Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/ubgD2uKd7H7MBuGlvps4jnF6ugU.roa
File: ubgD2uKd7H7MBuGlvps4jnF6ugU.roa (raw, json)
Hash identifier: hPTqfEwpcuyBcDBUje0ALuMf5d8VF1QScWICXIo45Cc=
Subject key identifier: B9:B8:03:DA:E2:9D:EC:7E:CC:06:E1:A5:BE:9B:38:8E:71:7A:BA:05
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 018CC49234D01407F6BF027A58621C852B44
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/ubgD2uKd7H7MBuGlvps4jnF6ugU.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200568
IP address blocks: 5.159.22.0/23 maxlen: 23
5.159.22.0/24 maxlen: 24
5.159.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:34:d0:14:07:f6:bf:02:7a:58:62:1c:85:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9b803dae29dec7ecc06e1a5be9b388e717aba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:2e:4a:2b:58:89:fa:9b:d5:a8:42:45:11:
dd:93:bb:04:f7:9c:92:96:fe:55:1e:fd:dd:ed:12:
4e:98:d8:a1:34:c8:a3:b0:93:b4:29:2b:de:54:b1:
e5:79:40:df:1e:7c:34:d9:73:eb:8e:ad:ef:e6:bb:
8a:b1:a8:46:a1:79:a6:2f:1d:cf:64:a4:f6:be:46:
75:1d:8e:3a:ff:bd:39:72:fb:71:62:a4:f8:89:e5:
40:ba:42:99:07:c7:ff:6a:61:2f:b7:b8:04:df:34:
dc:2b:f9:08:42:06:1f:3d:e5:3f:ba:27:eb:d5:3d:
66:a5:e5:12:7f:ce:9a:47:bc:d1:ec:b3:99:7b:d0:
fc:fb:99:8b:55:c7:ef:e3:cc:e8:63:1d:39:54:b4:
22:e3:36:78:4b:e9:19:a3:62:40:78:37:4c:67:de:
7f:4a:54:b4:a3:09:c1:d1:36:ce:1d:2e:b6:de:b2:
d6:8e:36:52:d5:93:91:ec:79:0f:fd:bf:9c:5f:70:
ba:9e:26:1a:d1:11:1f:ce:57:cc:01:39:a5:d3:38:
fb:58:21:6d:14:60:1d:28:02:5e:c6:92:5b:be:1e:
8d:20:13:1c:2d:f2:18:6b:27:67:eb:a2:4f:57:32:
71:97:cd:54:31:92:9d:cb:62:93:83:d9:fa:30:82:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:03:DA:E2:9D:EC:7E:CC:06:E1:A5:BE:9B:38:8E:71:7A:BA:05
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/ubgD2uKd7H7MBuGlvps4jnF6ugU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.22.0/23
Signature Algorithm: sha256WithRSAEncryption
20:e3:77:66:28:9c:90:88:d0:32:4c:d5:6c:78:a3:19:b3:29:
be:f1:91:75:75:00:b0:f6:32:52:cb:c6:09:57:bb:64:38:f8:
06:42:c6:33:af:90:b3:4e:cd:e8:7a:06:d8:35:b3:6e:4c:3d:
b6:b9:78:56:ca:20:05:23:0f:a8:70:a6:b1:88:e2:02:59:67:
57:d5:e4:08:4d:9f:b9:54:e8:97:d9:1c:a9:8c:cc:41:f0:79:
fc:1c:c3:55:60:ca:96:8f:02:05:4f:e7:7f:ca:eb:74:9f:7f:
4b:56:3f:70:47:6e:06:16:50:6d:80:72:aa:ee:82:68:e0:20:
b0:98:d2:ec:4a:57:e8:9c:bd:17:e5:7b:5e:d8:64:3d:7e:b9:
cb:54:c1:f0:37:29:04:f8:cf:1b:a6:95:2c:c7:5a:36:1a:4a:
a7:3c:4c:8f:fc:ea:65:f3:02:1b:93:c2:38:01:4f:68:3f:c7:
88:b3:44:cf:0e:c7:0a:89:07:e1:d8:8c:25:29:37:08:87:3e:
c3:6b:f3:18:62:e0:21:b8:24:77:e2:9e:e4:53:45:05:bf:27:
4c:36:b9:1c:d2:11:ba:76:69:93:f7:2f:a9:27:58:fa:40:25:
34:52:0d:dc:d2:3d:f1:07:07:d9:8e:1d:ad:a9:29:4c:73:a6:
51:99:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:21 2024 by rpki-client on console.sobornost.net