Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/dw5M3oPea__nar-THDfqwEmsxSc.roa
File: dw5M3oPea__nar-THDfqwEmsxSc.roa (raw, json)
Hash identifier: L/1Od0iMWTgey1aEOCxF8cOeFtNZoH+XRF9sT2eFn6k=
Subject key identifier: 77:0E:4C:DE:83:DE:6B:FF:E7:6A:BF:93:1C:37:EA:C0:49:AC:C5:27
Certificate issuer: /CN=891d6101d729bc95597da528604ec0b0b7e0042c
Certificate serial: 556801
Authority key identifier: 89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/dw5M3oPea__nar-THDfqwEmsxSc.roa
Signing time: Thu 28 Apr 2022 10:11:40 +0000
ROA not before: Thu 28 Apr 2022 10:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 86.104.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5597185 (0x556801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891d6101d729bc95597da528604ec0b0b7e0042c
Validity
Not Before: Apr 28 10:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=770e4cde83de6bffe76abf931c37eac049acc527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:a5:e0:2b:1f:d8:83:38:7f:f0:94:4e:1a:
c0:68:ef:97:27:30:9e:49:4c:6a:42:73:21:f0:7e:
18:88:9b:b2:c7:51:ba:53:2a:30:9c:8d:62:fa:38:
9f:4a:00:c8:ff:98:72:c3:94:61:2d:53:cf:bd:b8:
c8:1f:1a:c7:3d:06:7c:63:04:b3:c5:05:45:25:96:
e1:96:48:c8:76:95:cf:be:30:20:8b:4f:11:a7:3b:
b8:53:41:92:b0:5d:37:61:16:4e:96:ef:0f:bd:a7:
d6:d3:4d:ae:bb:27:45:9a:61:6e:1d:f0:1e:13:5b:
8b:60:c3:eb:23:d6:9c:6f:cf:7b:b6:1c:51:2e:c2:
11:d7:75:ea:d8:0e:f9:06:8f:6e:02:5a:76:85:da:
2d:84:a1:98:b8:c8:f9:4a:fe:68:db:ce:af:16:ae:
1f:09:e3:25:c6:0c:cb:95:94:42:ed:83:bc:8c:ba:
4b:96:de:7d:bb:53:76:51:5e:ba:61:18:77:53:07:
04:30:32:b4:08:2c:6d:c6:e1:75:55:3d:f3:5f:77:
45:30:8d:9e:45:a3:07:0b:37:38:f0:4e:f3:0c:77:
5f:3d:12:6b:df:48:2d:64:45:8f:a6:a2:14:58:54:
68:44:56:d4:43:b3:c7:ec:73:32:be:02:bd:10:3e:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0E:4C:DE:83:DE:6B:FF:E7:6A:BF:93:1C:37:EA:C0:49:AC:C5:27
X509v3 Authority Key Identifier:
keyid:89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/dw5M3oPea__nar-THDfqwEmsxSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/iR1hAdcpvJVZfaUoYE7AsLfgBCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.192.0/24
Signature Algorithm: sha256WithRSAEncryption
64:42:56:be:f9:b2:bd:c4:06:75:e5:48:c2:f6:cd:b5:6c:aa:
44:4d:d9:b2:79:a1:77:b0:c8:2f:4c:fc:3a:5f:58:0a:2c:db:
dd:e8:36:e8:0e:26:ec:9b:ab:96:2e:db:84:03:9b:19:cc:76:
70:8a:fb:84:82:b5:5c:0d:09:63:01:62:8b:7e:c4:26:bd:ad:
33:28:24:5a:66:71:fa:0b:fe:a2:c9:e1:cd:ce:33:45:ee:e1:
ea:ff:3d:f1:03:bb:ad:9d:8f:53:44:c0:bc:4f:6a:07:35:66:
16:ea:3d:4d:0f:9e:16:aa:8f:2c:89:84:3b:b3:e6:23:01:b4:
85:6c:db:70:97:13:f7:d6:8b:f6:c1:c7:a1:ab:4e:80:26:6c:
b2:8f:0a:4e:cc:45:79:05:ed:16:a7:08:53:d2:0c:3f:24:84:
0f:11:06:75:d3:36:5d:89:cd:90:15:d8:13:cd:e6:86:b2:86:
3a:89:8a:9a:53:70:e3:7c:7c:38:19:f7:5b:e5:bc:57:26:16:
c6:3f:bd:55:0c:d8:80:70:c8:95:78:ed:04:0f:a7:29:c3:5c:
c7:d3:5f:34:86:ad:2d:a0:5b:a3:50:08:db:ca:49:73:51:de:
bd:d6:d2:90:8b:b1:71:84:3c:90:26:74:28:4d:94:69:e0:4d:
02:09:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:30 2025 by rpki-client