Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b44b0e-fbc8-4103-8b3e-0614437be2ee/1/T3wHh2rlb5pv8j6JtpLZ_szS1vw.roa
File: T3wHh2rlb5pv8j6JtpLZ_szS1vw.roa (raw, json)
Hash identifier: kYuJBoZnG1f8pOtznu36NK9IXV1WGrdefuhvEFJKD1w=
Subject key identifier: 4F:7C:07:87:6A:E5:6F:9A:6F:F2:3E:89:B6:92:D9:FE:CC:D2:D6:FC
Certificate issuer: /CN=5ca1c1623072272425f561da97ae102f06561e3f
Certificate serial: 0127A2
Authority key identifier: 5C:A1:C1:62:30:72:27:24:25:F5:61:DA:97:AE:10:2F:06:56:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKHBYjByJyQl9WHal64QLwZWHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b44b0e-fbc8-4103-8b3e-0614437be2ee/1/T3wHh2rlb5pv8j6JtpLZ_szS1vw.roa
Signing time: Tue 12 Apr 2022 15:31:02 +0000
ROA not before: Tue 12 Apr 2022 15:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201631
IP address blocks: 5.42.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75682 (0x127a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca1c1623072272425f561da97ae102f06561e3f
Validity
Not Before: Apr 12 15:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f7c07876ae56f9a6ff23e89b692d9feccd2d6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:60:66:15:0d:cb:1e:c6:f8:6f:c7:e7:f6:
e5:6f:64:44:8b:49:14:c1:24:34:6c:06:f4:41:06:
5c:c4:00:19:a5:82:63:c1:1a:f3:c6:ea:bb:ba:90:
e8:40:51:65:a4:48:f2:89:b1:d0:9f:1b:4f:2f:be:
24:48:6b:40:8b:84:e8:7a:36:e3:fb:18:32:5d:74:
3c:ab:f2:2c:6b:72:c2:63:22:88:cd:a1:ca:57:4e:
66:e4:fc:c0:1c:41:bb:0e:72:89:2c:09:bb:c9:3e:
97:cc:3d:ba:57:b2:e8:6a:6e:90:a0:c5:cd:b6:d3:
1a:f4:8d:e9:f3:37:3d:89:ce:a6:aa:36:f3:c1:2a:
45:f0:45:e0:63:ed:61:01:87:e5:ec:30:2e:87:c4:
b4:76:e4:c2:be:bf:0c:07:9d:e3:84:cd:58:ed:bf:
c0:77:47:83:75:4e:39:b8:38:ab:17:c8:e2:fe:05:
b9:e4:91:74:61:af:33:a7:26:e1:a0:66:f9:37:c0:
6a:b8:61:08:47:7f:ba:40:8f:dc:57:11:d3:c6:6c:
1f:d1:5d:56:23:63:62:29:27:c1:a5:04:8b:63:66:
49:c0:76:99:89:49:f2:ff:9f:18:96:db:75:2b:db:
7e:d5:f4:00:14:5a:8a:2a:df:c8:34:e9:ac:47:ad:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:07:87:6A:E5:6F:9A:6F:F2:3E:89:B6:92:D9:FE:CC:D2:D6:FC
X509v3 Authority Key Identifier:
keyid:5C:A1:C1:62:30:72:27:24:25:F5:61:DA:97:AE:10:2F:06:56:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKHBYjByJyQl9WHal64QLwZWHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b44b0e-fbc8-4103-8b3e-0614437be2ee/1/T3wHh2rlb5pv8j6JtpLZ_szS1vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b44b0e-fbc8-4103-8b3e-0614437be2ee/1/XKHBYjByJyQl9WHal64QLwZWHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cf:08:a7:5e:dd:fa:df:ef:19:99:ed:1a:a3:dd:20:a3:d9:
e6:bc:00:64:4f:49:b9:8a:97:58:b1:29:f0:80:d5:67:fa:82:
2f:40:4a:25:f1:43:57:03:cd:ee:40:96:3b:fd:35:db:be:42:
39:6e:e0:46:1a:bd:bc:16:45:b1:8b:4c:7b:96:7e:e1:2d:89:
ab:a6:fc:3f:3e:9c:fa:a0:8a:81:d6:88:f8:4e:59:79:84:71:
e9:4c:01:bf:50:78:0c:6c:d6:84:bf:35:62:13:c4:86:cc:03:
a7:9f:46:4f:ad:fd:4d:c3:9e:72:c8:23:cb:d4:d4:9e:d9:93:
d0:01:48:a5:62:43:d6:d0:40:e5:85:c3:c4:48:aa:5f:01:4a:
3b:92:4c:d8:dc:98:0e:f0:f1:e1:92:ef:1c:da:dd:dd:fd:4b:
04:6b:e1:67:8a:cc:62:c2:0e:b9:eb:43:67:34:22:b5:ca:23:
fd:82:12:3b:33:7b:a0:e6:fe:bc:c0:e2:ea:ed:16:9d:1f:49:
b2:fc:e0:be:45:b5:5c:db:85:a5:b7:46:8e:c8:34:8b:3d:6d:
16:34:d4:fc:a2:1b:2b:1f:52:2c:83:18:8d:bf:e9:ed:7f:91:
e1:fa:88:5e:1e:27:7d:cb:39:89:69:05:78:41:08:49:43:87:
96:87:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:10 2024 by rpki-client on console-fra.rpki-client.org