Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/1-d1R2l14QU-Eg7oBhqoxyQw0C5s.roa
File: 1-d1R2l14QU-Eg7oBhqoxyQw0C5s.roa (raw, json)
Hash identifier: GWmThoatCptCDiLGSyZMnGOfKjU6eDoA87ohx9q20XM=
Subject key identifier: F9:DD:51:DA:5D:78:41:4F:84:83:BA:01:86:AA:31:C9:0C:34:0B:9B
Certificate issuer: /CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Certificate serial: 05B2F2A2
Authority key identifier: C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/1-d1R2l14QU-Eg7oBhqoxyQw0C5s.roa
Signing time: Wed 13 Apr 2022 06:22:01 +0000
ROA not before: Wed 13 Apr 2022 06:22:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95613602 (0x5b2f2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Validity
Not Before: Apr 13 06:22:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9dd51da5d78414f8483ba0186aa31c90c340b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:c4:a2:ea:5f:33:3f:5c:ab:f2:b9:60:84:
79:87:a8:45:83:11:d9:81:92:ac:f0:71:45:df:ee:
45:7c:02:83:73:9d:2b:86:75:2e:76:50:e2:f6:f3:
cd:23:7e:75:a1:9f:96:fc:f4:ba:ec:2e:6f:aa:c5:
a3:4f:6a:09:08:a3:0c:d7:cb:b8:19:fc:b5:9c:c0:
79:eb:1e:15:09:db:0b:4d:eb:56:3f:2a:dc:c9:e9:
29:15:eb:9e:59:8c:59:0b:61:a4:eb:d1:ae:b2:72:
36:c7:d8:d3:21:d0:df:a8:2f:09:49:30:cb:da:fd:
2e:bb:be:fc:e4:e7:2e:a8:7f:91:e5:49:cb:ec:de:
90:3c:8f:43:1c:8e:bd:a9:a6:a5:ad:7b:09:c5:c9:
20:5d:0b:28:de:cd:f5:a4:80:03:4b:52:0c:bd:c3:
aa:dc:2d:70:a7:22:66:e2:ea:61:92:fe:a4:b2:13:
ac:4f:c2:79:fd:52:d4:10:6f:21:41:91:63:df:aa:
f5:df:25:5a:0e:56:fc:eb:f5:6c:e5:6b:e4:e6:84:
f3:c6:a5:b4:73:b6:15:24:48:fe:5a:bd:42:f7:4d:
57:a1:1c:4b:0e:a7:b3:c0:f3:5f:29:0b:db:01:35:
11:5c:f4:91:d4:8b:ed:07:87:ed:d0:0b:cf:27:e1:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:51:DA:5D:78:41:4F:84:83:BA:01:86:AA:31:C9:0C:34:0B:9B
X509v3 Authority Key Identifier:
keyid:C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/1-d1R2l14QU-Eg7oBhqoxyQw0C5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0-5.182.46.255
85.208.254.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:9d:5f:aa:b4:e2:38:f6:35:53:d2:c6:f2:e3:88:c7:56:76:
47:88:ed:b0:73:72:b0:68:6e:c6:65:7a:1c:b3:2a:2e:0b:70:
bd:29:8f:bc:ec:c5:c5:7f:eb:51:6d:21:f6:82:8a:f0:af:2c:
80:ae:b0:dd:7b:95:17:10:32:29:c3:69:ae:51:b9:0a:98:02:
24:57:fb:99:37:c8:6c:1e:3a:20:0c:da:96:08:c8:f0:b6:11:
d7:b9:cd:c4:4b:81:1e:42:af:ec:06:f8:13:b0:ad:53:fb:d2:
72:97:63:af:2b:65:04:d1:52:db:02:37:2c:8d:b3:1e:eb:a2:
d5:36:81:44:34:2e:c0:0a:34:f6:1d:2c:41:8b:8d:ea:65:10:
4e:c3:b3:fa:40:8e:9f:8e:91:1b:e3:0c:a1:f2:98:98:a4:48:
b5:1b:5f:5a:b5:d7:bf:d1:4f:06:1c:60:40:ab:6f:90:69:9b:
76:69:e2:96:bc:d8:97:c4:e3:f4:8c:a6:a9:02:3e:85:02:96:
87:4d:68:ce:03:4a:90:2e:7d:73:0f:78:eb:bd:a2:a4:a8:c4:
2b:a1:3d:6b:5c:80:58:fb:2a:00:a3:35:f0:bb:19:13:18:44:
1e:7d:04:84:c7:2c:f6:a9:fc:9c:76:06:74:46:38:be:dd:bc:
ff:35:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org