Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/nyuOKQlXnJ_eBs488CWqEvJgCkg.roa
File: nyuOKQlXnJ_eBs488CWqEvJgCkg.roa (raw, json)
Hash identifier: QYf/r34OpUuNCTHY57VFeZLblAI0jykG/4RsYqEmqZM=
Subject key identifier: 9F:2B:8E:29:09:57:9C:9F:DE:06:CE:3C:F0:25:AA:12:F2:60:0A:48
Certificate issuer: /CN=b2f11d8361b052118d851d4a7807bcd24784cff5
Certificate serial: 01857082A40BCCC57AE34F17E9424AE53437
Authority key identifier: B2:F1:1D:83:61:B0:52:11:8D:85:1D:4A:78:07:BC:D2:47:84:CF:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svEdg2GwUhGNhR1KeAe80keEz_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/nyuOKQlXnJ_eBs488CWqEvJgCkg.roa
Signing time: Mon 02 Jan 2023 03:24:47 +0000
ROA not before: Mon 02 Jan 2023 03:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58345
IP address blocks: 5.134.37.0/24 maxlen: 24
5.134.38.0/24 maxlen: 24
5.134.35.0/24 maxlen: 24
5.134.36.0/24 maxlen: 24
5.134.32.0/20 maxlen: 20
5.134.34.0/24 maxlen: 24
5.134.32.0/24 maxlen: 24
5.134.33.0/24 maxlen: 24
5.134.42.0/24 maxlen: 24
5.134.41.0/24 maxlen: 24
193.108.230.0/24 maxlen: 24
5.134.39.0/24 maxlen: 24
193.108.230.0/23 maxlen: 23
5.134.40.0/24 maxlen: 24
5.134.44.0/24 maxlen: 24
193.108.231.0/24 maxlen: 24
5.134.43.0/24 maxlen: 24
5.134.46.0/24 maxlen: 24
5.134.47.0/24 maxlen: 24
5.134.45.0/24 maxlen: 24
185.103.150.0/24 maxlen: 24
185.103.148.0/22 maxlen: 22
185.103.151.0/24 maxlen: 24
185.103.148.0/24 maxlen: 24
185.103.149.0/24 maxlen: 24
193.108.206.0/24 maxlen: 24
193.108.206.0/23 maxlen: 23
193.108.207.0/24 maxlen: 24
185.102.206.0/24 maxlen: 24
185.102.204.0/24 maxlen: 24
185.102.205.0/24 maxlen: 24
185.102.204.0/22 maxlen: 22
185.102.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:a4:0b:cc:c5:7a:e3:4f:17:e9:42:4a:e5:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f11d8361b052118d851d4a7807bcd24784cff5
Validity
Not Before: Jan 2 03:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f2b8e2909579c9fde06ce3cf025aa12f2600a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:ef:fb:5f:f5:6a:f3:fa:da:01:11:32:6c:
81:7a:55:aa:91:99:68:f4:ac:30:10:3b:42:a3:5b:
a3:56:a5:85:40:47:8c:92:dd:e6:4d:05:87:f6:46:
be:8b:b0:be:21:07:a6:a3:ac:a0:0a:c5:cc:c8:07:
cc:f3:5d:a7:42:4a:d8:a0:f0:dd:58:fe:7f:d1:8d:
39:be:ab:db:ae:60:b6:81:1e:ff:5c:29:68:71:66:
a9:97:fb:e2:4e:a0:c8:89:33:3f:c2:ca:70:10:93:
5f:5a:4a:1d:b1:e2:11:ca:c2:20:a3:7a:42:28:c7:
08:f3:94:89:e3:b2:ab:83:86:c6:d7:19:3a:a2:77:
1c:77:be:0a:a8:63:c0:a0:7e:4e:8e:d6:10:02:82:
ec:dd:55:63:a0:ca:7f:64:25:20:85:d2:54:6a:59:
0b:22:ba:ec:0e:02:c4:ed:ab:f1:df:81:37:85:78:
cd:ed:26:fd:e4:78:bc:ca:33:a0:6e:73:42:6d:4d:
93:32:fb:de:f7:b4:53:a5:f2:3b:c4:54:01:a2:54:
d4:81:3c:7b:f3:df:40:1d:58:fd:53:ae:7f:b8:d2:
6b:d7:f4:17:34:47:44:7e:7d:10:a5:26:ad:0d:7c:
fb:a0:e3:b4:05:fe:31:1b:c3:5b:2d:cb:a2:83:cc:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:8E:29:09:57:9C:9F:DE:06:CE:3C:F0:25:AA:12:F2:60:0A:48
X509v3 Authority Key Identifier:
keyid:B2:F1:1D:83:61:B0:52:11:8D:85:1D:4A:78:07:BC:D2:47:84:CF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svEdg2GwUhGNhR1KeAe80keEz_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/nyuOKQlXnJ_eBs488CWqEvJgCkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/15d239-7c03-45d3-83e7-b52cdea5bbb5/1/svEdg2GwUhGNhR1KeAe80keEz_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.32.0/20
185.102.204.0/22
185.103.148.0/22
193.108.206.0/23
193.108.230.0/23
Signature Algorithm: sha256WithRSAEncryption
22:55:ea:04:20:da:de:05:7f:3d:71:a3:83:de:06:c2:53:38:
29:96:b3:34:d1:16:b0:6d:25:7b:ca:a2:61:e6:dd:3a:b2:1b:
72:59:50:99:86:e9:8b:23:91:0a:df:c1:4a:c9:5c:70:b3:79:
7b:af:5c:73:39:b4:f3:3a:99:10:66:a3:98:ed:4a:1c:0a:36:
f7:9a:4e:ce:9b:67:91:e1:c0:1c:37:1d:ef:17:6c:f8:4b:30:
3d:7c:fa:f1:10:e5:35:0f:9c:75:9b:18:b2:df:7f:0c:d1:c2:
1f:4a:7e:89:75:a4:20:8a:43:57:7f:ca:2b:d1:df:f2:4e:3f:
26:ac:dd:ed:47:7e:4d:6e:77:a0:f1:e3:a4:fc:00:83:97:8a:
3b:f8:aa:13:eb:9a:a5:b5:cf:df:71:13:8e:17:fa:29:4f:4b:
2d:92:7a:9e:dd:9b:cd:91:54:f4:84:c8:34:be:7a:a2:bb:5e:
92:76:11:bd:ef:90:bb:6a:c3:ac:80:0c:ed:e3:54:0c:df:27:
55:6a:1b:eb:20:94:01:e8:9a:75:12:25:ac:db:67:0d:f5:f9:
15:8c:0f:73:0b:e1:03:e7:86:33:f9:61:9f:47:12:f8:93:25:
9c:7f:df:83:d3:54:22:4a:ac:76:2f:2a:96:94:66:c4:8d:9a:
38:5a:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:10 2024 by rpki-client on console-fra.rpki-client.org