Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/332548-99a1-4fba-b249-28d5d00dc0cb/1/mUYDKWZqlThmkrR1pJIWSA_ztKI.roa
File: mUYDKWZqlThmkrR1pJIWSA_ztKI.roa (raw, json)
Hash identifier: BgIS+rtf/+vayCb+R1M5LCkLQ9oWvIHCTOv/Q9/jcp4=
Subject key identifier: 99:46:03:29:66:6A:95:38:66:92:B4:75:A4:92:16:48:0F:F3:B4:A2
Certificate issuer: /CN=abdc639a367adaf9b3382d09bda05ee545433159
Certificate serial: 01856F9DCE223DA356DBF9F39C6FC9E2853A
Authority key identifier: AB:DC:63:9A:36:7A:DA:F9:B3:38:2D:09:BD:A0:5E:E5:45:43:31:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xjmjZ62vmzOC0JvaBe5UVDMVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/332548-99a1-4fba-b249-28d5d00dc0cb/1/mUYDKWZqlThmkrR1pJIWSA_ztKI.roa
Signing time: Sun 01 Jan 2023 23:14:50 +0000
ROA not before: Sun 01 Jan 2023 23:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 5.42.203.0/24 maxlen: 24
194.5.86.0/24 maxlen: 24
2a12:1840::/39 maxlen: 39
2a12:1840:200::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:ce:22:3d:a3:56:db:f9:f3:9c:6f:c9:e2:85:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc639a367adaf9b3382d09bda05ee545433159
Validity
Not Before: Jan 1 23:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99460329666a95386692b475a49216480ff3b4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:31:45:33:97:8c:70:71:cb:b0:17:b2:d3:
44:f3:7c:6c:10:98:45:73:ab:04:0a:77:a4:db:01:
8c:d1:f5:78:29:52:f2:3c:0a:13:86:b0:a4:7b:27:
ac:ba:47:3c:ee:6b:9b:4f:e3:36:8d:0d:ab:0e:fb:
3f:68:a5:75:d0:65:da:55:0b:a7:a4:f9:b7:67:c7:
52:54:64:2e:a6:9a:19:a5:cf:0b:5b:27:ce:cd:8a:
49:bf:69:a2:4c:0f:6e:59:c7:30:31:b1:95:f9:67:
b9:fb:8e:ce:66:94:dc:5c:97:5e:ad:e0:ad:89:f9:
5f:c5:d6:f5:37:6e:a6:51:7c:53:d9:a9:51:41:46:
d2:8e:55:3a:24:46:96:50:38:a9:b2:75:74:fd:d4:
4d:3a:97:47:cc:36:65:6d:b4:ec:b5:cc:f8:e5:71:
11:4f:f6:a2:a3:90:68:8b:e1:f5:f2:61:a5:2d:a9:
8b:c2:dc:27:a0:55:4b:c6:b7:fc:12:96:60:af:90:
60:93:f3:b1:94:81:99:47:af:b4:f4:22:56:98:20:
e8:11:62:74:44:ad:45:cf:e4:7b:65:de:6e:2d:6a:
81:32:66:df:56:7a:0d:33:68:94:9f:34:67:4e:2a:
15:94:d9:05:b7:db:6a:13:82:1b:b9:62:e1:eb:27:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:46:03:29:66:6A:95:38:66:92:B4:75:A4:92:16:48:0F:F3:B4:A2
X509v3 Authority Key Identifier:
keyid:AB:DC:63:9A:36:7A:DA:F9:B3:38:2D:09:BD:A0:5E:E5:45:43:31:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xjmjZ62vmzOC0JvaBe5UVDMVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/332548-99a1-4fba-b249-28d5d00dc0cb/1/mUYDKWZqlThmkrR1pJIWSA_ztKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/332548-99a1-4fba-b249-28d5d00dc0cb/1/q9xjmjZ62vmzOC0JvaBe5UVDMVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.203.0/24
194.5.86.0/24
IPv6:
2a12:1840::/38
Signature Algorithm: sha256WithRSAEncryption
aa:1e:3e:7c:b9:77:5e:70:e5:88:b0:bc:61:fe:ed:43:60:0a:
24:b0:0b:19:3c:b3:92:cf:e2:ea:c4:9c:17:21:ff:5e:16:b2:
e0:1a:4b:ac:73:7e:b6:38:5a:dd:18:a2:17:c8:f5:aa:e1:c9:
76:57:36:3d:e5:ee:82:f1:2c:2b:e4:a6:e2:23:d3:c0:35:ed:
46:07:fd:82:3d:f3:37:6f:26:a7:d5:e5:83:ac:0a:be:d2:31:
de:bd:30:0f:8c:36:23:54:1a:82:de:95:c4:15:3f:63:76:67:
3a:45:b7:11:93:e7:76:df:88:56:be:b0:b8:34:7e:1d:d6:46:
9f:34:8e:9f:8d:6a:4c:0d:73:7d:7d:d1:7e:d5:99:c8:e9:1b:
f5:d3:eb:7f:3b:4c:1a:c5:64:b0:92:5c:ac:32:ab:e4:23:d1:
d6:6b:42:75:c0:3e:05:37:9a:a6:83:9f:09:ad:3c:3b:8f:c7:
16:f1:24:00:06:95:76:bc:0b:e3:63:8c:39:72:3f:91:02:74:
6c:c3:d9:1d:8d:79:5e:56:58:a3:28:2b:e9:d9:85:1f:44:b7:
f8:b4:9b:cb:f9:56:31:7b:45:ad:61:da:80:af:c0:ae:26:c4:
ef:48:f0:d9:8a:10:b4:53:13:b7:42:65:0d:7c:a8:a4:cb:c0:
4b:49:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:42 2024 by rpki-client on console-ams.rpki-client.org