Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/lFDldT_Lhv37ckGfuwO70Q6OtUQ.roa
File: lFDldT_Lhv37ckGfuwO70Q6OtUQ.roa (raw, json)
Hash identifier: IOzWnAUCQ1KtkmRaY8TJ1n9DURZh9H5qpnqf4B5oXJI=
Subject key identifier: 94:50:E5:75:3F:CB:86:FD:FB:72:41:9F:BB:03:BB:D1:0E:8E:B5:44
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0181F72A8F189CDE6D2749313B039E5A4A96
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/lFDldT_Lhv37ckGfuwO70Q6OtUQ.roa
Signing time: Wed 13 Jul 2022 10:46:10 +0000
ROA not before: Wed 13 Jul 2022 10:46:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 5.104.73.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:2a:8f:18:9c:de:6d:27:49:31:3b:03:9e:5a:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jul 13 10:46:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9450e5753fcb86fdfb72419fbb03bbd10e8eb544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:54:79:bf:38:d7:34:10:f5:a9:c8:ab:70:
80:18:46:9e:f7:79:25:f3:3d:7b:1c:62:37:8e:4a:
3b:e6:35:f3:91:39:8c:8e:06:49:51:ec:3a:6f:df:
37:f3:25:6a:7c:4f:b3:ad:c6:bc:11:ba:39:29:5b:
8c:48:fc:f3:c6:f2:66:0d:72:fb:11:1c:94:6e:7e:
5d:b5:13:3f:3e:c6:0b:d9:d5:86:cf:c3:c2:0e:a3:
56:48:e6:3b:86:f1:d5:65:ec:14:0e:77:57:c7:ba:
9d:b9:5e:7c:1a:78:c6:da:29:49:57:c9:d5:20:8d:
a5:54:c6:50:b5:5a:9a:0b:6c:61:f1:d6:f8:c0:9a:
9e:c0:e7:18:21:f1:1b:e9:b5:27:57:8e:89:eb:fa:
df:4d:1c:66:0a:f6:0f:b8:9a:b5:36:d7:83:59:56:
b0:8c:53:64:ed:07:01:25:c0:b6:16:d6:d5:4c:e8:
99:9b:22:f1:e4:45:d4:c2:2d:a3:f7:be:a7:40:af:
15:78:8f:56:0c:99:48:cb:34:22:84:a6:8d:13:7f:
3b:5c:d4:bc:d6:88:79:6e:17:6a:6f:55:fc:ac:7f:
d2:ac:5d:d6:e1:3b:31:46:94:f7:15:7d:68:f3:ee:
58:c6:5a:23:ff:7e:97:7a:c6:59:59:59:fa:53:26:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:E5:75:3F:CB:86:FD:FB:72:41:9F:BB:03:BB:D1:0E:8E:B5:44
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/lFDldT_Lhv37ckGfuwO70Q6OtUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
91.245.239.0/24
95.214.92.0/23
95.214.95.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ae:ec:fc:c8:90:2a:ef:13:17:e3:6d:ff:6c:2b:f1:a8:40:
2b:a2:7d:ca:de:d9:0c:2f:61:b9:a8:72:50:e4:e9:37:71:30:
8f:5a:3e:22:9b:54:bc:b6:c2:5d:61:ba:7d:c4:c7:c8:58:49:
1d:3e:1f:10:ad:15:b6:0c:de:20:29:bf:5e:04:02:3a:7a:49:
80:80:8f:92:14:1c:72:1f:5f:96:cf:29:eb:94:99:dc:7c:9f:
e7:70:0c:b5:3c:ce:a2:db:dc:b2:37:dd:4a:1c:3b:1d:76:55:
ff:25:23:f9:81:7b:59:98:f5:c8:df:04:f1:42:03:3f:26:ea:
4f:b8:28:b8:87:e2:d7:3a:46:25:9d:88:d1:0e:2b:f7:7d:f4:
4b:9a:3c:d1:50:5b:b6:f5:5a:9d:d7:ce:73:1a:ee:ae:b6:27:
09:98:02:be:3d:c1:0b:cf:b6:61:e6:41:cb:cf:80:85:49:00:
06:79:87:1b:70:01:86:f8:69:7e:3c:38:ee:53:97:12:de:a5:
34:6a:ca:29:17:6b:85:f0:54:d2:ae:48:73:47:a1:b2:67:d5:
39:5a:1b:6d:83:73:4c:1a:50:54:a1:f4:cf:66:d3:30:a6:03:
8a:bc:2b:cf:39:51:ce:d1:f0:70:af:79:73:5b:a5:f9:d5:d3:
09:41:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org