Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/aH3uSzMynDq6_acGO_V02ylJ_1M.roa
File: aH3uSzMynDq6_acGO_V02ylJ_1M.roa (raw, json)
Hash identifier: ZTU00DQod82GWaTBYy0sAGfAa8vRmX6xsY3y0VcnlDk=
Subject key identifier: 68:7D:EE:4B:33:32:9C:3A:BA:FD:A7:06:3B:F5:74:DB:29:49:FF:53
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 09C1D6F8
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/aH3uSzMynDq6_acGO_V02ylJ_1M.roa
Signing time: Mon 28 Mar 2022 22:31:32 +0000
ROA not before: Mon 28 Mar 2022 22:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 5.104.74.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
5.104.73.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163698424 (0x9c1d6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Mar 28 22:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=687dee4b33329c3abafda7063bf574db2949ff53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:56:2a:28:b9:78:1e:9e:c1:70:4b:d2:65:
c3:8c:44:94:95:d3:b2:b6:b3:6e:bf:33:6e:a3:d5:
9d:df:23:0f:06:08:c3:a0:bb:13:61:38:04:7c:3b:
f2:5a:59:1c:0f:7b:3f:d3:a0:4f:23:f4:fa:01:1e:
df:29:98:1e:dd:31:b6:08:89:29:70:4d:b8:8e:4f:
14:6a:64:fc:8b:3e:3c:fb:04:e2:e6:84:e0:f5:41:
a2:bf:d2:e0:de:75:1f:a1:90:bd:b7:91:65:8f:92:
ed:f4:56:da:b9:40:b7:d0:21:64:20:ba:f2:05:f0:
36:92:57:8a:4a:f2:e3:66:a2:10:76:fa:20:87:f8:
89:ff:73:76:18:94:d8:f5:25:6a:d9:b4:7d:58:6e:
22:90:19:8b:99:5a:b3:3d:69:83:e1:35:6a:9c:a3:
1f:8c:d9:e1:7a:6d:e5:2f:7a:9b:91:c7:46:17:70:
ac:31:68:9f:a3:82:68:ef:f8:cb:4a:cb:e6:59:8f:
12:84:5b:d9:26:06:94:ed:07:0a:7d:84:85:9d:e6:
bc:4d:e7:21:48:e7:bf:75:0a:4b:51:0c:1d:65:b7:
ea:78:41:70:a7:01:93:c9:ea:88:70:c4:fa:10:6b:
ff:1a:87:d9:3d:87:81:01:49:82:ac:56:c2:e7:4e:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:EE:4B:33:32:9C:3A:BA:FD:A7:06:3B:F5:74:DB:29:49:FF:53
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/aH3uSzMynDq6_acGO_V02ylJ_1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
95.214.93.0/24
Signature Algorithm: sha256WithRSAEncryption
47:22:34:27:33:bf:77:1f:e9:0b:eb:d7:df:ce:45:b4:41:ff:
b6:ca:64:45:0d:e6:0f:14:e1:16:e3:51:1d:98:71:c9:b2:14:
8a:07:4c:c3:ea:c3:25:bb:60:13:a6:5f:99:a1:3e:09:80:2f:
6c:0c:80:34:f0:27:38:80:26:4c:b6:12:30:1b:f9:92:3a:2a:
60:a4:81:27:4c:53:c2:a8:45:b8:bd:50:de:09:29:31:7d:b1:
ca:48:da:ef:9c:06:f6:7f:07:5d:3f:b2:2f:1e:50:3d:a0:ad:
1a:61:0b:a1:6d:6c:79:51:fc:3b:63:47:0c:28:0d:0c:d2:ff:
5e:05:67:39:d7:97:06:50:d3:82:7a:3a:a5:e3:e9:f6:6f:d0:
3e:53:1f:c2:32:f0:86:b7:32:ef:86:d0:4d:e6:82:7b:cc:3a:
31:75:fe:c6:9b:77:6b:15:84:09:4c:a4:1a:06:ab:fd:f9:fb:
20:0f:09:d1:87:ca:72:39:c6:f4:26:ad:34:8d:fe:bb:52:7a:
9d:3e:44:8e:6d:b1:4e:c3:5b:78:55:9d:3a:56:8a:b5:2e:9d:
f4:8e:c3:57:66:47:00:77:f2:cb:9d:43:0c:4b:ab:1b:74:9d:
87:92:1d:86:66:73:c2:68:1e:c2:10:e3:d5:19:57:6f:b3:99:
2d:d0:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org