Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/op6tKwgyd_0wsQIfkr0efxeuHeg.roa
File: op6tKwgyd_0wsQIfkr0efxeuHeg.roa (raw, json)
Hash identifier: PVOFhC5XMPjaA+toY4qATO1GihbLBG5p4jm/QfXu0Lo=
Subject key identifier: A2:9E:AD:2B:08:32:77:FD:30:B1:02:1F:92:BD:1E:7F:17:AE:1D:E8
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 0192E49F0CC15D0BBF8A2B060A08A007B05B
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/op6tKwgyd_0wsQIfkr0efxeuHeg.roa
Signing time: Thu 31 Oct 2024 22:08:01 +0000
ROA not before: Thu 31 Oct 2024 22:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214739
IP address blocks: 5.1.108.0/24 maxlen: 24
5.1.109.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
5.1.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e4:9f:0c:c1:5d:0b:bf:8a:2b:06:0a:08:a0:07:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Oct 31 22:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a29ead2b083277fd30b1021f92bd1e7f17ae1de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:41:46:6f:a0:9e:ed:36:33:dc:4a:99:4d:
ac:23:71:62:29:b6:ed:70:65:83:d7:c3:d7:39:45:
05:91:2a:ca:ee:8f:18:c4:ba:77:ca:24:ec:eb:47:
70:24:a6:26:5c:f8:4e:ca:e7:fe:09:c1:b6:ec:de:
2f:50:b2:9a:9a:f8:05:22:9e:02:af:ab:fc:f4:20:
08:a8:8f:9e:f7:20:a6:a2:9b:03:93:6d:09:9c:34:
27:d9:57:98:44:45:40:d9:38:f8:38:d5:eb:14:2c:
06:ff:0e:1d:da:b7:d4:14:9c:f7:1d:e6:67:cc:08:
61:a4:84:e0:8b:bb:b5:88:4e:48:e8:7d:e6:b7:0a:
83:51:2e:6e:7a:6f:95:4a:d9:0c:b4:8b:2d:2d:8e:
94:fe:27:5d:37:26:46:ea:45:d7:11:c4:74:54:1f:
c2:56:68:3a:01:7f:71:e4:87:ae:0f:6a:d4:09:30:
f5:88:6e:4b:f3:1d:3e:34:40:84:0c:cf:65:ae:07:
21:d0:e2:78:49:c0:6e:e7:b3:76:f4:27:8a:cd:22:
71:70:32:e1:09:f6:3c:6c:01:1f:47:25:f0:04:24:
ce:c8:9e:e3:a5:bd:0a:fc:b9:c5:75:36:c8:9a:14:
61:25:86:06:33:5f:c5:cb:37:e3:ee:2b:1b:65:04:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:AD:2B:08:32:77:FD:30:B1:02:1F:92:BD:1E:7F:17:AE:1D:E8
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/op6tKwgyd_0wsQIfkr0efxeuHeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.108.0/22
Signature Algorithm: sha256WithRSAEncryption
63:9f:da:40:d5:16:02:97:97:6b:c4:f8:bd:0e:86:82:ba:1f:
28:ae:4e:74:ea:5f:fd:69:53:08:6e:6e:88:c3:7d:0c:f9:fb:
39:dc:98:ba:aa:35:ca:a7:57:c4:80:ad:bf:fb:19:58:7e:87:
59:b3:b3:30:4b:16:0f:7c:8a:cb:10:b8:3b:32:d4:c6:ee:f5:
f2:fb:63:52:66:53:f9:a7:45:29:29:79:54:dd:18:df:5b:cc:
91:a9:48:1f:fc:69:cc:dc:9f:25:aa:ad:8a:8f:d8:52:85:23:
5c:05:cf:76:7d:25:90:86:15:ce:ee:9a:6e:ba:0c:22:d1:fe:
96:31:7f:51:ad:71:9f:57:e6:3f:75:e9:d5:60:2d:20:06:b3:
41:97:0b:8f:b3:16:8b:cd:db:19:02:9e:ad:2d:bf:0f:bc:4e:
e0:e8:81:38:12:3b:3a:0f:d7:cd:d9:51:89:38:68:97:15:bb:
ce:b9:05:38:c4:0e:79:e2:43:c1:2b:74:f5:4e:15:01:6f:39:
76:bb:6e:84:2c:14:d7:68:3d:c0:7b:df:19:64:0a:01:1c:8e:
ac:15:6d:4e:ce:95:33:3c:d5:13:23:3c:7e:3a:c2:4b:db:69:
e3:f0:e5:47:0d:cc:90:a5:eb:15:71:ab:db:02:c9:26:3d:8e:
f7:8d:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:14 2024 by rpki-client on console.sobornost.net