Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/rN0ecnv4eUGy-XUg-xU_vre6Ou4.roa
File: rN0ecnv4eUGy-XUg-xU_vre6Ou4.roa (raw, json)
Hash identifier: j1qcKW94dNJ9xKifAOqREBujrM6N6eDJShR13GY/HUI=
Subject key identifier: AC:DD:1E:72:7B:F8:79:41:B2:F9:75:20:FB:15:3F:BE:B7:BA:3A:EE
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0181F72A8E9A3F436233C0750D18B034D06C
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/rN0ecnv4eUGy-XUg-xU_vre6Ou4.roa
Signing time: Wed 13 Jul 2022 10:46:09 +0000
ROA not before: Wed 13 Jul 2022 10:46:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 5.104.74.0/24 maxlen: 24
5.104.73.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:2a:8e:9a:3f:43:62:33:c0:75:0d:18:b0:34:d0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jul 13 10:46:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acdd1e727bf87941b2f97520fb153fbeb7ba3aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:ad:3d:2c:72:44:43:fa:7f:bb:bd:27:81:
79:16:e2:91:40:61:ee:f2:d8:f6:e2:d8:26:0b:bc:
2f:8b:31:41:b2:58:83:e4:18:da:b2:4e:85:58:d7:
2d:f0:21:d6:c9:6e:87:55:de:01:aa:99:88:1a:64:
3a:df:3d:86:63:b4:32:18:13:37:29:06:78:86:e2:
18:78:a0:7e:38:8e:f2:fc:77:d3:00:81:ce:3f:6e:
22:cd:d6:ff:2c:10:36:e7:37:b1:e8:bc:fd:5a:7b:
a4:57:2c:25:41:6c:05:4e:3d:77:00:b8:4c:34:66:
48:24:5f:8a:89:02:e5:05:58:ad:c1:a5:70:bc:e9:
4b:ef:8a:b6:c8:e7:83:bf:02:4c:45:5a:e4:a1:38:
74:fb:30:0e:36:b4:e0:84:a4:ad:c5:24:25:d8:16:
c5:e4:04:16:d0:f6:9e:ff:c0:75:37:fc:60:ef:b0:
4f:08:a2:61:d2:ed:11:95:cd:25:0f:9e:eb:18:9b:
b9:54:d4:52:aa:fe:96:98:b3:3a:29:1e:6b:5b:da:
6a:cb:55:3d:f1:bc:51:bf:42:82:17:bf:90:bc:6b:
03:06:c2:60:64:02:87:5e:3c:f5:f2:72:09:51:23:
5f:f9:a0:64:5b:a7:21:51:c1:3b:54:c1:75:73:51:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DD:1E:72:7B:F8:79:41:B2:F9:75:20:FB:15:3F:BE:B7:BA:3A:EE
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/rN0ecnv4eUGy-XUg-xU_vre6Ou4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0-5.104.74.255
91.245.239.0/24
95.214.92.0/23
95.214.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:12:b0:ac:eb:f6:52:2b:9f:b8:55:b4:dc:67:52:77:ca:63:
59:ab:b4:a8:c9:27:a2:91:9d:ee:72:68:fd:39:44:4b:c2:b2:
c4:f5:69:46:4c:c5:91:b4:5a:50:78:67:1f:d8:40:9e:bd:87:
0e:53:65:2e:e0:57:26:25:d7:1c:64:15:76:ab:66:f1:38:2f:
fb:2d:51:03:fb:b1:75:56:36:5b:6e:12:67:66:47:69:90:3d:
bd:ca:5c:ec:9e:c9:2b:36:86:8b:2a:35:83:6d:e4:97:38:6b:
6e:23:34:96:d6:18:e2:b8:e1:5d:74:88:2d:4b:99:72:89:d3:
ef:b3:e5:c4:5b:24:40:63:3f:e3:66:e6:33:49:54:1d:51:8c:
72:3a:89:0c:03:c8:9a:04:eb:f7:b8:25:0c:d2:08:bd:77:13:
3e:15:83:2d:22:0c:16:0a:de:dc:14:ef:87:fd:f7:58:c1:0d:
9f:7a:80:8f:cd:d2:04:60:da:44:e5:7d:5e:a8:f1:6d:b5:52:
a6:70:ca:1d:a0:17:e6:56:bf:11:de:19:b9:d1:d2:2c:22:f6:
d0:26:0f:cb:a3:e6:1b:6f:f2:cf:2f:80:8a:de:7a:3f:5c:7f:
f2:25:35:49:90:d8:14:ec:af:a2:c1:25:6d:ed:04:17:0e:d8:
8c:46:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org