Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/24fc25-1b4d-4a4a-ae34-6510ad1a5b0c/1/9Tf06CHhfVdDWEX3pGuqG-uVdSk.roa
File: 9Tf06CHhfVdDWEX3pGuqG-uVdSk.roa (raw, json)
Hash identifier: Q/h2OWFx6JhbXdtqg81JbvPe1g8EeWKXK/hkW92Uxnc=
Subject key identifier: F5:37:F4:E8:21:E1:7D:57:43:58:45:F7:A4:6B:AA:1B:EB:95:75:29
Certificate issuer: /CN=26def4fad3b67370d2d2b3e1a1e299410ae6882b
Certificate serial: 425C2777
Authority key identifier: 26:DE:F4:FA:D3:B6:73:70:D2:D2:B3:E1:A1:E2:99:41:0A:E6:88:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jt70-tO2c3DS0rPhoeKZQQrmiCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/24fc25-1b4d-4a4a-ae34-6510ad1a5b0c/1/9Tf06CHhfVdDWEX3pGuqG-uVdSk.roa
Signing time: Sat 01 Jan 2022 07:53:02 +0000
ROA not before: Sat 01 Jan 2022 07:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198002
IP address blocks: 149.255.64.0/19 maxlen: 20
2a03:1180::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113335671 (0x425c2777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26def4fad3b67370d2d2b3e1a1e299410ae6882b
Validity
Not Before: Jan 1 07:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f537f4e821e17d57435845f7a46baa1beb957529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:dd:15:97:bf:92:16:96:ff:a5:49:7f:8d:
58:21:e0:6f:9f:6c:1b:10:2a:ed:f5:70:e3:11:2c:
de:1d:97:18:f2:81:f6:9a:47:22:6a:f9:3a:31:01:
07:d2:bf:c7:41:08:66:77:10:a3:45:6a:18:f5:ac:
04:06:e6:f4:79:0c:de:45:68:d5:d1:9b:6e:27:c9:
54:b4:7a:54:f5:3b:b0:c6:19:79:65:9b:cb:89:4b:
83:42:4f:81:fc:a1:67:70:e0:be:c9:4f:42:92:a9:
9e:0e:e4:87:fc:ac:f2:bc:fe:fc:72:60:69:28:33:
86:09:60:c7:a4:13:1b:74:c7:c1:13:44:9d:09:7c:
3f:d3:fc:f2:d7:31:15:c1:ff:9d:5f:74:63:38:8d:
5c:5c:1f:e1:f2:6c:5d:f1:2d:e0:f7:11:79:6c:c8:
c2:f7:f4:8d:7f:c8:03:bd:ff:1c:86:52:b8:93:ea:
b9:f3:88:05:2b:06:b3:0e:64:ee:06:c8:d2:12:4c:
c3:7d:95:e6:c4:68:fd:12:c6:c6:3a:69:39:78:d2:
50:c5:a1:18:d8:ad:98:27:c9:20:9a:ca:ab:3c:ad:
39:b9:3c:a5:f5:7b:3f:27:78:a2:17:cb:bb:b5:c3:
b5:b6:f9:95:9d:a2:0c:e0:af:c6:c3:15:33:10:16:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:F4:E8:21:E1:7D:57:43:58:45:F7:A4:6B:AA:1B:EB:95:75:29
X509v3 Authority Key Identifier:
keyid:26:DE:F4:FA:D3:B6:73:70:D2:D2:B3:E1:A1:E2:99:41:0A:E6:88:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt70-tO2c3DS0rPhoeKZQQrmiCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/24fc25-1b4d-4a4a-ae34-6510ad1a5b0c/1/9Tf06CHhfVdDWEX3pGuqG-uVdSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/24fc25-1b4d-4a4a-ae34-6510ad1a5b0c/1/Jt70-tO2c3DS0rPhoeKZQQrmiCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.64.0/19
IPv6:
2a03:1180::/32
Signature Algorithm: sha256WithRSAEncryption
2b:92:27:d3:fc:ae:4d:26:7a:6b:97:e3:43:b4:17:60:e7:30:
60:01:57:9c:a8:c8:a4:ab:25:21:5c:80:29:85:9a:96:53:35:
f5:68:79:c6:2e:63:f7:c9:30:5f:ba:21:d8:44:2b:9b:8b:15:
3e:be:4b:d4:fd:c5:a1:31:d3:04:5a:3a:da:1a:de:45:cf:db:
3a:fc:2d:7e:77:6a:d4:63:52:3a:d1:a2:a6:fd:bb:8f:e3:c4:
f0:eb:14:f3:45:9f:02:7e:4a:dd:29:18:75:9a:a4:39:97:84:
62:bd:00:ab:20:be:ff:cc:cc:be:0d:a9:35:72:e7:fa:f1:c5:
27:6c:66:3f:ec:d1:44:82:2e:fc:f4:46:f7:80:2a:3c:bb:6c:
ba:3b:3b:8e:b5:9d:8d:08:a1:2d:94:83:70:82:ea:aa:56:98:
59:d5:82:ac:ac:d7:45:95:b5:cb:22:0b:64:3a:16:82:3c:72:
3f:18:c1:ae:f1:df:df:cc:84:b8:89:56:e7:f2:ec:28:4b:d6:
03:35:47:d9:7b:7c:6f:16:5b:56:2c:70:d4:30:d4:94:b4:00:
2a:75:83:c3:17:6e:d3:01:fb:52:bf:8d:ef:24:0c:f1:1b:75:
0c:87:62:db:9a:1b:69:dc:50:1e:92:67:2d:60:e6:55:48:a8:
d0:dc:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:44 2024 by rpki-client on console-ams.rpki-client.org