Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/bmCzwbcMMjsZn-ugcVzTWkM026E.roa
File: bmCzwbcMMjsZn-ugcVzTWkM026E.roa (raw, json)
Hash identifier: sIZITVSIXuZGEki/d0RvG40pedgATy4+W13nKLPQa2s=
Subject key identifier: 6E:60:B3:C1:B7:0C:32:3B:19:9F:EB:A0:71:5C:D3:5A:43:34:DB:A1
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 09C0081C
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/bmCzwbcMMjsZn-ugcVzTWkM026E.roa
Signing time: Mon 28 Mar 2022 22:31:31 +0000
ROA not before: Mon 28 Mar 2022 22:31:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 5.104.73.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163579932 (0x9c0081c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Mar 28 22:31:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e60b3c1b70c323b199feba0715cd35a4334dba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:51:3a:a5:87:74:1f:ae:01:a3:32:12:12:
61:61:50:a6:21:3e:a6:84:76:f0:6b:95:7f:06:6b:
2d:22:2e:23:f7:7c:a6:63:2a:06:66:ed:67:ec:aa:
3e:e8:ff:d5:65:8a:49:ba:7d:d0:03:b5:76:0f:60:
da:48:4a:e8:0a:7a:f0:87:6f:bc:54:17:1a:c1:7a:
87:33:a3:0a:17:7e:9a:2b:dc:95:9e:ec:ba:e7:ef:
43:87:fa:b5:37:c3:64:a5:d3:e5:66:c5:40:5f:1b:
c0:04:80:8a:ae:47:e0:06:69:e0:b0:a4:20:3d:e8:
80:42:83:a2:b0:d7:6a:1f:cb:03:8d:32:bf:1e:8f:
33:96:51:cf:7b:4b:28:37:74:d7:a3:7a:ad:2c:ca:
a1:cf:be:10:71:23:a0:51:c9:90:a4:c8:06:d7:31:
07:39:19:bd:5d:48:64:cf:0d:c9:59:f9:68:d8:ee:
3c:aa:28:91:3c:a5:4a:37:0d:af:1d:87:55:de:e4:
fb:78:74:05:9a:2c:37:6b:3d:3e:9c:a6:60:53:7e:
4b:22:f0:40:8d:3a:4a:b2:3c:78:31:66:35:9d:21:
9d:81:24:97:34:6b:9b:fc:d5:c3:1d:92:18:a4:03:
aa:fd:bb:e7:2d:21:d9:71:ba:9f:67:03:92:d3:b1:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:60:B3:C1:B7:0C:32:3B:19:9F:EB:A0:71:5C:D3:5A:43:34:DB:A1
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/bmCzwbcMMjsZn-ugcVzTWkM026E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
95.214.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:10:61:c1:21:f3:28:16:e1:ad:00:56:da:5b:2d:31:fb:21:
bf:23:60:37:32:fc:ca:23:86:cf:07:cb:5e:0b:02:a8:05:8e:
47:b3:0c:5e:e2:c5:b8:42:d7:6d:0d:1c:86:bd:82:61:7a:9c:
21:3b:ad:22:0a:58:62:d1:a8:47:63:37:17:8e:2b:15:d6:d5:
ac:6a:50:db:25:31:33:27:fd:42:be:ef:01:e3:fc:94:8b:c3:
03:6d:ce:bc:1d:2f:06:3f:45:0c:63:d7:a0:2f:87:51:7c:7e:
90:ab:68:28:a5:21:01:85:25:61:4f:2d:47:6c:09:88:00:8a:
c3:f8:5e:ce:62:9b:f4:31:fe:5d:f7:0f:50:cf:9a:45:ea:6a:
e0:0f:36:d5:ed:5f:87:0c:dd:0a:54:c8:cc:60:e3:e4:97:f7:
82:83:4a:74:e2:6f:7c:37:66:c2:fc:ae:7f:97:9c:75:b6:04:
45:5b:eb:b4:a4:b4:8c:a7:14:cd:0a:cf:a2:4c:9d:29:4b:cc:
8a:69:75:c4:d3:29:29:cf:6e:ec:82:1b:13:be:d3:0c:50:f7:
7b:83:cf:dc:5b:71:d1:fa:95:b0:e0:21:60:de:1d:db:1d:56:
37:fe:1e:f9:0a:32:f2:37:60:74:6d:41:bb:0b:4d:6c:22:ac:
ba:7d:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org