Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/VhPLtAqzbTMeQR55fPFvhophf4s.roa
File: VhPLtAqzbTMeQR55fPFvhophf4s.roa (raw, json)
Hash identifier: eP5Ig4UHeUIRBr7bhkGTISE0eYa+I/YV3hJHz+eia1c=
Subject key identifier: 56:13:CB:B4:0A:B3:6D:33:1E:41:1E:79:7C:F1:6F:86:8A:61:7F:8B
Certificate issuer: /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial: 018F0BCB11347A3BFFF04C320E1B41698E62
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/VhPLtAqzbTMeQR55fPFvhophf4s.roa
Signing time: Tue 23 Apr 2024 16:30:08 +0000
ROA not before: Tue 23 Apr 2024 16:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 931
IP address blocks: 5.252.164.0/24 maxlen: 24
5.252.166.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:cb:11:34:7a:3b:ff:f0:4c:32:0e:1b:41:69:8e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Validity
Not Before: Apr 23 16:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5613cbb40ab36d331e411e797cf16f868a617f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:9c:09:da:18:8d:85:b0:88:d7:7f:65:1c:
30:29:07:40:02:c2:1c:cd:6c:e4:c6:51:18:4b:ce:
4e:15:c3:eb:2f:a5:51:40:cf:8b:6a:42:1b:73:65:
25:a5:6b:a0:2e:9d:06:0d:7b:c6:83:13:fd:cd:b4:
84:c4:cc:4f:de:17:d5:d7:14:05:ef:ed:90:17:62:
20:8e:9c:0d:a9:4f:ef:34:37:08:9f:7e:55:c0:f8:
74:80:cb:a3:b4:ce:c8:24:20:df:ab:2b:83:82:ec:
42:28:63:60:24:30:79:5c:e5:5c:57:75:ac:44:4b:
40:3d:dd:b7:87:83:c4:89:1d:28:8c:f2:ce:80:b1:
5a:72:62:6f:8d:0e:e8:07:5f:ff:28:5b:f1:d8:20:
60:46:53:5a:05:8d:b8:93:28:74:a2:4c:34:14:d0:
3c:1d:68:5f:77:fe:36:6f:86:9d:e1:53:19:d9:68:
9b:67:be:73:02:f1:79:a2:c2:fd:44:28:28:71:57:
a6:5c:81:86:f3:c1:2c:47:2c:9a:d4:8f:a8:13:5b:
a7:4a:fb:c8:f9:1a:91:f6:a1:3e:7f:d5:d5:29:ca:
0e:f6:cc:ce:57:70:f8:a7:5d:bb:d1:6a:df:98:4a:
f0:59:95:90:9e:c9:e9:85:28:cf:27:86:c6:8b:30:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:CB:B4:0A:B3:6D:33:1E:41:1E:79:7C:F1:6F:86:8A:61:7F:8B
X509v3 Authority Key Identifier:
keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/VhPLtAqzbTMeQR55fPFvhophf4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/24
5.252.166.0/24
103.104.250.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9f:aa:02:a0:93:90:18:2c:12:84:3f:bf:37:9c:1a:88:50:
34:ff:80:0f:e5:4e:53:60:42:9f:6b:72:ab:40:e9:7d:1d:09:
6e:75:ef:1d:12:7f:6a:e6:09:4b:46:5b:a2:8f:be:4d:68:0c:
d3:ed:04:95:26:58:d6:d4:53:31:3d:b1:03:92:c3:90:fc:58:
0d:ab:db:c9:6d:f3:f0:cd:da:95:7c:43:d6:76:0b:88:09:34:
3b:37:b5:6f:69:4b:9b:fe:2b:bd:94:1e:5f:e8:09:ec:cf:ff:
c6:0e:78:6c:a2:4f:fa:4b:19:ee:ce:c8:6b:f6:40:20:75:fe:
d3:1f:68:6b:9d:42:fb:dc:eb:13:23:7c:14:9e:db:23:c1:4d:
0e:7b:e3:6d:e2:0d:22:79:c8:99:63:d4:35:2b:81:76:9d:68:
e2:49:23:26:3a:1d:8a:28:c4:80:3e:85:02:8d:1c:58:f2:84:
f5:d2:b3:d8:ea:7d:b4:9b:65:f9:25:77:26:30:2d:4d:39:27:
8e:f6:0b:01:e9:ad:7a:3a:df:ea:16:eb:db:cd:eb:ac:9e:1b:
70:a5:47:5f:69:e3:e2:08:5a:f2:5d:98:b3:6a:48:25:b7:76:
2b:f0:b8:29:3f:ba:3c:dd:e1:6e:4c:30:fa:cc:96:2e:03:e3:
6c:98:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 09:53:03 2024 by rpki-client on console.sobornost.net