Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/z7Y_29puk_Wx7HmLDmJSAAb8lUc.roa
File: z7Y_29puk_Wx7HmLDmJSAAb8lUc.roa (raw, json)
Hash identifier: NI5g2v4nemU7zp4+gwV0bP4aou1pa5gmmbchISgof1I=
Subject key identifier: CF:B6:3F:DB:DA:6E:93:F5:B1:EC:79:8B:0E:62:52:00:06:FC:95:47
Certificate issuer: /CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Certificate serial: 01821A6C061C266A3E2770E497D8125A1013
Authority key identifier: C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/z7Y_29puk_Wx7HmLDmJSAAb8lUc.roa
Signing time: Wed 20 Jul 2022 07:04:23 +0000
ROA not before: Wed 20 Jul 2022 07:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:6c:06:1c:26:6a:3e:27:70:e4:97:d8:12:5a:10:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Validity
Not Before: Jul 20 07:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfb63fdbda6e93f5b1ec798b0e62520006fc9547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:e6:bf:69:3a:79:37:1d:80:0b:f1:f4:71:
d1:da:a5:97:c7:ad:50:25:03:9b:da:27:4e:09:dd:
f3:4c:1a:d1:c6:98:a3:68:53:b8:89:fe:bf:ac:36:
eb:63:e2:c2:65:1b:6a:4a:c8:16:ee:19:04:1f:cd:
52:75:f7:ae:80:54:a8:ec:bc:87:81:13:b1:9f:ad:
7c:54:ad:1d:74:0f:f1:13:c2:36:d6:f7:a3:1a:ff:
f6:19:26:2a:d7:18:bd:58:88:96:e0:fd:3a:0f:c9:
c3:4d:84:3f:97:84:d3:46:71:42:d0:66:a7:5e:c4:
4d:3f:e7:61:41:87:88:90:85:6a:24:d2:41:df:c0:
29:16:1f:c7:57:44:50:d8:f7:27:98:e2:f9:10:67:
eb:ca:5e:c0:6e:5f:94:11:0e:c9:ad:6c:72:17:c6:
d5:74:07:f0:55:33:31:21:b4:67:57:73:58:d9:15:
43:30:59:96:cd:b7:de:57:3b:89:29:9f:45:44:37:
7d:f9:b7:e4:53:60:8b:d5:0b:e4:1c:fb:0a:6d:0c:
b0:d1:7f:31:99:24:50:62:66:64:b8:20:37:ae:77:
99:4f:fd:fb:eb:5f:eb:89:56:03:1e:b8:4b:c0:e8:
8b:d0:9a:b5:0f:10:14:72:0c:37:08:6e:7b:f5:06:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:3F:DB:DA:6E:93:F5:B1:EC:79:8B:0E:62:52:00:06:FC:95:47
X509v3 Authority Key Identifier:
keyid:C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/z7Y_29puk_Wx7HmLDmJSAAb8lUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
85.208.253.0/24
85.208.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:84:27:c1:3c:63:3f:c8:59:fe:e8:9f:33:d1:f0:e3:ee:82:
25:b0:a7:51:32:ca:02:6d:ba:b2:0c:98:dc:e5:d6:a1:35:9a:
ef:11:fc:8a:35:9d:10:eb:9b:f9:f3:e8:c2:ce:40:35:e0:da:
bd:48:12:9f:8d:47:47:61:9c:1e:68:51:eb:cd:c1:52:41:a0:
cb:22:dd:2c:1d:ce:c0:dc:88:a3:a9:4d:fb:41:c5:18:6c:9b:
40:f6:10:4b:42:56:ea:ad:b5:13:c5:c9:19:33:6e:fe:34:7c:
f8:f6:a2:58:c2:25:66:6a:47:1b:45:74:ee:15:23:cc:14:5c:
94:99:6c:ac:85:de:97:2a:d3:33:27:ee:f1:0c:7b:af:54:3e:
8d:dc:95:d4:ea:f7:48:2d:81:26:a0:8a:ee:44:dc:0b:36:4b:
e5:c7:d7:40:1e:6b:ff:3f:a9:25:bd:ee:8f:4e:7b:26:0a:c8:
47:47:64:66:6b:35:41:99:a1:c5:e7:9b:34:79:af:d6:62:5c:
60:ed:58:84:c4:7b:18:7f:f1:0f:f4:20:5b:d8:a1:48:23:00:
83:68:eb:ae:26:0f:f0:fc:a8:fd:98:f8:ca:30:4a:92:6a:20:
39:e4:1d:2b:7f:f2:43:d8:5c:c5:26:98:8e:80:e3:df:8b:61:
6b:20:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org