Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/6u4cTEPxr0wuNKAExWYTbbI9ZoU.roa
File: 6u4cTEPxr0wuNKAExWYTbbI9ZoU.roa (raw, json)
Hash identifier: ZhNM+i/1vWPC+Ey5Zi9Pd5pJmBlLiGnN3VfAhp3kL+k=
Subject key identifier: EA:EE:1C:4C:43:F1:AF:4C:2E:34:A0:04:C5:66:13:6D:B2:3D:66:85
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 09C1364F
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/6u4cTEPxr0wuNKAExWYTbbI9ZoU.roa
Signing time: Mon 28 Mar 2022 22:31:32 +0000
ROA not before: Mon 28 Mar 2022 22:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207795
IP address blocks: 5.104.72.0/24 maxlen: 24
5.104.73.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163657295 (0x9c1364f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Mar 28 22:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaee1c4c43f1af4c2e34a004c566136db23d6685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:af:d7:87:20:3a:2d:66:3d:03:54:de:07:
6d:fc:a7:14:a7:57:3c:43:93:0a:41:da:30:7d:1e:
d2:1e:99:f3:73:a1:5f:4b:04:47:74:47:f4:b9:b8:
fd:97:1b:68:78:d0:24:e5:cd:b8:ce:4c:03:70:13:
f4:a3:b8:3c:a9:96:be:41:ee:55:c5:d2:6b:33:56:
9e:c9:27:13:25:89:9e:d5:9f:d8:90:74:43:cb:69:
2b:bd:c9:9b:5f:d7:38:38:69:89:1b:c7:49:ad:9a:
8d:fc:a0:80:99:ea:6b:a4:ab:8a:30:50:07:d7:83:
b2:3b:34:01:aa:ab:19:4b:3b:4d:e8:f7:d1:84:37:
13:e8:ba:12:53:a4:0f:35:b2:22:49:55:15:b8:d3:
b3:21:02:66:28:01:2d:15:29:07:6e:fe:4e:ea:17:
c9:d1:1e:7a:f9:1c:b2:45:6b:f6:44:e9:bd:95:da:
e9:cf:cc:6b:4e:d4:30:44:5f:e2:03:83:58:5e:70:
4e:cf:07:3c:d8:ea:b5:e6:23:cb:17:dc:c4:cb:cf:
f9:40:c8:07:3e:cd:fe:17:60:90:f4:2f:e1:c5:f1:
10:79:54:4a:ee:9d:b8:cf:ca:ec:da:1c:6b:94:f2:
79:57:b3:13:45:2c:0b:50:09:06:c5:6a:b7:c5:e9:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:1C:4C:43:F1:AF:4C:2E:34:A0:04:C5:66:13:6D:B2:3D:66:85
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/6u4cTEPxr0wuNKAExWYTbbI9ZoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
95.214.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:02:86:19:d7:ad:da:ad:f6:a1:95:a4:0b:6a:5b:01:c1:f4:
f4:7d:6d:ae:fe:60:16:d7:e0:3a:69:55:cb:95:75:6f:86:94:
ad:5f:ed:8d:c8:4e:0c:a0:3a:3c:e6:f6:5a:ae:44:29:9f:2d:
6f:5b:65:02:fa:a5:a1:50:be:e6:b6:7d:f4:a6:c9:2e:70:d4:
e5:eb:df:ed:87:cb:0b:1b:d0:53:27:f7:2f:fd:5c:0a:e7:cc:
d5:e5:b8:61:d7:60:a3:1a:12:85:18:29:0a:48:83:27:79:02:
c4:37:b3:c8:c6:b5:70:23:4c:0e:a6:cd:44:68:7b:9a:0f:a6:
91:1a:82:f7:43:a8:f6:c7:b9:fc:c1:ba:6b:7b:67:8f:30:d4:
56:5b:7a:f3:bc:37:0e:63:66:11:0e:da:d1:68:d1:20:0a:1c:
05:51:92:b1:9b:6b:83:35:68:21:8b:dd:77:ed:1c:80:79:ac:
51:c6:02:1a:6e:35:1a:1a:54:cd:88:9a:be:d7:6d:17:a8:2d:
af:b5:8c:aa:c0:eb:3d:f4:45:12:62:1f:21:26:16:0f:77:f2:
9b:6b:c8:92:d6:32:6c:b1:ce:cd:c2:a6:3a:7e:9b:fe:00:ee:
67:f8:b0:d7:b1:39:cb:0b:1c:34:36:28:c4:fa:22:ca:ab:2a:
68:74:ea:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org