Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/X5gfha-4YCr4WxVbO8ug2e24nMM.roa
File: X5gfha-4YCr4WxVbO8ug2e24nMM.roa (raw, json)
Hash identifier: OT5eEEp+mWbitIMHDdg7qzUiUAk7HnCuDyZCsAISGnM=
Subject key identifier: 5F:98:1F:85:AF:B8:60:2A:F8:5B:15:5B:3B:CB:A0:D9:ED:B8:9C:C3
Certificate issuer: /CN=5a15823b86adc7eebeee7a2d8b70e12dc9bbf5b5
Certificate serial: 01920F33D75F67900A23B13F7C74BFD00C68
Authority key identifier: 5A:15:82:3B:86:AD:C7:EE:BE:EE:7A:2D:8B:70:E1:2D:C9:BB:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/X5gfha-4YCr4WxVbO8ug2e24nMM.roa
Signing time: Fri 20 Sep 2024 11:31:48 +0000
ROA not before: Fri 20 Sep 2024 11:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 185.224.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:33:d7:5f:67:90:0a:23:b1:3f:7c:74:bf:d0:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a15823b86adc7eebeee7a2d8b70e12dc9bbf5b5
Validity
Not Before: Sep 20 11:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f981f85afb8602af85b155b3bcba0d9edb89cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:e2:cc:a4:98:cb:41:8d:0f:eb:2b:78:94:
49:43:91:db:f1:e5:4b:13:2f:89:18:94:79:73:83:
5d:6e:4e:48:13:6f:0b:e5:77:6e:3b:66:95:06:7d:
ad:c2:4f:ba:c8:49:86:94:89:a7:03:ee:19:08:73:
5a:da:36:88:c8:88:f4:50:05:07:c2:78:27:e3:10:
13:db:f3:8b:85:76:cd:41:72:35:12:37:77:06:97:
86:76:2e:43:26:b1:84:85:f1:23:5a:3e:ef:f7:8c:
f3:14:f9:9a:54:19:db:b4:49:85:8c:26:a2:60:99:
fb:9d:99:76:24:b1:15:3e:15:b9:14:42:05:42:cf:
b2:28:dc:a3:a6:d9:5d:e9:14:66:a2:64:a0:1d:77:
cc:20:50:d6:4a:f1:34:08:a7:e2:00:aa:ae:52:34:
ba:af:cb:da:5c:8f:98:15:d1:97:50:17:65:d2:84:
cf:49:35:28:6b:b8:40:94:63:fc:ed:4d:f7:ac:4d:
5b:6f:a8:02:d7:31:e2:1d:b9:bc:3a:0b:fc:25:66:
11:aa:a9:4f:63:0a:c5:3a:b5:c6:07:da:8f:94:6b:
54:85:2b:02:c3:44:42:64:e7:a1:d6:37:f3:b9:b4:
1e:74:f3:0e:97:e6:3b:42:aa:d8:b6:16:79:56:20:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:98:1F:85:AF:B8:60:2A:F8:5B:15:5B:3B:CB:A0:D9:ED:B8:9C:C3
X509v3 Authority Key Identifier:
keyid:5A:15:82:3B:86:AD:C7:EE:BE:EE:7A:2D:8B:70:E1:2D:C9:BB:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/X5gfha-4YCr4WxVbO8ug2e24nMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/WhWCO4atx-6-7noti3DhLcm79bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
28:6b:2e:97:ce:36:ff:cc:d9:64:17:f5:99:e9:d4:47:b3:cc:
ce:07:a1:3d:8f:6a:a3:3a:31:b0:25:c4:ad:26:54:c4:ef:30:
d6:a7:1b:6c:af:50:5f:e5:f8:97:ad:44:e0:dc:e3:8f:bf:0a:
84:4f:70:0a:71:0e:47:69:5a:9d:d9:1c:82:7d:42:9b:ec:f1:
1d:7d:21:3b:60:00:aa:1c:40:a6:49:09:b9:0f:d1:6f:93:01:
51:90:ec:09:c9:9f:9b:2d:a2:5c:ea:18:c4:87:50:1a:9a:8d:
a4:18:da:50:50:e9:f2:b1:fc:f6:72:39:25:b3:24:34:8f:61:
96:18:8e:40:a5:ba:9d:3a:eb:54:3d:67:72:d7:7c:2a:30:99:
1b:2c:4e:bb:ff:c0:13:3b:b2:0a:30:45:82:06:74:61:80:b8:
8e:d0:44:61:78:4e:6b:e7:68:3e:e3:89:dc:f4:2d:b4:56:16:
36:9f:8d:ef:94:61:82:fb:77:d6:84:9e:ac:97:6d:02:8f:7e:
c5:a2:01:82:77:08:7c:44:cd:93:13:95:e6:6b:93:a9:e0:32:
80:5a:11:65:af:33:2e:4e:ad:08:94:7a:bf:23:54:b0:8c:a0:
a8:ae:04:82:44:5c:1b:20:c2:ab:eb:11:ac:76:35:41:2f:72:
f8:03:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 14:17:46 2024 by rpki-client on console-ams.rpki-client.org