Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/cOlZ86WX7yzFzxl4e_FU29ubmIg.roa
File: cOlZ86WX7yzFzxl4e_FU29ubmIg.roa (raw, json)
Hash identifier: iP7G72zlYURtvC+L/MvHX5VzBq1JwvqNyD3qRpOovu8=
Subject key identifier: 70:E9:59:F3:A5:97:EF:2C:C5:CF:19:78:7B:F1:54:DB:DB:9B:98:88
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 09C12D51
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/cOlZ86WX7yzFzxl4e_FU29ubmIg.roa
Signing time: Mon 28 Mar 2022 22:31:32 +0000
ROA not before: Mon 28 Mar 2022 22:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 5.104.72.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
5.104.73.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163654993 (0x9c12d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Mar 28 22:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70e959f3a597ef2cc5cf19787bf154dbdb9b9888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:f0:43:84:c9:1e:96:97:8f:96:82:bf:65:
ec:3a:6a:ba:99:3d:dd:2b:5e:da:14:e0:2d:c0:10:
45:6f:5a:63:ee:19:cb:cd:cb:14:84:89:63:e4:21:
41:cd:d4:79:e7:5f:6a:ed:1e:ab:e1:09:48:af:82:
7b:dc:62:8e:83:c0:d4:60:6d:00:75:8d:fe:f5:93:
aa:6d:28:af:d3:87:23:67:4f:7c:88:ce:14:a3:01:
9c:75:22:70:8b:9e:fe:a3:72:c8:da:3b:c5:37:ec:
9e:5f:3f:1e:5f:ff:3f:c6:42:83:de:45:79:97:2b:
f0:10:3a:1b:d4:08:01:78:fe:5a:2b:15:66:90:dd:
96:a9:a4:5e:a0:8e:a1:24:44:48:8b:83:57:31:37:
2c:e8:0c:56:d5:c7:0d:a6:10:1f:d3:4c:9b:7d:25:
8a:11:16:9b:23:32:e6:72:06:e9:00:6a:95:91:15:
f7:14:6d:99:4a:66:46:f6:f3:66:65:4a:ee:a6:b1:
53:51:15:66:65:55:25:a1:fb:cd:13:6d:32:87:54:
d5:bc:5c:f6:2e:76:00:e0:c5:a8:27:cc:0a:f8:04:
76:cd:4d:38:14:f1:00:5c:1f:ea:45:de:a1:ae:b9:
7b:6a:f8:81:51:df:91:af:61:b3:ec:ee:41:3d:ad:
66:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:59:F3:A5:97:EF:2C:C5:CF:19:78:7B:F1:54:DB:DB:9B:98:88
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/cOlZ86WX7yzFzxl4e_FU29ubmIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
95.214.93.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a0:9a:f9:a6:be:2b:f6:a9:fe:d2:d7:22:e9:29:03:e5:c9:
db:a8:8e:bd:21:ec:09:f0:e9:6f:15:00:3e:aa:91:0d:98:5f:
14:f1:b9:95:bc:a7:5f:4b:17:11:54:09:2e:74:dd:c4:be:77:
77:0d:03:bb:f8:2b:0f:fc:2d:3d:94:66:2e:d9:33:41:e1:8e:
01:9b:1f:37:cd:1c:42:f3:4e:71:24:6d:0d:fd:00:69:14:59:
45:59:95:a6:8f:39:8b:e5:ed:82:f5:b5:55:7f:d0:7b:43:71:
b4:63:60:0d:ea:63:2b:ea:c3:c1:6f:e6:2c:31:50:3d:86:5c:
48:13:17:b6:10:fc:32:04:04:6f:78:b9:d7:19:f4:bf:fc:39:
6c:2d:c3:f3:07:22:2b:1b:59:2b:88:6a:aa:04:81:ec:26:64:
6e:40:24:0b:fe:e6:00:d5:3a:36:65:53:2a:d8:5d:dc:e3:5a:
24:4a:5a:d4:21:ec:75:1f:96:aa:b8:5e:39:15:68:86:c9:f0:
1a:d6:41:a9:45:51:bb:ae:ee:b9:f3:a2:4a:6e:33:a0:5d:10:
f3:49:74:30:c7:37:9a:63:1b:88:56:4b:2d:1a:ae:f2:1a:24:
75:f4:8d:53:03:1a:34:13:19:f8:09:b6:12:c5:b2:72:7a:4b:
0c:47:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org