Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/5fCuplZ29ivT9DifdqG9Bdu-6ZM.roa
File: 5fCuplZ29ivT9DifdqG9Bdu-6ZM.roa (raw, json)
Hash identifier: J+LsiMcdtpxXKpD4G1tqaDAd1U3hsiO31kIPfVrNR38=
Subject key identifier: E5:F0:AE:A6:56:76:F6:2B:D3:F4:38:9F:76:A1:BD:05:DB:BE:E9:93
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 020E77E8
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/5fCuplZ29ivT9DifdqG9Bdu-6ZM.roa
Signing time: Sat 01 Jan 2022 06:56:54 +0000
ROA not before: Sat 01 Jan 2022 06:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12886
IP address blocks: 103.192.160.0/22 maxlen: 22
128.65.144.0/21 maxlen: 21
185.88.92.0/22 maxlen: 22
103.234.232.0/22 maxlen: 22
94.101.120.0/22 maxlen: 22
62.204.160.0/19 maxlen: 19
212.118.192.0/19 maxlen: 19
193.23.64.0/19 maxlen: 19
103.51.228.0/22 maxlen: 22
103.76.96.0/22 maxlen: 22
2a02:f90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34502632 (0x20e77e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Jan 1 06:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5f0aea65676f62bd3f4389f76a1bd05dbbee993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:99:be:b3:9b:f6:b8:3a:d3:16:31:67:88:
dc:83:9b:64:0c:71:8a:72:40:b5:6c:44:90:93:14:
5e:37:c2:74:ba:d2:35:c2:4b:2a:ea:f2:4b:ce:29:
1b:ae:ae:95:ff:81:83:47:d3:67:7a:f9:a6:52:80:
f8:a1:b4:4e:c1:83:b0:e3:bc:85:30:77:59:1f:6e:
2c:e1:04:67:65:a2:0f:b9:62:89:c2:a2:ed:fa:1d:
2c:c0:e0:31:a6:3d:f5:14:47:99:fe:5a:1a:10:75:
33:1f:d1:02:1e:1f:b8:7a:9f:60:4b:a8:90:88:2b:
ef:2b:17:dc:61:73:4b:85:78:38:9e:69:4a:2f:8e:
37:e1:21:73:ff:e9:97:8f:0a:46:ea:1f:ad:44:ee:
00:f0:31:0a:e4:d4:90:5c:de:c7:05:74:7a:60:a0:
73:ac:b2:e2:c7:45:3c:4c:41:7e:7e:2f:47:fd:77:
f4:de:fe:15:54:79:e5:68:64:a3:09:f0:86:f4:1e:
85:dd:65:9d:1d:00:a8:13:af:50:df:8e:22:43:9e:
e3:a7:1a:7f:96:5f:f6:db:32:f8:a1:2e:78:24:35:
be:98:1a:cc:7d:fc:a7:af:a4:7a:a5:b4:93:9a:69:
9b:1d:17:91:70:70:a7:90:92:1a:c2:23:f1:b8:35:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F0:AE:A6:56:76:F6:2B:D3:F4:38:9F:76:A1:BD:05:DB:BE:E9:93
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/5fCuplZ29ivT9DifdqG9Bdu-6ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.160.0/19
94.101.120.0/22
103.51.228.0/22
103.76.96.0/22
103.192.160.0/22
103.234.232.0/22
128.65.144.0/21
185.88.92.0/22
193.23.64.0/19
212.118.192.0/19
IPv6:
2a02:f90::/32
Signature Algorithm: sha256WithRSAEncryption
07:43:33:76:72:c2:b5:13:dd:0c:e6:0b:c7:f0:bf:df:ca:f4:
44:b7:61:5b:d9:a1:a5:11:84:0f:38:8c:98:81:11:4f:cd:6d:
3e:e0:0d:58:59:6d:93:ca:ad:30:bd:76:52:35:e1:20:de:3c:
ab:ed:dd:67:aa:d3:51:3d:4b:95:34:69:9e:b8:6b:c4:bb:81:
42:a5:c8:84:79:67:d0:bc:e8:a8:52:c6:cb:b3:0b:33:6f:ec:
11:f2:35:06:df:ea:91:20:35:12:de:95:a5:ff:fd:a0:a1:89:
e7:d6:8e:4d:74:ed:2c:c6:e0:0b:2f:92:13:e6:67:a0:b4:71:
e9:89:2e:71:c5:de:d7:3d:14:cc:4b:98:b4:d2:d0:f9:11:5d:
eb:bc:7e:97:64:1d:aa:0e:1a:42:6e:85:94:e6:67:c1:bf:c0:
14:72:d9:13:09:52:4d:63:e1:f4:8b:e1:6e:d0:a0:c4:9f:d6:
9c:6d:91:ff:5d:6e:69:10:55:15:9f:54:bc:a8:fd:4f:f3:a1:
fd:e7:89:43:e5:1d:d6:60:85:07:1d:77:5d:9e:53:40:77:79:
05:ff:1a:9c:41:19:88:e2:34:5e:20:ce:8c:d1:4a:b9:b4:7f:
08:06:05:24:4d:f7:2a:d1:f8:be:79:cb:c6:cf:19:67:8a:00:
22:35:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:53:03 2025 by rpki-client