Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/5INbv-rsx3vcEt6_TQKtezCSwpg.roa
File: 5INbv-rsx3vcEt6_TQKtezCSwpg.roa (raw, json)
Hash identifier: hAIwGvO9Wfr2pO/sghB/rqhdTpGq9502/N1oFe1xm60=
Subject key identifier: E4:83:5B:BF:EA:EC:C7:7B:DC:12:DE:BF:4D:02:AD:7B:30:92:C2:98
Certificate issuer: /CN=b4a09c900a8578bd029d04de93a7ff3047d38f83
Certificate serial: E67E2F
Authority key identifier: B4:A0:9C:90:0A:85:78:BD:02:9D:04:DE:93:A7:FF:30:47:D3:8F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKCckAqFeL0CnQTek6f_MEfTj4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/5INbv-rsx3vcEt6_TQKtezCSwpg.roa
Signing time: Thu 05 May 2022 13:27:42 +0000
ROA not before: Thu 05 May 2022 13:27:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 94.143.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15105583 (0xe67e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a09c900a8578bd029d04de93a7ff3047d38f83
Validity
Not Before: May 5 13:27:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4835bbfeaecc77bdc12debf4d02ad7b3092c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:ef:28:f4:09:d7:2a:c4:61:7a:b7:5d:a6:
df:f4:1c:78:47:d1:1c:c2:a6:4e:0f:e9:42:83:7c:
f5:d6:ac:52:e0:00:45:cb:ce:12:63:bf:d8:03:93:
2a:5e:b8:89:94:79:40:1e:0f:89:da:df:e5:b0:1f:
42:b5:32:49:79:55:11:ec:b1:af:f3:b0:bc:de:8c:
4f:86:45:b8:8d:91:e0:8f:fb:3e:eb:94:57:9b:e0:
c0:a9:09:07:91:e3:9b:38:19:35:e6:0b:ad:37:ab:
4b:f3:e1:37:3a:b1:d2:c1:dd:23:52:b8:58:af:2e:
68:40:0c:7b:a7:ea:e6:d8:7c:64:30:44:b7:be:07:
26:bd:e3:e5:ce:6b:cb:16:96:cd:7d:e7:da:2a:b8:
8a:0c:de:c5:95:c0:0c:73:84:f1:89:aa:b3:0f:f5:
10:5b:c5:de:3e:f8:40:5f:a3:3c:fa:f0:ff:fd:8e:
58:2a:8e:a9:81:1c:d8:2c:f0:a4:fd:b2:0f:3b:53:
da:3b:de:dd:03:2b:24:73:7a:8c:e4:5d:0f:b8:31:
c5:70:c0:9c:4c:b1:90:25:ec:6c:df:11:a0:1b:9e:
89:d1:13:11:04:a0:6b:cf:9f:e5:ce:06:2e:17:3e:
76:83:ef:3a:6c:c1:c3:6c:e8:45:6b:45:07:c6:0f:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:83:5B:BF:EA:EC:C7:7B:DC:12:DE:BF:4D:02:AD:7B:30:92:C2:98
X509v3 Authority Key Identifier:
keyid:B4:A0:9C:90:0A:85:78:BD:02:9D:04:DE:93:A7:FF:30:47:D3:8F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKCckAqFeL0CnQTek6f_MEfTj4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/5INbv-rsx3vcEt6_TQKtezCSwpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/tKCckAqFeL0CnQTek6f_MEfTj4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.226.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0c:1a:45:45:a9:8e:cd:77:ff:89:d1:ec:06:0e:bb:ec:11:
30:f7:01:78:bd:6c:b8:04:48:94:c5:a9:f5:4a:d8:3a:1b:e0:
39:c4:03:ee:65:64:0f:5e:cf:e0:35:c9:f9:9a:ae:65:5a:24:
42:05:77:f0:e9:f9:8e:20:71:fb:1e:57:d5:71:b1:19:82:5b:
d3:dd:88:f5:b6:12:56:11:0f:79:df:ca:f9:14:d5:39:c1:27:
c9:bc:de:fc:36:75:20:58:ae:2e:34:9e:99:f3:7d:e8:3b:d0:
0b:10:0b:cf:98:a5:cd:cc:3c:6d:4d:39:df:fe:5a:44:5c:d6:
4f:05:20:6f:2e:80:49:c6:8d:a8:58:55:c5:2a:4c:18:37:bb:
d1:44:22:d4:a8:f0:20:6d:7e:84:64:95:d7:f2:13:3d:64:a8:
12:0e:57:40:60:58:cc:a6:0c:01:4a:9e:f3:27:ab:bc:8b:f5:
7e:65:68:13:fe:ec:78:7e:19:d8:81:10:b1:80:b8:34:25:7d:
e3:a3:d7:80:c6:ab:db:ab:ef:ab:df:09:74:18:a7:3e:b2:be:
7c:f0:4b:b4:e7:46:c3:2f:f6:d5:d3:95:34:1c:d5:99:9f:c0:
28:4e:5d:61:7d:66:70:ae:71:0c:c6:53:b5:80:18:50:34:5f:
e8:29:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org