Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/5UAxmHzVnVdMhBNydaT8PrXb6Fk.roa
File: 5UAxmHzVnVdMhBNydaT8PrXb6Fk.roa (raw, json)
Hash identifier: DEGzgCSEYuDpM95v+PspGOFwzwywonezYca9s76s/BQ=
Subject key identifier: E5:40:31:98:7C:D5:9D:57:4C:84:13:72:75:A4:FC:3E:B5:DB:E8:59
Certificate issuer: /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial: D6367C
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/5UAxmHzVnVdMhBNydaT8PrXb6Fk.roa
Signing time: Sat 01 Jan 2022 01:53:33 +0000
ROA not before: Sat 01 Jan 2022 01:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 86.106.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14038652 (0xd6367c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Validity
Not Before: Jan 1 01:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e54031987cd59d574c84137275a4fc3eb5dbe859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:f9:4c:13:60:64:01:99:b8:02:77:91:30:
a2:c5:f7:04:30:7f:3a:8b:4c:ce:32:15:2f:ed:51:
0b:39:44:69:6d:eb:c6:c7:00:0e:dc:ef:5d:52:90:
6a:09:0e:ee:70:ab:41:01:f0:a6:6f:1b:79:e0:6c:
78:d4:ff:cb:d0:c1:4f:3c:5a:18:67:c3:04:08:f1:
c7:3a:86:16:3e:01:50:a6:19:0c:30:e2:c6:94:f9:
b1:32:9b:8f:70:b1:82:f8:a7:51:6c:64:37:b3:df:
fa:c5:8b:40:45:ce:d3:8b:bf:87:b0:0d:1f:82:86:
cf:b5:13:16:fe:92:d1:3f:9e:70:4b:37:75:ac:dc:
05:7f:6a:c1:74:3a:70:27:52:b8:94:11:60:e9:98:
c5:7d:70:db:4f:95:dc:b3:f7:4b:6e:32:29:e3:f8:
21:11:fa:64:e4:27:ff:83:0a:52:c2:d0:4b:da:72:
b2:1f:95:2d:03:92:c7:7e:8e:18:ef:19:9c:49:e5:
60:f0:52:c9:16:f4:84:d2:e2:62:22:85:54:3f:27:
29:a5:fd:83:aa:0c:ee:2c:b0:03:8a:82:c1:9e:80:
af:63:4c:60:ee:3f:33:a5:c9:23:0f:b7:21:a7:01:
b7:e2:74:4b:3c:37:77:a9:29:96:76:12:d6:d1:b6:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:31:98:7C:D5:9D:57:4C:84:13:72:75:A4:FC:3E:B5:DB:E8:59
X509v3 Authority Key Identifier:
keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/5UAxmHzVnVdMhBNydaT8PrXb6Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f3:6b:35:0d:95:be:06:4f:cd:3f:9c:c2:8d:eb:d5:1a:c4:
6f:1f:a5:ad:64:3f:5e:d3:c1:e2:45:43:8e:68:19:62:53:d7:
eb:59:d3:28:b5:ad:1a:2f:8e:fa:a9:21:1a:51:44:5f:dc:84:
de:a2:ff:69:7e:cb:06:1a:80:7f:b4:c3:46:64:50:26:c9:d7:
78:5b:db:e4:03:e2:e5:d4:07:87:13:bc:bc:13:92:60:27:53:
72:56:43:85:c9:50:37:fd:ab:7e:9a:9b:fa:c0:7f:21:33:86:
f8:76:e3:b8:ec:f9:f3:a4:c2:5a:bd:5b:cd:c7:19:e6:22:cb:
de:50:be:a0:97:2c:4f:8d:38:16:d0:3b:02:f1:ad:c0:d9:57:
4c:bc:ec:62:96:70:a3:db:2c:a7:db:77:64:a8:77:eb:1a:df:
a5:03:a2:fe:e6:7c:5b:c7:e1:a6:c1:0f:93:38:74:90:2a:70:
8e:3d:f5:70:ee:cb:f9:9a:fc:76:b3:57:2e:3a:97:b8:96:bd:
ba:84:98:1b:5c:2d:3a:b5:90:b7:bb:49:11:50:75:fc:d9:b8:
48:aa:b3:0e:f6:49:01:5f:bc:a1:20:c5:2f:7c:3b:b5:ef:22:
4c:4a:dd:b3:ce:6d:57:13:f8:f9:68:e4:50:4d:3a:6d:df:81:
54:46:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:32 2025 by rpki-client