Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/ko6gssHIahuAxnCYTXUkXPfxYg4.roa
File: ko6gssHIahuAxnCYTXUkXPfxYg4.roa (raw, json)
Hash identifier: y9HA3P8e6sC3h1OAeuVSsSjN3R6H+f1wM/tdsi4RptU=
Subject key identifier: 92:8E:A0:B2:C1:C8:6A:1B:80:C6:70:98:4D:75:24:5C:F7:F1:62:0E
Certificate issuer: /CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Certificate serial: 018205732AF326F4C2AC64F4DE3235E7B4DE
Authority key identifier: C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/ko6gssHIahuAxnCYTXUkXPfxYg4.roa
Signing time: Sat 16 Jul 2022 05:20:09 +0000
ROA not before: Sat 16 Jul 2022 05:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:73:2a:f3:26:f4:c2:ac:64:f4:de:32:35:e7:b4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Validity
Not Before: Jul 16 05:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=928ea0b2c1c86a1b80c670984d75245cf7f1620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:1f:ba:09:14:4d:d4:17:ec:b3:c0:c2:cc:
6a:ab:a7:77:aa:8f:ca:54:e7:8e:20:26:dc:38:a4:
70:61:bc:e2:82:f9:14:e1:51:55:0e:38:b5:54:b2:
3d:55:68:4a:e1:c0:3a:28:6a:8d:c1:4d:0c:a0:e5:
5c:65:24:bc:ad:bc:c1:1a:b2:05:18:2d:74:61:98:
eb:ed:d7:d5:3a:42:05:b8:9b:eb:4c:d2:d3:90:bc:
ee:a3:c7:56:c2:17:a8:7f:2d:c8:7d:ec:e0:65:ec:
9b:6d:38:f0:5e:59:6a:60:d7:3a:bb:ba:55:1c:7a:
9c:c8:f8:c1:2c:e5:b6:ff:5a:1c:b1:3d:8f:9e:93:
dd:fd:c4:1a:60:a1:a7:f3:77:e7:56:5a:92:72:3c:
25:9e:87:fd:71:07:ef:86:ff:db:61:46:6d:cf:fc:
c8:91:86:1a:d0:91:4a:25:30:4b:87:b4:2a:11:0e:
2c:a6:c0:ee:82:c0:8b:f5:b3:60:c6:6d:f0:92:25:
b7:68:94:50:28:f2:fc:b3:23:b5:b1:a0:51:84:ce:
e4:95:91:b0:bf:64:be:68:c2:a9:d6:56:79:8c:85:
e0:1d:56:b2:09:28:1b:61:d4:a5:60:9e:ce:a7:4b:
1e:67:97:8f:85:96:77:c8:91:26:8a:dd:f7:2e:46:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8E:A0:B2:C1:C8:6A:1B:80:C6:70:98:4D:75:24:5C:F7:F1:62:0E
X509v3 Authority Key Identifier:
keyid:C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/ko6gssHIahuAxnCYTXUkXPfxYg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
85.208.253.0-85.208.255.255
Signature Algorithm: sha256WithRSAEncryption
b2:71:4b:80:62:bf:54:cc:1a:d1:36:6b:c0:c5:8a:46:62:bc:
07:6c:17:62:c1:02:bc:22:7e:f5:e6:93:c7:55:67:c4:95:94:
fa:32:34:70:c3:9b:fb:51:7f:2e:d3:81:b0:27:d8:ba:25:70:
50:0f:a4:d3:69:46:ff:8b:ff:5b:dd:cc:6a:44:fa:9e:29:f5:
28:62:f1:12:fe:1e:6c:1c:4b:37:9f:73:0d:8b:e2:39:2b:dc:
29:4a:60:fd:8e:29:8c:6e:b8:7c:d2:5c:a4:8c:5a:0d:29:56:
aa:7e:73:bc:32:c0:25:1c:55:38:aa:aa:e4:a4:94:ca:75:e7:
a1:81:d6:e8:1e:11:93:c1:b2:80:01:32:73:f5:0d:f6:2d:5e:
bf:93:e2:ec:54:b4:ce:06:65:9a:4f:d7:64:4c:81:02:c2:03:
14:fb:26:cd:a1:48:76:fb:4e:cd:00:71:c9:1f:98:dc:99:3e:
a9:d1:ff:00:ca:44:c6:22:1e:fc:17:96:d8:c9:ea:a4:aa:b9:
53:70:cf:29:40:67:ac:28:c5:aa:bf:34:29:d8:13:f4:e7:c2:
67:d5:63:bb:0f:36:b7:8f:75:46:61:ab:4d:65:86:6d:c4:bc:
46:bb:e3:15:08:61:aa:4e:fe:3b:ab:92:20:c1:89:b3:c1:a9:
9f:1d:c3:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org