Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Nj7250tEVOw6TYelkLVVq12VBqI.roa
File: Nj7250tEVOw6TYelkLVVq12VBqI.roa (raw, json)
Hash identifier: 01iEU1grLI8nthLcaexV6Mmy0n4WnifMEByh3nYEusM=
Subject key identifier: 36:3E:F6:E7:4B:44:54:EC:3A:4D:87:A5:90:B5:55:AB:5D:95:06:A2
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 01860DF393B43DA2C823FE9F5B9989980EFD
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Nj7250tEVOw6TYelkLVVq12VBqI.roa
Signing time: Wed 01 Feb 2023 17:08:32 +0000
ROA not before: Wed 01 Feb 2023 17:08:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 5.104.73.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:f3:93:b4:3d:a2:c8:23:fe:9f:5b:99:89:98:0e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Feb 1 17:08:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=363ef6e74b4454ec3a4d87a590b555ab5d9506a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:2c:99:ab:99:ad:48:9c:ce:1a:43:e4:eb:
e9:66:40:5b:11:81:64:24:65:f2:bb:86:4c:4d:4f:
a8:20:2f:73:66:df:73:f4:76:93:89:11:32:22:d8:
c3:9b:24:64:c8:16:87:77:e0:c6:50:ed:1e:64:83:
b9:20:3e:77:90:a5:1d:eb:e8:0e:50:89:5e:b7:7d:
19:60:7c:06:41:df:d3:55:f0:aa:a2:61:ad:98:ce:
29:14:0f:90:99:3c:91:85:73:b0:e5:fc:74:1e:06:
62:f4:31:12:e0:9e:ba:0a:5f:e6:90:2a:b9:0a:ad:
08:d7:12:c8:9b:5a:42:d8:29:7a:3d:80:a1:a4:7a:
29:b7:0f:00:30:de:7f:f1:40:a1:0f:b4:cf:f0:e8:
1f:ff:4a:5a:44:09:24:8a:34:c2:fc:74:41:12:a1:
8b:c2:16:37:ac:3d:48:a9:02:9c:95:90:46:8a:15:
56:84:fc:6b:e8:fd:3a:33:ca:1c:5b:e1:dc:d3:77:
d6:9c:b8:38:b3:8c:57:82:53:05:70:fd:fc:fb:fc:
d2:85:0d:46:ae:32:72:2a:99:6a:c8:b1:f9:a9:d1:
d5:d7:a2:23:8f:34:a6:60:74:9a:59:fa:e4:42:76:
3b:23:ce:b4:7d:86:03:5b:d6:1c:19:99:9f:05:41:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3E:F6:E7:4B:44:54:EC:3A:4D:87:A5:90:B5:55:AB:5D:95:06:A2
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/Nj7250tEVOw6TYelkLVVq12VBqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
91.245.239.0/24
95.214.92.0/23
95.214.95.0/24
194.124.41.0/24
Signature Algorithm: sha256WithRSAEncryption
48:80:f0:3f:1e:88:31:f9:38:6c:fd:69:7c:11:25:87:e2:18:
c7:87:91:9a:c5:93:5f:c3:48:bc:3c:d8:6f:6d:2d:f7:48:0d:
f0:71:0a:ad:3d:d5:98:37:69:1d:a8:83:b5:d2:ad:fc:ff:70:
c4:f6:d5:fd:8d:d4:ce:d5:43:14:6c:52:9a:64:4d:c1:c0:4b:
41:fa:e7:da:d3:8b:31:f4:8e:f0:6e:b8:d7:c3:60:10:18:61:
1a:43:82:27:b3:f3:f9:bf:3d:1d:75:f5:fa:1b:c9:69:14:a8:
80:4b:92:ed:bc:f8:3a:5e:fe:54:d5:7b:cd:ca:f0:7c:6c:a0:
20:bf:10:c4:f0:89:10:a8:98:82:e6:b9:5b:1a:da:22:e6:65:
72:d7:87:73:a1:37:2d:27:8f:a4:b0:c0:f5:cc:01:96:62:13:
71:e5:22:c5:c6:38:48:fe:c3:ab:81:21:7a:13:85:86:2b:0e:
6b:e5:06:d8:29:4e:09:04:56:48:af:09:ac:a0:ea:ed:72:92:
42:c8:c9:f1:2b:31:fd:65:a3:1b:8b:15:d5:d9:b7:c7:79:18:
7d:cc:a4:2d:0c:3c:59:53:8a:2e:45:29:b5:91:9d:01:d1:8e:
92:5e:22:6f:89:d7:fe:bf:3a:15:db:65:72:c4:61:75:a4:75:
6e:80:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org