Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/U8Joxi8U3e1Usd5BP5t9YdRHq9g.roa
File: U8Joxi8U3e1Usd5BP5t9YdRHq9g.roa (raw, json)
Hash identifier: uku7/+wyCrwgv9po1XRbDuPL9gV+ixJNp+Ghgnw851s=
Subject key identifier: 53:C2:68:C6:2F:14:DD:ED:54:B1:DE:41:3F:9B:7D:61:D4:47:AB:D8
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185708CAA7A064C8BA23FD75ED8011D5B1E
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/U8Joxi8U3e1Usd5BP5t9YdRHq9g.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 5.104.73.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:aa:7a:06:4c:8b:a2:3f:d7:5e:d8:01:1d:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53c268c62f14dded54b1de413f9b7d61d447abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:b8:ec:ea:23:8f:25:c3:e2:8c:97:59:6e:
96:a1:d5:7e:5b:fa:b9:6b:4b:4b:1d:11:59:5e:b5:
51:81:88:80:9b:e3:63:b2:9f:06:a2:95:a9:0c:f9:
45:b9:6f:a6:ef:60:5b:61:b1:7c:7a:fc:42:1c:bb:
85:4d:e3:94:d8:2a:c9:6c:1d:71:e6:48:86:04:9c:
33:94:c5:30:61:cc:e2:c5:02:71:3e:62:60:25:6f:
14:08:b7:76:ee:b0:a3:f0:37:54:63:c4:73:26:3a:
f5:22:36:2b:f2:96:d5:76:95:f9:cc:6c:e8:4c:b8:
18:1d:cb:ad:1f:4a:ca:aa:33:79:3c:9f:34:6d:3d:
d3:b1:7d:e0:10:fa:8c:ac:0a:db:67:05:76:55:d0:
c6:3e:dd:09:3f:07:58:f3:e7:0b:4c:ad:44:f7:07:
b0:ad:3b:0e:fa:68:19:1f:7e:12:38:e5:38:05:3e:
3b:7f:91:be:80:67:c6:6e:50:9b:9f:e8:26:8c:27:
7b:ab:04:93:98:3b:ac:24:cb:93:a0:fc:d5:7f:de:
a0:d9:3b:63:86:22:51:12:52:df:af:5c:bf:b5:12:
3e:73:98:36:c3:cf:fd:9b:34:07:05:ae:60:3a:48:
93:01:7f:3b:5b:a2:1e:07:ed:20:73:ff:63:66:01:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:68:C6:2F:14:DD:ED:54:B1:DE:41:3F:9B:7D:61:D4:47:AB:D8
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/U8Joxi8U3e1Usd5BP5t9YdRHq9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
91.245.239.0/24
95.214.92.0/23
95.214.95.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4f:e7:c0:b5:ca:d4:42:c2:22:18:a9:50:61:40:ce:51:06:
07:78:96:ee:6c:8c:72:d0:a1:21:27:f9:0f:de:a9:a9:98:b5:
ab:68:0a:9d:19:68:4b:fb:71:21:b6:55:a0:f2:31:d2:62:f7:
00:15:88:88:4c:0e:7f:ad:ea:0f:60:e3:07:31:09:90:7b:8d:
13:1d:bd:c6:b8:1f:38:70:ff:de:37:bc:ac:de:da:4b:f3:19:
54:b3:f1:32:c7:3a:ef:c1:09:d2:1e:06:63:0f:ae:32:05:10:
89:19:c1:68:ba:7c:62:83:61:e8:96:b9:84:4c:7c:0c:1a:61:
48:46:76:de:f4:df:57:8e:38:07:a3:5f:8e:ed:f8:b9:36:66:
3c:2b:de:e3:03:88:6d:c1:3c:b6:88:f2:c6:69:84:19:bc:bc:
d0:71:f8:d9:b9:b6:84:3a:fb:26:d1:40:84:44:10:a1:2a:4a:
ff:a4:5a:82:61:76:03:fe:8f:f0:b6:35:6f:8c:6a:b7:62:65:
d9:99:5a:4a:f7:7b:5a:61:d8:ab:a8:18:eb:de:86:09:3e:36:
a1:45:d3:9d:69:3e:f7:c8:55:82:ec:7b:47:cd:ad:bb:c8:c3:
df:f3:2f:3a:3a:6b:c9:91:53:8f:0a:17:00:65:56:e9:6e:e5:
0e:84:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org