Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/5_yYANDh3aodVpAmZSaEAPUdDyk.roa
File: 5_yYANDh3aodVpAmZSaEAPUdDyk.roa (raw, json)
Hash identifier: hgGOwQ19848GLsxOBmzjSlYpgqITfHDh7RIkk4AEivI=
Subject key identifier: E7:FC:98:00:D0:E1:DD:AA:1D:56:90:26:65:26:84:00:F5:1D:0F:29
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 01910D35F16A903A33CFE89291E2ADE9DEC2
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/5_yYANDh3aodVpAmZSaEAPUdDyk.roa
Signing time: Thu 01 Aug 2024 09:12:04 +0000
ROA not before: Thu 01 Aug 2024 09:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8860
IP address blocks: 5.182.20.0/24 maxlen: 24
5.182.21.0/24 maxlen: 24
2a0e:b800::/32 maxlen: 32
2a0e:b800:dddd::/48 maxlen: 48
2a0e:b801::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:35:f1:6a:90:3a:33:cf:e8:92:91:e2:ad:e9:de:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Aug 1 09:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7fc9800d0e1ddaa1d56902665268400f51d0f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:16:89:80:46:bc:fa:2e:2f:44:b7:c0:42:
1e:c4:06:7a:a4:f3:44:c5:3c:75:0b:0a:6f:1f:c4:
35:cd:3e:03:32:03:be:de:c6:0a:93:3e:ac:98:8b:
94:b1:4f:eb:ea:f4:fc:7c:ff:df:fc:80:4f:51:48:
e6:3c:60:47:88:57:34:47:46:28:54:73:20:84:11:
29:7f:f3:41:5e:c8:9a:7e:50:b8:9e:7b:db:88:7a:
fd:e8:56:e4:e9:56:b0:1b:ad:e4:15:de:1e:ea:7c:
08:85:c4:ad:31:ce:e2:14:4d:c0:8c:dd:53:a7:8c:
b7:29:0c:64:6f:eb:1b:c7:7c:0f:61:82:17:b2:ea:
6f:68:99:be:02:29:69:85:63:7a:ce:85:e5:a3:81:
85:aa:e3:8d:26:23:65:ed:7f:fd:16:d8:c0:9a:1f:
00:5d:65:13:cc:9d:23:99:98:4c:3b:1b:ba:69:f2:
bf:27:61:5b:cb:65:c9:69:30:dd:a1:36:65:9e:19:
96:fc:25:e7:a3:0e:74:ab:df:b3:cc:e3:09:d7:5d:
92:66:00:1a:bb:99:b6:5e:4d:88:12:e7:65:76:68:
77:88:a6:dc:e9:1b:3b:eb:21:b1:cc:2f:fe:d1:97:
bb:f6:e8:74:91:bc:ed:fd:c2:60:04:de:eb:f9:97:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FC:98:00:D0:E1:DD:AA:1D:56:90:26:65:26:84:00:F5:1D:0F:29
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/5_yYANDh3aodVpAmZSaEAPUdDyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.20.0/23
IPv6:
2a0e:b800::/31
Signature Algorithm: sha256WithRSAEncryption
2d:28:aa:f4:78:b9:93:9c:a1:16:da:7e:1a:ae:58:53:23:b8:
5e:eb:ef:4a:5c:ad:3b:1e:27:20:3f:a7:97:28:0f:d1:1f:56:
48:c5:a0:7f:50:f9:46:13:fb:e4:d9:3e:33:53:2c:ab:12:08:
0f:b4:2f:e9:db:29:83:e4:46:81:eb:31:2a:95:25:fc:8f:3e:
8c:f3:75:da:99:6b:25:f3:1e:e2:0f:8a:68:11:b1:b5:08:4c:
fb:03:8a:70:f0:6c:ab:42:f3:e9:12:62:e5:97:fa:57:d8:71:
71:06:80:38:89:20:ce:c2:15:24:79:93:62:37:ae:dd:e0:16:
54:a7:75:5f:8d:5c:99:ff:a9:be:27:be:1d:6a:83:74:b6:7d:
51:4c:d9:70:fa:a4:8f:b5:b4:75:09:6e:70:b2:eb:11:2f:4a:
98:9a:a1:f6:35:90:2a:b7:d7:e4:43:46:fb:53:e8:3c:a5:9f:
9f:0f:d9:e5:97:f0:41:23:d6:a8:b6:32:ce:05:38:cf:b9:1a:
fb:c1:60:2d:f7:fe:10:e2:b8:71:c4:01:13:07:56:e5:48:c1:
c0:d9:cd:b7:6c:57:c2:d5:ee:f8:76:57:b2:68:85:89:f2:39:
0a:44:8e:76:e6:25:96:39:a8:f2:5d:f1:d9:45:0c:30:52:0c:
63:93:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 18:06:34 2024 by rpki-client on console.sobornost.net