Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/83wrxsRymYYCumPQvQhiZaESyDM.roa
File: 83wrxsRymYYCumPQvQhiZaESyDM.roa (raw, json)
Hash identifier: S77Npxs3NYUliyM4KmA25bcBETHyT+ssFhehZgZ9Lik=
Subject key identifier: F3:7C:2B:C6:C4:72:99:86:02:BA:63:D0:BD:08:62:65:A1:12:C8:33
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 01865E4D6A5EA03A002CEF3F64C9862EF2FE
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/83wrxsRymYYCumPQvQhiZaESyDM.roa
Signing time: Fri 17 Feb 2023 07:36:17 +0000
ROA not before: Fri 17 Feb 2023 07:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39120
IP address blocks: 5.83.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:4d:6a:5e:a0:3a:00:2c:ef:3f:64:c9:86:2e:f2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Feb 17 07:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f37c2bc6c472998602ba63d0bd086265a112c833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:f6:02:47:81:08:ff:61:5e:43:8d:2f:d2:
3a:ef:a9:4c:9b:8c:22:54:df:eb:ac:11:6e:a6:ed:
16:0e:01:c9:05:4c:52:d2:b9:de:64:99:a5:47:d0:
1e:a2:f7:be:19:1d:b0:f9:ec:d2:9c:bb:aa:c3:60:
4b:2f:52:16:9f:0c:d7:dd:51:ee:74:2f:ab:2b:cd:
f8:6c:a1:b7:23:43:78:07:8b:33:75:35:a7:04:cb:
58:66:68:5f:98:71:cc:18:f2:73:b2:f3:0e:e7:71:
be:6c:2b:14:87:d6:c5:31:64:af:da:b2:91:df:b8:
29:e2:72:d5:b4:49:ad:96:bf:a3:d9:3a:a6:da:50:
bd:86:e8:cc:6d:d8:6f:9c:cf:67:b4:b3:83:03:03:
21:39:9b:a3:08:40:bf:cc:d9:b3:1d:3e:fe:25:0e:
c4:e9:60:d9:18:48:e3:ab:6b:7e:1c:08:fa:df:74:
25:63:a7:75:81:32:ea:01:fa:db:78:0e:17:03:f1:
af:1b:86:17:da:e5:2a:77:fb:a4:67:ae:98:a9:2a:
28:11:51:08:ed:10:0f:92:42:14:14:64:77:33:91:
21:22:08:05:cf:99:df:fe:14:a9:14:97:7d:48:d3:
3e:9b:d2:db:fc:af:0e:d6:b5:30:e1:5c:12:49:e1:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:2B:C6:C4:72:99:86:02:BA:63:D0:BD:08:62:65:A1:12:C8:33
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/83wrxsRymYYCumPQvQhiZaESyDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.120.0/22
Signature Algorithm: sha256WithRSAEncryption
00:63:8d:ec:2f:b6:1d:6a:e4:5e:a8:1e:bf:09:8e:9f:dc:2d:
3d:d7:9e:ec:ba:8b:6c:a2:ef:5d:46:63:bb:ba:e0:c9:09:58:
f3:73:62:cf:71:0a:ba:3b:1f:62:a6:70:ab:ec:d0:c6:e4:36:
f3:8e:30:06:83:c6:69:9f:3b:34:c1:4d:76:70:77:11:44:eb:
a4:8b:eb:f5:4b:9f:9b:4d:7a:8f:85:cc:b4:0d:f7:25:ed:a8:
9a:7d:ec:bd:cd:9a:f6:2d:5a:60:35:1c:d4:ed:b0:68:e9:00:
2c:72:1a:1c:f0:3b:53:27:b8:01:2c:75:a4:a6:0a:38:f7:72:
05:c8:62:aa:07:74:51:74:43:27:39:1c:81:83:ed:5e:a7:0a:
c9:58:61:3a:22:fa:8b:da:4c:22:6d:f8:b0:c9:58:b0:d2:16:
ef:df:6e:cf:b8:c9:4a:c8:cb:01:90:2e:5b:14:9a:1e:79:10:
2e:6c:c3:81:55:42:99:ef:5f:a4:bb:92:2f:34:8f:d2:d5:3b:
61:ce:0c:a8:ab:2c:b8:62:f2:57:a7:dc:96:7e:98:76:e3:ee:
75:d2:ac:84:d6:4e:b9:d9:7b:4d:ce:0e:28:28:e3:2e:9d:5c:
91:83:8b:03:b6:54:03:bb:9a:74:b7:d0:22:47:78:c7:a2:0e:
69:63:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:12 2025 by rpki-client