Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/j5TRa3uZ-9GVOr8r6yRx_Gwlck4.roa
File: j5TRa3uZ-9GVOr8r6yRx_Gwlck4.roa (raw, json)
Hash identifier: /6UbCq6EPicgniXJETs4gP0mcnLfa7+p0tHCbePP8pE=
Subject key identifier: 8F:94:D1:6B:7B:99:FB:D1:95:3A:BF:2B:EB:24:71:FC:6C:25:72:4E
Certificate issuer: /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial: 0187D6D081A56C10EDE1D22ED8F31106DD27
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/j5TRa3uZ-9GVOr8r6yRx_Gwlck4.roa
Signing time: Mon 01 May 2023 10:16:41 +0000
ROA not before: Mon 01 May 2023 10:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8282
IP address blocks: 80.252.116.0/22 maxlen: 24
194.70.36.0/24 maxlen: 24
80.252.124.0/22 maxlen: 24
84.246.192.0/21 maxlen: 24
93.188.176.0/21 maxlen: 24
2a01:2c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:d0:81:a5:6c:10:ed:e1:d2:2e:d8:f3:11:06:dd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Validity
Not Before: May 1 10:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f94d16b7b99fbd1953abf2beb2471fc6c25724e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:b4:dd:12:a7:d2:84:33:9c:f2:7f:98:b2:
11:5c:c4:f6:53:f8:d5:28:21:d9:65:62:e2:41:34:
b0:62:6f:22:e9:a1:54:9c:77:48:1c:05:84:37:6e:
98:9a:35:f4:44:0a:91:2f:9e:97:9b:5f:1f:15:76:
bf:86:2d:d9:bc:ba:66:48:d0:9c:95:b7:f9:bc:53:
f0:fd:dd:65:fb:58:85:a0:19:f8:fd:5f:e2:d6:4a:
d6:58:d2:24:d4:a5:a8:c7:db:cc:c4:2a:35:f9:d7:
5f:72:e4:e8:45:cc:44:95:2b:51:9a:31:0d:b5:21:
de:c8:c4:fa:48:06:c2:16:d1:6f:05:3e:d4:c7:06:
80:61:40:85:ad:3d:ca:38:1f:65:23:d2:c2:8e:8b:
10:b9:95:38:d0:95:a4:c6:41:f8:e7:77:bc:68:aa:
b2:70:c4:ad:94:29:2d:3d:03:01:83:2c:fd:8c:70:
19:02:af:48:89:ea:f3:ad:d1:46:a1:97:89:db:ee:
e3:d4:9e:02:07:d5:15:3d:32:e0:00:a5:c4:2a:5e:
19:fa:51:59:57:05:ce:27:ed:34:30:bc:5d:d6:c1:
c6:84:99:b6:7d:ed:56:ae:09:6d:fb:8e:37:49:a8:
e3:58:f9:d4:75:70:e8:d5:f5:14:be:b2:98:91:3e:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:94:D1:6B:7B:99:FB:D1:95:3A:BF:2B:EB:24:71:FC:6C:25:72:4E
X509v3 Authority Key Identifier:
keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/j5TRa3uZ-9GVOr8r6yRx_Gwlck4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.116.0/22
80.252.124.0/22
84.246.192.0/21
93.188.176.0/21
194.70.36.0/24
IPv6:
2a01:2c0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:8b:dc:a8:15:e8:8f:5c:16:bb:7c:d0:89:03:1f:26:56:fb:
4b:bb:98:11:ff:04:58:ae:d0:f5:bd:f7:ac:34:33:ec:a8:ae:
a1:b4:5b:a9:ff:00:ff:57:83:17:ef:08:95:6a:60:46:4e:6f:
2d:a3:73:2c:e1:2a:58:72:d6:0f:de:85:0c:62:18:ac:c0:bb:
b6:0f:a9:62:21:e2:9e:cd:4f:17:27:0f:51:d2:02:c4:2e:52:
f5:6d:41:4e:0e:35:aa:76:b2:a1:b8:00:f9:b5:45:68:ff:3a:
8a:cd:f1:6a:89:68:d0:d0:dc:93:c9:fc:35:c0:d0:58:d8:e4:
a8:e1:99:27:5f:a1:29:8a:ea:e9:c2:00:08:19:60:75:27:86:
30:1c:e2:c9:76:9b:1d:bb:7e:0f:4c:01:49:99:84:82:2b:60:
3a:4b:bd:89:b6:4d:3e:d2:73:3c:f7:2a:12:84:57:85:e0:3e:
83:bb:d5:3c:21:75:c0:d0:a6:40:6a:a5:4e:aa:68:59:63:c1:
4f:25:ca:c4:91:3e:dc:e4:08:32:0c:e6:25:fa:68:38:56:d7:
57:8f:6d:f3:49:cf:22:a8:57:fa:8c:ab:e7:ff:9f:1f:25:a9:
d5:f0:8e:2e:5f:df:23:12:a3:86:08:19:01:89:09:b4:0a:cb:
9e:b7:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net