Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/kUlnC1tRSUbpZA0JwDJt9L6JBxM.roa
File: kUlnC1tRSUbpZA0JwDJt9L6JBxM.roa (raw, json)
Hash identifier: WgH4fPcKCohnt/sINBrUVjv9d2vnX4fp4j98RxgQzPg=
Subject key identifier: 91:49:67:0B:5B:51:49:46:E9:64:0D:09:C0:32:6D:F4:BE:89:07:13
Certificate issuer: /CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Certificate serial: 01856CCACF617B70C4DA5A84040F77D20D8C
Authority key identifier: C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/kUlnC1tRSUbpZA0JwDJt9L6JBxM.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:cf:61:7b:70:c4:da:5a:84:04:0f:77:d2:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9149670b5b514946e9640d09c0326df4be890713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:89:a5:5e:a2:f5:07:6a:4a:45:f0:d5:ae:
73:ff:c1:37:27:29:b6:e6:b5:4c:bc:61:01:57:95:
94:3d:ec:b7:55:76:fc:44:06:d8:89:3d:ae:04:f2:
2c:de:c2:c6:3a:4c:2f:6e:40:09:8a:bc:0b:e6:4e:
e3:38:89:c4:6c:80:16:5d:84:f3:3e:0d:3b:de:17:
fa:e9:33:b4:61:eb:4a:36:32:b0:04:e2:69:97:14:
38:7f:d5:c8:8b:bb:6a:b1:33:82:82:bc:c0:78:81:
f0:50:0d:26:c2:43:60:23:57:05:ed:ea:41:ab:20:
09:cf:99:90:85:b8:b9:95:e3:8f:d9:ea:32:72:13:
32:49:29:78:16:4a:a2:d4:16:e3:7d:9b:a4:5a:91:
ad:dc:58:75:60:fc:31:ed:b4:11:d7:0e:e3:83:f6:
78:8e:f8:5f:41:89:14:58:f0:1e:ee:23:27:63:4d:
ba:e3:b7:40:9a:5d:76:2b:49:22:58:a5:3f:86:10:
71:8b:6d:f2:8b:b1:64:08:5c:b7:1a:e2:62:6f:7e:
98:a0:c8:c2:d1:6c:b4:d2:a3:04:f3:be:c1:2b:e3:
ff:3a:89:da:54:c1:55:24:44:18:27:da:96:03:5f:
2a:19:47:0d:76:71:2a:a1:8c:c4:fa:3d:3b:b3:63:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:67:0B:5B:51:49:46:E9:64:0D:09:C0:32:6D:F4:BE:89:07:13
X509v3 Authority Key Identifier:
keyid:C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/kUlnC1tRSUbpZA0JwDJt9L6JBxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
85.208.253.0-85.208.255.255
Signature Algorithm: sha256WithRSAEncryption
61:82:90:8e:c5:15:fa:77:9f:c9:8a:4f:54:21:4a:9b:a3:b8:
2c:94:4e:ec:7d:fc:d7:88:5a:7d:26:29:29:59:3e:0a:39:f8:
06:8c:3d:f4:ef:3e:6a:2d:e1:2f:70:b8:fa:47:c4:8d:ae:8e:
06:7a:62:9a:e5:96:bf:4d:dc:27:fc:a3:e1:bb:fc:ba:e6:71:
d2:22:a1:98:f2:49:ec:95:54:c9:9c:89:43:e1:d1:4e:2c:91:
66:01:d2:86:26:e0:9f:ca:58:ba:ae:90:64:69:bd:e9:7f:91:
34:49:19:1c:05:dd:f7:db:c8:ab:5f:10:33:8c:34:94:b8:9a:
dd:37:a2:50:8d:be:3e:d7:01:52:47:8e:f0:e6:25:73:67:64:
77:ad:95:83:b7:e6:2a:2b:2c:59:30:ad:70:15:48:00:fd:5a:
e0:b6:94:36:07:91:c4:07:1d:39:9c:6d:5e:3d:ac:26:ac:3f:
14:cc:6a:95:66:fd:ea:72:ce:69:06:e8:19:93:b4:ba:73:d8:
7d:9b:2d:04:66:39:fe:e6:df:3d:23:d5:25:80:25:f7:28:60:
f9:af:26:03:0a:7d:ed:f5:d8:c6:12:92:4a:b3:e0:b1:0a:d9:
4a:11:9b:dc:32:16:a4:7f:f5:cb:a8:57:0d:8c:21:b2:f6:ef:
e3:fd:f3:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org