Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/7ZaLesMUtNAuMXu3DCQMtkRsXIc.roa
File: 7ZaLesMUtNAuMXu3DCQMtkRsXIc.roa (raw, json)
Hash identifier: YJSx1wU05QBdbHvRdswX9edOZlEd2QGiScWYjUUfraY=
Subject key identifier: ED:96:8B:7A:C3:14:B4:D0:2E:31:7B:B7:0C:24:0C:B6:44:6C:5C:87
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 01892BBF0948CBE78F5922F5100B212BD821
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/7ZaLesMUtNAuMXu3DCQMtkRsXIc.roa
Signing time: Thu 06 Jul 2023 15:08:07 +0000
ROA not before: Thu 06 Jul 2023 15:08:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39120
IP address blocks: 5.56.12.0/22 maxlen: 22
5.83.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:bf:09:48:cb:e7:8f:59:22:f5:10:0b:21:2b:d8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Jul 6 15:08:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed968b7ac314b4d02e317bb70c240cb6446c5c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:c8:8c:29:16:b6:8c:e2:33:c7:74:21:e8:
7e:d2:09:b0:52:d0:fb:59:b4:35:bb:79:30:21:39:
25:13:e6:fa:5f:98:f0:ba:f3:c7:b7:3e:b8:3e:69:
32:95:7d:70:21:96:88:e2:bc:ea:9b:ea:0f:2e:dc:
4f:be:6e:ad:0a:2e:d5:ad:09:37:19:8f:f6:d0:7f:
f5:ac:2e:4c:eb:96:70:c5:e7:67:e0:ff:63:26:d4:
4b:7f:21:94:68:3d:72:fe:1a:5c:db:be:5f:36:c9:
af:75:52:95:0b:09:bb:06:25:b5:e1:34:73:a4:07:
07:bb:9a:30:b0:0b:ca:a0:87:29:f9:92:3e:18:77:
88:04:2d:63:75:e8:fc:ec:60:ca:41:aa:f4:0d:1d:
1a:39:11:27:b6:96:6d:81:17:f4:5e:9b:92:bb:5f:
b3:cc:97:c1:75:cf:3d:f6:02:42:8a:42:98:67:15:
25:ce:54:0a:32:e1:84:33:9f:9c:81:47:cc:3f:20:
66:36:15:8d:ed:b1:e8:85:f2:c8:7a:ea:49:c7:90:
70:8d:d5:c1:a2:02:11:3d:a7:4e:19:99:f9:2d:02:
58:7b:c0:c9:36:63:15:f0:78:50:4c:6a:86:76:47:
5f:54:fc:6c:10:3f:c2:ae:c4:d5:84:0d:4c:af:b7:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:8B:7A:C3:14:B4:D0:2E:31:7B:B7:0C:24:0C:B6:44:6C:5C:87
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/7ZaLesMUtNAuMXu3DCQMtkRsXIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.12.0/22
5.83.120.0/22
Signature Algorithm: sha256WithRSAEncryption
46:fb:0a:1e:57:14:eb:79:6e:a4:89:5e:00:f8:2b:8d:51:75:
63:92:a8:4a:8c:f2:3e:35:7a:5a:d2:e1:42:dd:d3:74:cb:aa:
bc:34:85:b0:cd:15:65:56:ca:ec:19:71:bc:87:96:5f:d6:0d:
69:da:44:c9:ef:39:01:33:d7:1e:29:8f:38:ed:fa:61:7c:8f:
e0:fe:44:b8:f7:db:74:cf:2c:95:f6:1b:60:a2:99:48:9e:27:
97:49:13:56:fe:49:3c:10:6c:b2:29:cb:cd:4a:e0:09:f2:20:
69:05:9c:77:a1:df:d4:3a:51:26:92:01:80:8e:5a:62:cd:33:
91:32:c4:f5:51:12:6a:c4:43:ec:8e:d7:6d:7f:35:76:48:34:
30:3b:7d:4d:92:98:77:11:3a:e2:0a:66:d3:22:08:60:16:e3:
14:c3:42:2f:7f:3e:9e:eb:31:b8:c6:ae:e6:4b:1c:0a:ae:39:
c5:8f:b0:fe:71:c5:76:34:5c:d6:61:90:fb:6a:f8:d4:dd:9d:
d5:52:86:61:f9:f2:88:11:7f:4b:da:9c:df:10:f4:d1:16:dc:
5b:65:be:6a:38:be:7d:dd:12:60:e8:63:01:f2:59:8b:69:e1:
22:95:c2:b1:06:b9:99:83:a0:6f:56:b7:c4:ea:f0:0d:ef:cd:
c5:78:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:41 2025 by rpki-client