Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/X9z7_4SJAidcncJsVW4w46-vEc8.roa
File: X9z7_4SJAidcncJsVW4w46-vEc8.roa (raw, json)
Hash identifier: 3Zn1PhJ9oTrkMyA+g+/wFLlTD3V8yQxPpm5K+EY8oKo=
Subject key identifier: 5F:DC:FB:FF:84:89:02:27:5C:9D:C2:6C:55:6E:30:E3:AF:AF:11:CF
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0193CFAA925B42096B084F5C71E74EC31DAE
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/X9z7_4SJAidcncJsVW4w46-vEc8.roa
Signing time: Mon 16 Dec 2024 13:31:22 +0000
ROA not before: Mon 16 Dec 2024 13:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.102.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:aa:92:5b:42:09:6b:08:4f:5c:71:e7:4e:c3:1d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 16 13:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fdcfbff848902275c9dc26c556e30e3afaf11cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:4e:95:8a:ac:f5:33:d8:f4:e6:af:09:63:
e5:2c:c5:86:40:a5:75:59:5c:84:9e:45:00:a6:1e:
54:ea:ea:0f:5e:80:11:68:51:cc:68:e8:75:6a:d3:
70:68:e1:2d:b7:9b:1a:36:7c:6e:07:72:80:67:1d:
31:45:cc:c5:c4:23:69:5a:10:65:55:45:87:d4:ea:
86:98:a1:34:d6:56:dc:f7:a0:eb:f1:71:01:be:b0:
83:54:89:62:ad:77:56:3d:1c:90:fe:5a:3e:f7:e6:
87:34:42:42:87:7e:30:0f:d5:94:e5:35:d8:1a:07:
74:34:7e:03:46:74:b7:3c:e2:28:17:c7:cb:31:f6:
e9:36:d5:c8:2f:99:6f:be:c2:7c:56:37:03:63:bc:
20:63:36:7e:c6:2d:8b:e9:62:fd:53:db:ce:ce:32:
e5:05:a5:51:2d:c1:b3:6a:fb:4a:c0:37:a8:13:56:
af:d5:fd:c4:af:ab:de:ab:4a:0b:f5:22:c5:95:c6:
b2:46:46:7d:2e:0c:1c:0d:c1:88:a5:a2:47:43:b4:
e6:8a:bf:22:3e:3b:ee:da:cd:32:c5:07:ea:3e:5c:
55:9c:e6:39:e5:ac:89:9f:94:43:d2:a0:25:a1:a0:
c2:77:c6:4f:9e:bd:03:d8:9b:56:70:6d:fb:fe:e2:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:FB:FF:84:89:02:27:5C:9D:C2:6C:55:6E:30:E3:AF:AF:11:CF
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/X9z7_4SJAidcncJsVW4w46-vEc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.100.0/22
Signature Algorithm: sha256WithRSAEncryption
07:78:5e:15:26:b5:10:57:9d:b1:45:8b:10:74:c2:91:7d:c7:
57:e0:66:98:dd:38:aa:16:6d:96:b5:bc:02:7a:10:f7:60:6c:
e6:06:6f:13:88:05:60:5d:22:82:bf:bb:99:37:f7:6e:8b:8f:
1e:11:76:a1:3b:69:b8:5d:63:a6:d9:13:58:2e:50:3f:84:d3:
4b:68:98:99:f6:22:01:13:ab:00:0b:a7:a8:ba:7a:ab:4f:60:
e1:ad:6b:a7:b1:cc:a1:1c:8c:82:f9:a3:85:f2:d9:b5:29:4a:
56:68:95:25:c5:40:8a:f1:05:2a:fd:55:fc:7e:51:72:c3:86:
fd:6f:f4:5c:0b:1f:7e:9b:2b:25:09:b0:b4:f8:4c:c8:2f:59:
ed:56:7a:2b:22:bf:e5:63:4f:c0:ef:04:6c:51:46:0b:ec:9c:
ea:69:01:ec:cc:42:e2:3f:be:3c:dc:21:a9:b7:3e:2d:28:f2:
80:af:8b:f9:e8:7b:14:cc:24:e7:94:8d:17:d4:78:e1:f2:c7:
48:19:64:58:c6:4c:4f:2f:95:b1:9b:24:61:e3:99:35:43:59:
e6:2a:41:e5:16:0a:d2:91:a8:d8:ca:2c:03:b9:91:79:b3:8c:
73:ec:15:ed:27:06:b2:3c:c6:59:33:1a:f6:3c:dd:f6:7a:21:
ec:94:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:06 2024 by rpki-client on console.sobornost.net