e:1f:44:59:a5:69:43:09:3a:41:
b6:76:02:19:91:8a:14:7e:0a:4f:03:9e:99:90:2c:
c8:d1:c6:54:f1:a2:b4:04:52:05:e2:c7:46:d9:28:
d1:18:be:d5:b3:1b:d6:6a:15:4e:30:61:fd:91:22:
6c:e3:d4:5f:e0:30:3d:96:5f:76:6e:13:ac:0d:f3:
e1:59:60:dd:42:ce:fe:28:79:9a:49:82:32:c2:10:
d9:9a:a9:a7:71:5e:27:85:31:c3:33:a7:5d:19:85:
79:5f:9f:f4:2e:90:5b:33:f9:86:df:8c:15:fd:8d:
22:4b:1e:6f:32:7c:d2:c0:b4:a3:08:90:2a:43:67:
f5:1d:65:61:a7:6b:7d:29:d8:9c:0f:70:6c:e4:29:
3c:30:28:27:aa:ff:23:90:58:ff:6f:46:37:d0:23:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:B5:68:2F:CF:44:80:02:71:00:31:68:BA:16:72:96:A7:28:B9
X509v3 Authority Key Identifier:
keyid:6B:20:A8:0A:6B:31:65:5D:09:F9:30:5A:4F:0A:59:CD:33:13:DD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCoCmsxZV0J-TBaTwpZzTMT3fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/5hS1aC_PRIACcQAxaLoWcpanKLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/ayCoCmsxZV0J-TBaTwpZzTMT3fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:b6:09:d3:a6:92:af:6b:aa:8f:10:5a:96:77:0b:f1:ac:2c:
04:b8:8b:26:8c:69:9a:63:fd:04:a6:03:ad:25:52:e1:a3:5f:
06:f4:24:d0:f7:30:74:ef:8a:6c:35:a7:93:1f:56:98:97:6a:
ba:aa:e3:6e:03:41:7a:69:fd:ca:ed:4b:b5:f3:3e:ae:6f:c1:
69:ef:b6:d8:d1:fa:3c:86:f4:4a:32:dc:1a:ea:bd:9e:4e:c0:
98:3f:a3:83:ee:8e:35:51:ed:a9:7c:17:e5:5b:0f:b2:27:70:
f0:0b:fd:6e:fa:fb:75:ad:ac:41:74:e3:30:aa:43:79:ad:7a:
f8:3a:87:98:d3:1f:c2:58:84:cf:fe:82:2e:9e:3e:a2:95:24:
3b:fc:3a:bd:7b:95:bb:b8:44:25:aa:5e:aa:21:cc:c8:11:24:
bb:a7:20:39:d2:47:02:7b:86:9b:16:49:2d:c1:63:87:95:8a:
c9:dc:85:23:94:44:4b:cb:b4:c9:3d:55:f1:40:88:d2:3f:bf:
bc:81:34:cf:91:0c:7e:2d:48:d1:48:ba:67:b2:fb:6e:9c:1a:
c1:b9:f7:d5:c5:25:87:7c:f9:26:02:b0:99:75:56:22:ea:42:
ad:1c:d4:7c:3b:81:fe:a9:43:3b:ec:25:b3:6c:3e:7d:15:b4:
ca:26:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:49 2025 by rpki-client