Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/qxLy5BbOwidP6yorFDeZNcw8-r8.roa
File: qxLy5BbOwidP6yorFDeZNcw8-r8.roa (raw, json)
Hash identifier: 1U/fOkYLMDhb1pMyMaOwqluKaK7kTOidMq8PzRuTDf0=
Subject key identifier: AB:12:F2:E4:16:CE:C2:27:4F:EB:2A:2B:14:37:99:35:CC:3C:FA:BF
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 01914A6DDD7407E38DC6E72DFA38B35D7299
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/qxLy5BbOwidP6yorFDeZNcw8-r8.roa
Signing time: Tue 13 Aug 2024 06:29:59 +0000
ROA not before: Tue 13 Aug 2024 06:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39120
IP address blocks: 5.56.8.0/22 maxlen: 22
5.56.12.0/22 maxlen: 22
5.83.120.0/22 maxlen: 22
5.83.124.0/22 maxlen: 22
45.90.232.0/22 maxlen: 22
91.214.72.0/22 maxlen: 22
185.29.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:6d:dd:74:07:e3:8d:c6:e7:2d:fa:38:b3:5d:72:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Aug 13 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab12f2e416cec2274feb2a2b14379935cc3cfabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:24:73:18:4d:25:24:56:a1:ac:47:3d:29:
60:b9:64:49:fd:f3:02:25:bf:20:71:04:14:72:5e:
eb:61:20:12:e2:db:53:d7:f8:fc:c7:af:45:4f:c5:
b6:f9:85:95:c6:6c:3c:4e:92:1e:87:d8:91:7c:74:
e6:9d:79:34:e0:42:d3:c1:b1:6b:e2:57:19:62:c3:
5b:7b:98:e9:70:72:c7:f8:f7:be:95:4c:3f:a8:24:
e9:68:34:b1:17:cd:77:7a:01:97:0a:c5:ca:97:1f:
26:04:c3:e1:4b:5f:67:01:bc:de:3f:d5:b3:34:8e:
94:ad:1c:53:32:f1:85:83:33:14:56:85:d0:f3:c4:
c9:15:6e:e9:5c:fa:55:d1:5c:7a:75:a9:51:f9:11:
66:6e:3f:6e:4d:3b:30:bc:b9:da:d5:af:b7:26:3f:
bd:6f:08:bd:04:78:54:18:4c:4a:b7:9c:7f:6c:50:
f8:36:95:98:bb:49:40:a4:15:f8:48:de:ed:fe:aa:
82:93:77:59:5f:02:69:31:95:94:d9:f8:d3:37:7d:
8a:1a:e7:06:59:aa:15:41:92:db:ec:60:4d:91:db:
1a:87:cc:1b:34:1d:78:ac:56:fc:45:11:06:e2:fc:
76:68:d7:9b:2c:64:02:5c:0a:23:6e:e2:ba:ca:d4:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:12:F2:E4:16:CE:C2:27:4F:EB:2A:2B:14:37:99:35:CC:3C:FA:BF
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/qxLy5BbOwidP6yorFDeZNcw8-r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/21
5.83.120.0/21
45.90.232.0/22
91.214.72.0/22
185.29.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:0a:6e:db:b4:dd:27:c8:2f:d3:6b:0e:76:bf:d8:e5:bd:f9:
71:74:da:81:e2:77:d1:48:e3:da:7b:61:d4:eb:c6:aa:e6:0c:
65:1d:b1:ef:a5:53:6c:66:3a:ea:76:18:00:80:ac:a5:02:05:
17:fb:03:7c:95:0f:4d:ad:b4:50:f0:59:2b:02:51:ce:07:94:
f1:01:71:64:7d:8b:e2:08:49:8c:28:74:c4:26:ca:57:b9:f4:
f5:29:c4:75:63:c3:6a:63:d3:70:5b:65:a3:65:41:ad:11:fe:
c9:a8:2e:88:45:49:e2:0f:27:b3:3e:ba:b7:81:19:f4:09:a5:
cc:3f:8e:a9:21:90:0b:02:f1:96:af:f5:2c:d5:d2:54:c0:d8:
92:b5:47:6b:45:3a:a5:3d:24:16:da:10:fc:81:7c:99:17:d1:
d3:43:4c:03:b4:b6:c9:d7:cd:81:59:08:a8:73:c5:ca:01:de:
42:11:66:74:5a:f2:86:91:16:29:2c:48:57:af:92:7e:84:44:
29:82:dc:5b:46:c6:d5:c0:44:0e:85:50:41:73:95:89:3f:89:
44:7e:4b:ea:87:85:f9:40:d3:e2:7a:18:d5:3e:99:2e:17:64:
d8:02:fc:c7:01:32:4e:62:09:82:1e:74:af:01:56:81:dc:f9:
16:6a:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:28 2025 by rpki-client