Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/Dmy7mpeKU49hWIP1ZUJLAMm-iAE.roa
File: Dmy7mpeKU49hWIP1ZUJLAMm-iAE.roa (raw, json)
Hash identifier: c5PZysiIfCc0U/9yzwwAjSd1fHUBs4qv8l1inhGHqb8=
Subject key identifier: 0E:6C:BB:9A:97:8A:53:8F:61:58:83:F5:65:42:4B:00:C9:BE:88:01
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 018CC64B08AC8998BFE8C97087C19978F580
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/Dmy7mpeKU49hWIP1ZUJLAMm-iAE.roa
Signing time: Mon 01 Jan 2024 18:30:55 +0000
ROA not before: Mon 01 Jan 2024 18:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198843
IP address blocks: 5.56.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:08:ac:89:98:bf:e8:c9:70:87:c1:99:78:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Jan 1 18:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e6cbb9a978a538f615883f565424b00c9be8801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:ca:bc:0a:d3:8a:cc:08:cf:3d:bd:76:84:
6d:7d:e5:48:a3:31:29:ed:51:34:0c:93:1d:af:e5:
fa:4e:6e:c1:4d:65:37:b1:25:6a:79:a3:e0:5a:44:
28:59:e7:3a:71:04:b1:43:9f:d5:04:a3:73:44:b2:
4d:18:41:fe:0b:f6:fc:a6:f6:ee:e0:59:6c:2b:91:
80:60:cf:4b:de:48:a2:6d:13:91:57:80:6b:84:58:
5b:a9:d8:97:75:24:b9:b1:9b:a4:4c:c5:c3:21:bd:
08:36:d2:23:c8:61:a9:73:1c:f1:ad:8d:21:d4:50:
40:03:d1:16:56:60:81:4b:1a:de:f9:48:90:b9:da:
2c:d6:72:19:1a:19:f6:97:a1:ed:1c:7a:96:c9:af:
31:45:38:c6:ea:55:b7:47:31:ce:71:f7:02:27:e5:
15:ed:3a:8a:4a:15:5d:20:8c:79:8e:c9:ca:7b:47:
91:2a:01:7d:53:a4:35:38:7f:53:dd:47:2c:55:1b:
54:a3:1f:e3:70:41:d3:eb:3c:f8:db:e5:93:0a:16:
e9:26:50:27:56:ea:1c:6e:fc:8a:34:31:62:d2:d0:
7c:a7:7a:76:83:9f:dc:22:48:54:c7:b7:98:4b:11:
87:fd:8f:76:04:58:93:91:23:9f:55:a1:4b:e9:42:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:BB:9A:97:8A:53:8F:61:58:83:F5:65:42:4B:00:C9:BE:88:01
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/Dmy7mpeKU49hWIP1ZUJLAMm-iAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.12.0/22
Signature Algorithm: sha256WithRSAEncryption
13:fa:d3:bd:c4:26:4a:fc:c1:6f:b3:81:13:48:79:cb:a3:ce:
f2:64:fc:88:80:31:6e:a8:0b:c1:dd:5f:7a:c5:ad:00:76:91:
c0:9e:a9:2e:97:d3:d4:da:9f:fa:a2:10:bd:6f:4e:bd:18:a4:
90:ab:97:17:56:fd:cb:48:34:51:45:d1:82:2b:e8:ce:c2:f9:
40:92:8a:9c:13:ae:8c:64:e5:8a:df:27:72:e4:40:81:53:fe:
3f:35:12:f9:1f:09:16:0c:b9:0e:19:f4:74:8f:3d:ec:ca:c8:
99:d7:0e:99:32:04:3a:a5:3e:5f:d4:91:d0:d2:e0:20:d7:68:
76:ec:78:62:6d:4b:42:07:44:98:13:5f:4e:e1:9f:bc:76:2d:
04:b8:74:b7:80:6e:23:12:10:05:80:fa:05:b9:00:a8:29:bd:
c3:cf:f5:8b:3f:f2:38:e8:bd:ca:5e:d0:d4:ab:50:f4:45:26:
bc:bb:7f:c2:04:e1:d5:23:1a:65:73:fa:ed:ce:c7:4e:5d:1f:
73:ff:84:4a:1b:e6:09:54:dc:4b:39:47:58:dd:e8:9b:5f:f3:
7d:62:26:31:29:67:de:c9:d0:f6:ba:71:76:45:1e:c2:be:81:
1b:73:3d:98:b4:61:60:5c:9e:15:af:03:7e:3c:71:21:43:4c:
32:c3:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:34 2025 by rpki-client