Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/lSr5OKxJjpwc_AQcP-jAC9cflMQ.roa
File: lSr5OKxJjpwc_AQcP-jAC9cflMQ.roa (raw, json)
Hash identifier: PZs3C7dW8B4kAtCA5G0ABTlPFm88zmZCez/x13DwH48=
Subject key identifier: 95:2A:F9:38:AC:49:8E:9C:1C:FC:04:1C:3F:E8:C0:0B:D7:1F:94:C4
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 06936E85
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/lSr5OKxJjpwc_AQcP-jAC9cflMQ.roa
Signing time: Sat 01 Jan 2022 16:02:57 +0000
ROA not before: Sat 01 Jan 2022 16:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198887
IP address blocks: 5.56.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110325381 (0x6936e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Jan 1 16:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=952af938ac498e9c1cfc041c3fe8c00bd71f94c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:d8:be:0c:59:df:56:49:d1:94:a9:be:ab:
eb:0b:d3:f3:be:23:3f:2e:0b:39:b5:02:c5:e4:d5:
c1:42:85:05:f3:ed:8c:e2:64:6e:f3:6b:da:ac:c0:
da:c6:40:08:99:3e:1f:08:3c:2a:bc:3c:93:57:3c:
21:a3:17:f4:ce:9f:23:9c:6c:43:ba:e0:ed:f8:47:
83:9a:74:06:20:61:72:63:ce:e2:78:1e:64:06:64:
57:c0:73:58:88:c2:77:88:15:f0:fa:be:d7:df:95:
3f:88:6e:b2:44:c3:b2:0d:cf:f0:d1:d8:ae:56:66:
61:e4:5e:be:a8:a3:87:e2:f7:ce:03:bf:36:24:b6:
d0:1f:9e:35:3b:d6:15:85:cf:10:b0:8d:54:f2:20:
56:c6:49:3c:66:7e:af:ee:b1:ff:c4:f9:62:a1:88:
a6:17:d4:00:2c:64:9e:ad:70:1d:8e:d9:8b:7c:e7:
38:25:11:33:8a:82:e7:f6:2c:59:66:6a:90:de:e3:
50:f7:ae:f5:0b:e5:f0:e4:b4:a3:8a:ba:82:80:bf:
a6:e6:c0:33:21:5e:f1:1b:c2:78:d1:3d:ef:ee:1b:
41:ae:a6:26:50:2d:fe:ea:60:66:e6:07:2f:c0:61:
92:bd:ea:88:fc:5f:d9:f4:ef:af:61:4d:19:9b:dc:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:F9:38:AC:49:8E:9C:1C:FC:04:1C:3F:E8:C0:0B:D7:1F:94:C4
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/lSr5OKxJjpwc_AQcP-jAC9cflMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:4d:34:93:ff:65:d6:5a:c0:58:42:6d:42:5b:0f:68:5a:20:
b1:92:7d:c5:43:ac:6a:d7:7f:14:20:9b:9e:e0:49:bb:74:0a:
94:84:ec:ae:7a:52:34:f4:53:c0:3e:df:fa:3e:b9:d8:52:dc:
99:86:2c:f2:ef:ad:db:37:96:3f:60:43:d1:6e:99:d5:0e:6d:
b5:fa:24:23:76:f7:77:cc:e4:2e:11:8f:7a:67:a7:cd:5d:64:
00:ae:64:0d:b8:32:5a:2a:de:aa:7d:fa:1a:d9:68:54:c9:de:
ac:f9:7b:34:c6:93:72:19:87:b5:00:65:7b:96:ae:03:21:ba:
87:7b:ab:e8:92:d1:95:30:f4:4f:da:11:b6:b8:f2:d6:f2:0a:
d0:9c:d5:62:ee:16:db:05:82:28:ea:3a:9d:fa:3b:c2:5c:b9:
d3:c2:55:4d:c2:1a:c2:c3:15:1a:40:80:f4:42:c5:de:7a:1a:
c7:41:ae:a1:3a:9e:53:9f:f0:ec:df:5a:ea:1e:7c:2b:94:a9:
1f:65:b0:eb:8c:40:fe:98:89:98:fe:0d:0b:2f:44:0b:e7:6e:
a6:10:74:e1:13:2c:18:1d:c0:3e:7f:56:2f:bc:cb:7f:07:61:
b2:76:c4:35:87:aa:f9:0d:8b:26:40:1b:2f:c8:9f:3e:38:bf:
99:04:b1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:59 2025 by rpki-client