Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/z39Ek6Y2zbpDyP-bUxdqsIYZAzo.roa
File: z39Ek6Y2zbpDyP-bUxdqsIYZAzo.roa (raw, json)
Hash identifier: PxKvmvlOFSz9D+AksKcPIaXry1mxL2c07YvpBHMUUck=
Subject key identifier: CF:7F:44:93:A6:36:CD:BA:43:C8:FF:9B:53:17:6A:B0:86:19:03:3A
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018703A5263805071B8CF80480A65F558A2E
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/z39Ek6Y2zbpDyP-bUxdqsIYZAzo.roa
Signing time: Tue 21 Mar 2023 10:09:27 +0000
ROA not before: Tue 21 Mar 2023 10:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199315
IP address blocks: 5.172.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:a5:26:38:05:07:1b:8c:f8:04:80:a6:5f:55:8a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 21 10:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf7f4493a636cdba43c8ff9b53176ab08619033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:26:a6:de:1b:e6:81:ba:4d:ab:38:44:d8:
59:b3:29:fa:13:85:82:73:9e:30:53:a0:a3:ba:87:
dc:24:8b:6b:2a:f1:62:c7:46:85:fe:ba:3c:3c:ff:
7a:36:4a:b6:e2:90:a2:54:75:fc:ef:56:da:d4:c8:
53:e9:5d:89:40:0b:2d:00:97:61:00:08:f7:74:e7:
10:be:2a:54:40:ed:78:32:45:6b:cb:3a:dc:bc:5d:
27:23:75:5a:d5:6b:de:ca:6f:86:8a:ef:ff:44:87:
d7:95:0e:f6:2b:e0:1b:4a:e2:c7:a7:e2:18:79:6a:
63:28:96:ad:49:cc:3f:77:ec:35:58:68:78:ea:b4:
48:c9:3b:90:d4:e0:5c:73:c7:48:9b:dd:ab:0d:8f:
2f:aa:91:41:23:a6:6f:b0:67:07:be:5e:57:b3:ea:
3e:2e:6f:aa:64:86:f8:c6:46:b9:30:12:84:ec:ec:
6c:57:cf:e5:4d:1f:4d:a7:a0:c3:a4:26:0a:82:22:
a5:5e:f1:e2:c7:80:b6:5f:22:89:ba:94:9e:9e:f7:
53:5b:1e:74:a2:2e:37:46:b8:9e:1b:12:91:c8:a1:
55:d6:c3:17:71:8c:1b:88:49:89:65:98:2f:14:14:
0c:61:85:c4:45:45:76:f4:86:f1:84:dd:e8:88:b7:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7F:44:93:A6:36:CD:BA:43:C8:FF:9B:53:17:6A:B0:86:19:03:3A
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/z39Ek6Y2zbpDyP-bUxdqsIYZAzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.38.0/24
Signature Algorithm: sha256WithRSAEncryption
32:99:25:ec:9d:a2:42:f7:1c:7b:db:b7:3e:87:7a:f1:cb:ef:
18:b0:b1:39:d1:25:ef:a9:e1:d8:48:5c:99:92:93:2e:c3:4d:
6e:e8:6c:c8:d2:30:d1:0f:ba:6c:94:02:96:af:59:2a:b3:1d:
14:d9:06:c7:f3:45:ab:13:a3:2b:03:48:c1:07:88:97:90:7a:
83:7f:f2:93:82:3b:63:d8:2d:fe:50:f4:6e:22:86:11:d0:48:
b0:2c:6e:da:7b:8f:35:e0:28:39:4b:f6:98:1d:5f:a7:09:6b:
13:55:78:4e:7c:35:d4:b6:80:72:5b:7c:5f:97:33:19:4f:84:
f2:84:88:49:d2:8a:5a:05:bf:3c:19:41:74:79:1a:70:73:fd:
77:6c:99:8d:bc:ef:3d:a5:28:07:86:93:b9:13:8c:be:12:b0:
11:47:97:96:78:0a:70:7d:0f:ac:44:a9:42:5a:d0:f5:08:9b:
09:87:5c:b8:3a:63:4f:07:bc:55:e3:e1:aa:69:3a:5f:5a:24:
07:75:aa:29:0d:78:fb:0d:7d:f3:22:24:72:cf:5a:88:29:74:
bb:bf:7a:27:a5:a2:4b:b4:6c:47:b1:7b:f1:0c:ac:7a:f9:0e:
f2:68:f3:41:24:be:f5:b5:b2:85:2a:06:e7:f6:af:d8:7f:01:
e0:ff:f4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org