Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/6Ut-HjDMp17suE4GwiYhVH3q-_I.roa
File: 6Ut-HjDMp17suE4GwiYhVH3q-_I.roa (raw, json)
Hash identifier: Nu8HAz3uTlrWYFPikz2jHp/KPt+J0g8nkiSFujmPYnw=
Subject key identifier: E9:4B:7E:1E:30:CC:A7:5E:EC:B8:4E:06:C2:26:21:54:7D:EA:FB:F2
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 01914BF1217DAF9A7953AC32B32FE3F8C882
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/6Ut-HjDMp17suE4GwiYhVH3q-_I.roa
Signing time: Tue 13 Aug 2024 13:32:59 +0000
ROA not before: Tue 13 Aug 2024 13:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39120
IP address blocks: 5.56.8.0/22 maxlen: 22
5.56.12.0/22 maxlen: 22
5.83.120.0/22 maxlen: 22
5.83.124.0/22 maxlen: 22
45.90.232.0/22 maxlen: 22
91.214.72.0/22 maxlen: 22
185.29.248.0/22 maxlen: 22
2a0a:d3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:f1:21:7d:af:9a:79:53:ac:32:b3:2f:e3:f8:c8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Aug 13 13:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e94b7e1e30cca75eecb84e06c22621547deafbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:77:25:74:51:95:b6:1e:13:f4:99:a7:19:
d5:b5:af:37:2d:9b:90:f1:1b:08:79:e7:d7:50:3d:
80:43:a7:7b:15:00:47:56:ed:87:88:fc:e5:9c:61:
79:c3:16:25:15:3e:23:4b:ea:a0:f7:64:c0:49:b2:
cd:36:fd:39:65:bd:0b:f2:4d:77:7d:12:d5:94:8e:
d0:e0:62:f1:01:ba:28:6c:b7:09:a5:5e:56:af:31:
05:ac:57:07:8b:38:34:43:9c:08:5b:5c:27:a9:f6:
71:b3:4d:df:5d:1a:ec:06:54:6f:e3:a0:5f:9f:28:
60:9f:df:b5:fa:3b:26:f0:10:a9:69:9e:e2:b0:ba:
b2:db:e6:d5:05:a7:c0:b0:29:17:ff:1e:4d:07:91:
16:47:6e:80:9c:72:55:a9:24:70:bf:ac:2d:ec:ad:
34:af:68:0a:0e:a9:7b:be:d4:ba:75:81:d0:87:4a:
ba:b7:4f:16:d8:fe:50:82:b8:4d:53:7e:aa:64:96:
08:91:0d:dd:f9:45:db:50:bc:2f:58:54:81:ab:49:
41:e8:df:f9:bc:9d:a9:d9:84:e2:9b:26:9f:a9:96:
ac:e4:d8:5d:e6:e6:87:6a:04:3a:97:97:c1:19:07:
f7:24:e7:2a:0e:24:64:7a:b7:39:62:99:f0:3d:e3:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:7E:1E:30:CC:A7:5E:EC:B8:4E:06:C2:26:21:54:7D:EA:FB:F2
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/6Ut-HjDMp17suE4GwiYhVH3q-_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/21
5.83.120.0/21
45.90.232.0/22
91.214.72.0/22
185.29.248.0/22
IPv6:
2a0a:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:c7:92:cf:65:fe:96:27:e2:c9:81:f8:2f:a8:ef:9c:56:00:
2c:ae:01:2f:8d:e6:60:5c:b1:7c:ec:17:20:86:8b:c4:0b:11:
ba:8f:3e:71:54:e3:45:ff:28:e5:c0:6e:41:5f:71:65:8b:21:
3c:23:4b:d8:cd:7f:ba:32:cd:e4:cc:6d:cb:3a:88:ad:bb:a1:
a3:38:e1:08:f1:46:5d:b4:c9:4a:68:74:79:f5:40:00:3b:ee:
91:8b:a0:b2:0c:28:44:93:73:17:33:20:60:bc:09:be:28:72:
69:e3:16:e5:e4:4e:11:0c:5c:e8:c0:4e:0a:8e:4c:70:72:3e:
87:b8:d8:b1:ae:b4:9c:06:4e:1d:82:12:33:4a:d0:4a:7a:9b:
9e:62:b2:c5:ac:47:6c:33:7c:6f:29:83:f7:1d:7f:31:2b:ab:
86:10:2c:f5:23:b3:2f:0e:b8:ab:7a:bb:fc:de:9e:2e:ee:25:
2b:60:99:5e:89:36:d6:75:15:00:da:d9:6c:a3:9e:67:43:45:
b0:31:c5:fc:ee:57:c5:9d:a9:67:e1:d9:d6:4e:8b:5e:82:a1:
a0:ef:82:01:fa:6b:4a:06:db:92:a8:ba:22:dd:2b:1d:ab:77:
62:75:63:ff:b2:05:9b:d9:31:43:02:08:e2:af:90:7a:72:9f:
d3:1b:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:26 2025 by rpki-client