Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/u4d9dZ9cYfcZJJHaYvq_vnDe1V8.roa
File: u4d9dZ9cYfcZJJHaYvq_vnDe1V8.roa (raw, json)
Hash identifier: dpiGfHtXoo2PSfueHxaM10LEYB92VnPRq6uUXs6afmw=
Subject key identifier: BB:87:7D:75:9F:5C:61:F7:19:24:91:DA:62:FA:BF:BE:70:DE:D5:5F
Certificate issuer: /CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Certificate serial: 01821A6DDA0CB28A48250402AF50451DA007
Authority key identifier: C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/u4d9dZ9cYfcZJJHaYvq_vnDe1V8.roa
Signing time: Wed 20 Jul 2022 07:06:23 +0000
ROA not before: Wed 20 Jul 2022 07:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:6d:da:0c:b2:8a:48:25:04:02:af:50:45:1d:a0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Validity
Not Before: Jul 20 07:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb877d759f5c61f7192491da62fabfbe70ded55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:70:7b:f6:c0:31:93:73:d4:bc:b0:db:35:
12:ef:8c:9b:4e:d4:2c:63:6d:b0:a9:e8:86:e0:67:
5f:39:bb:8b:98:54:79:89:a2:e7:5b:ea:65:5b:ec:
53:ec:d6:b2:33:e5:79:dc:06:90:ab:f8:5f:bd:ed:
6d:49:0e:cd:1c:63:96:ee:56:a3:e3:98:17:af:7a:
0a:a7:d7:3b:10:3f:4f:fe:fc:c6:ea:f9:fb:56:f2:
64:f9:32:dc:f8:c9:8b:46:05:0f:e6:37:1f:57:2a:
02:a2:8c:d2:53:aa:6a:2f:71:31:ec:87:8d:48:46:
18:53:1c:53:d0:64:9e:d4:f5:ce:16:31:e2:b8:78:
e4:89:d5:f0:7d:ac:c4:9c:98:19:5c:89:f1:7d:42:
ad:94:09:94:4b:c4:b3:15:df:24:f6:d1:bf:d0:e5:
70:44:fb:d5:cc:cd:19:47:69:84:a5:2e:5c:89:4b:
3f:d3:1d:8d:14:5f:4e:38:c8:e3:2e:68:b7:67:bc:
73:16:0a:cb:d8:f3:26:14:df:ca:d9:d6:5b:98:4c:
95:e6:5a:8f:53:d7:b4:f0:1d:b9:eb:6c:a1:24:f6:
02:8c:6c:1e:99:5a:cc:73:57:71:b6:82:32:8a:9b:
0a:09:c9:2b:6d:8d:b9:3c:8d:a9:73:0a:d5:d1:0a:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:7D:75:9F:5C:61:F7:19:24:91:DA:62:FA:BF:BE:70:DE:D5:5F
X509v3 Authority Key Identifier:
keyid:C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/u4d9dZ9cYfcZJJHaYvq_vnDe1V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
85.208.253.0-85.208.255.255
Signature Algorithm: sha256WithRSAEncryption
98:c9:d9:84:7c:1d:cb:3f:6a:68:66:4c:86:64:ee:cf:7e:be:
f5:ff:aa:ea:be:73:e8:ee:f8:70:be:70:f7:35:9f:65:f1:3d:
fc:51:de:2c:8f:a4:17:35:3f:c0:59:e9:42:fb:88:76:76:4c:
ba:21:75:a3:1d:fd:12:80:9b:d4:95:66:23:e6:72:ce:2d:96:
0a:40:c7:c7:2e:16:7d:75:40:47:dd:be:57:0a:42:35:bc:f1:
da:12:5b:90:fb:12:4a:0d:e9:89:02:aa:a6:cf:89:68:44:3a:
a1:46:30:3c:a9:b5:7a:3f:a0:30:11:d6:93:fb:09:70:c9:9c:
f4:d5:d7:ef:ad:62:ca:9a:06:fd:2e:75:c6:7e:db:3f:f6:5e:
97:d9:fb:50:d6:d7:53:3d:5e:70:d5:57:d1:ad:75:0e:6f:d4:
64:58:ee:ee:7a:e0:c4:3d:65:38:b0:d9:bf:79:f7:a0:26:af:
9b:54:0a:27:2b:7b:21:49:85:ea:07:9d:49:8e:4d:08:12:ba:
4a:e9:a9:ef:40:08:7c:ec:41:49:ea:74:da:55:9d:8f:23:45:
21:28:4a:f4:9e:4d:12:3a:36:c8:f5:e3:af:23:53:0e:27:f2:
18:a0:c0:8e:72:fa:c0:a3:a8:38:af:8b:6c:e5:6d:8a:b1:fb:
87:60:1f:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org