Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/Ff_52WU8oP14u8yq_vt-cY-htMA.roa
File: Ff_52WU8oP14u8yq_vt-cY-htMA.roa (raw, json)
Hash identifier: xiRrata9RV4Pp+491HL+Hg6Oy4cJdKdR3ikYoLtZoKI=
Subject key identifier: 15:FF:F9:D9:65:3C:A0:FD:78:BB:CC:AA:FE:FB:7E:71:8F:A1:B4:C0
Certificate issuer: /CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Certificate serial: 0190EF5A34133AE062554C1429A5A550C839
Authority key identifier: F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/Ff_52WU8oP14u8yq_vt-cY-htMA.roa
Signing time: Fri 26 Jul 2024 14:03:04 +0000
ROA not before: Fri 26 Jul 2024 14:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208687
IP address blocks: 45.89.4.0/22 maxlen: 24
141.195.128.0/18 maxlen: 24
185.147.244.0/23 maxlen: 24
2a0a:5580::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:5a:34:13:3a:e0:62:55:4c:14:29:a5:a5:50:c8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Validity
Not Before: Jul 26 14:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15fff9d9653ca0fd78bbccaafefb7e718fa1b4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:61:1e:8d:b8:7d:1e:f9:9b:29:45:e8:f4:
d3:7d:56:d7:fc:b2:f4:74:f3:94:5a:94:46:cd:e1:
98:cf:7c:56:af:5d:77:c6:9e:10:49:5d:ea:b3:3b:
50:be:6d:2b:f6:2c:91:62:38:7e:62:7b:13:fe:8a:
4a:29:87:72:71:70:0e:ad:11:5a:e7:49:f7:b3:d3:
1a:2f:9c:44:81:9f:a0:56:ff:ad:bd:36:5d:ef:95:
19:76:50:c7:1c:6d:d3:ac:92:3c:91:ea:d9:a4:a2:
d9:68:0c:49:9f:f4:c2:6d:03:70:57:a7:a1:83:a5:
97:9c:38:c1:46:5a:da:e7:c9:be:2a:51:10:03:11:
bd:d3:0c:8b:13:16:e9:74:30:45:bb:31:1d:4e:97:
cd:91:39:9f:96:fe:87:fd:a2:dc:22:f5:95:27:41:
6a:e7:b4:43:4b:c9:2b:ed:7a:78:f9:28:38:84:0c:
d9:3f:fc:9e:f3:72:9d:e3:57:6c:0e:76:b1:27:af:
ec:a6:1c:8f:17:63:dd:ae:e2:63:5a:05:90:33:72:
69:bc:4c:65:3b:fb:a2:25:4a:84:b4:08:bc:d7:51:
0a:c1:e9:56:aa:be:a9:a0:26:8e:6f:20:7e:e8:0d:
81:24:93:eb:bc:31:2c:30:aa:63:94:36:6f:d5:cc:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FF:F9:D9:65:3C:A0:FD:78:BB:CC:AA:FE:FB:7E:71:8F:A1:B4:C0
X509v3 Authority Key Identifier:
keyid:F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/Ff_52WU8oP14u8yq_vt-cY-htMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/8mI53KnekLP_m9jCPv38Ep9t7Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.4.0/22
141.195.128.0/18
185.147.244.0/23
IPv6:
2a0a:5580::/29
Signature Algorithm: sha256WithRSAEncryption
87:79:33:f6:63:4e:10:bf:40:ea:a6:51:ee:b5:7c:56:6d:1a:
ed:7d:82:17:6d:d8:06:21:63:a3:24:e9:04:c8:f2:5b:d0:1a:
36:60:98:24:1d:57:b7:00:8e:9a:08:5e:d0:b1:f5:28:0b:43:
f1:5f:bc:be:ac:3b:87:5e:d6:b8:d1:f3:05:c4:49:fd:ac:5d:
1a:90:4b:76:ee:74:f8:6d:c9:1e:11:ee:d2:36:c1:38:94:cc:
3e:89:98:4b:1a:23:c4:40:64:a4:d0:b1:7a:7a:81:54:59:0c:
83:fa:01:e4:e7:e4:a8:89:bb:4a:ca:59:1b:4c:f9:c1:63:53:
6f:18:44:b1:b8:e9:96:b5:a7:82:1d:07:86:a2:71:7c:45:be:
cd:29:45:cd:2d:1c:b5:ce:c8:63:33:75:28:b0:57:a4:c1:6d:
9c:3b:0d:b6:72:eb:f7:69:fb:30:4b:09:f1:d6:58:02:66:9f:
5a:41:18:57:45:bb:cc:e7:c7:75:b3:17:98:bc:25:98:3a:77:
3d:e0:72:9d:4a:e0:8b:39:c3:94:4c:bd:77:36:fe:ef:8f:a2:
ea:aa:9a:07:84:2f:ab:76:4b:47:97:d0:a3:e2:21:84:91:9b:
c9:58:26:b7:95:ac:98:ff:9b:53:aa:2b:be:77:db:27:1f:ca:
98:4a:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 17:04:57 2024 by rpki-client on console-ams.rpki-client.org