Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/iGtp75p6ZbJ5XgB47Y16ryEQ2Dw.roa
File: iGtp75p6ZbJ5XgB47Y16ryEQ2Dw.roa (raw, json)
Hash identifier: J6omvAdggqYsOKQ6ovROuAL7jJ5QoWhWqLNM76OBoVo=
Subject key identifier: 88:6B:69:EF:9A:7A:65:B2:79:5E:00:78:ED:8D:7A:AF:21:10:D8:3C
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 09C15920
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/iGtp75p6ZbJ5XgB47Y16ryEQ2Dw.roa
Signing time: Mon 28 Mar 2022 22:31:32 +0000
ROA not before: Mon 28 Mar 2022 22:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213296
IP address blocks: 5.104.74.0/24 maxlen: 24
5.104.73.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163666208 (0x9c15920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Mar 28 22:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=886b69ef9a7a65b2795e0078ed8d7aaf2110d83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:3a:46:39:b6:81:94:b4:2f:64:c3:63:5e:
f3:d8:41:a9:ac:d3:d2:93:99:c7:68:e6:13:b1:28:
25:d1:9d:75:7a:aa:5c:47:95:76:cc:73:a8:5c:9f:
89:ae:b8:3c:d2:e2:92:08:0b:03:18:e1:ee:a4:25:
9f:f8:52:fb:a3:c4:aa:a0:ae:17:62:7d:95:a1:95:
62:cd:d6:fc:5a:42:44:26:fb:c8:33:45:95:4d:d0:
78:74:2d:e1:4d:24:4e:be:1a:d5:f7:48:51:ce:27:
38:9e:02:a7:dc:1f:e5:15:1f:10:3a:37:86:7d:9e:
21:22:f6:f5:c1:10:79:0d:19:27:86:a5:47:4c:bb:
40:51:24:f4:a9:b3:09:3e:c4:46:24:97:7e:a0:e5:
d5:66:0e:db:11:86:84:bf:6b:64:35:d4:1a:e1:72:
2f:66:cc:6c:dc:b9:3d:90:38:c0:27:ac:44:fa:eb:
58:44:44:88:23:e8:c3:35:c9:43:e9:fb:40:25:86:
d7:bd:ed:41:0a:2c:74:5d:cf:c4:9a:bf:72:85:6e:
e7:29:b8:72:f9:51:fc:6b:d4:85:f3:a4:94:3f:0b:
42:4d:a3:b0:f1:16:18:e4:65:8f:4c:1f:12:38:04:
51:5b:ca:e5:76:be:e7:6d:27:ba:88:29:61:e4:6f:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:69:EF:9A:7A:65:B2:79:5E:00:78:ED:8D:7A:AF:21:10:D8:3C
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/iGtp75p6ZbJ5XgB47Y16ryEQ2Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
95.214.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d1:95:e6:67:1b:65:a5:f9:97:4b:4c:e9:cd:33:c5:12:ec:
bb:c3:0d:3a:b4:67:43:57:3f:90:b0:dc:a0:38:25:e2:03:e2:
0e:57:5e:f0:7f:64:b1:f3:07:75:c3:28:43:ee:ed:81:64:ea:
76:8f:ca:bd:35:65:74:4a:91:e4:7b:3f:28:ce:dd:46:98:ac:
d2:e5:cd:2a:4e:ec:5b:4e:fd:6f:aa:6a:01:f0:d6:77:01:bc:
4f:a0:40:90:27:37:4b:3b:8a:e4:20:e8:b4:72:7e:ee:98:fb:
1f:3c:9d:77:79:ed:64:87:1c:a9:21:6c:e2:9f:ae:e6:08:dc:
ba:dc:5c:05:f8:65:29:ef:e9:bb:56:cd:41:9c:c2:bc:be:9b:
9f:ab:6d:d5:74:ac:65:d0:8b:5e:c8:50:49:4a:f5:29:67:8b:
e0:d3:90:22:ac:ca:3a:f9:38:7e:1e:6b:4d:2c:f9:0c:19:22:
55:e4:8d:5d:35:90:35:b5:af:2d:6d:79:dd:cc:60:56:17:75:
a3:dc:2c:67:a9:00:fe:bc:a9:c0:98:13:39:e3:3e:e1:ac:83:
b6:be:53:fb:5f:57:a0:78:ed:34:b2:47:b8:93:e1:78:2d:0a:
75:27:f2:97:4d:09:c2:23:bf:50:ca:de:7e:9b:e9:5a:d8:a9:
35:6c:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:17 2024 by rpki-client on console-ams.rpki-client.org