Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/s898xE0BJuhmUT9A4pyHV_ReQho.roa
File: s898xE0BJuhmUT9A4pyHV_ReQho.roa (raw, json)
Hash identifier: jFjX+AsS+xGHmGQCrU8LrhnUtzJxVVXGjJxYioBpTqA=
Subject key identifier: B3:CF:7C:C4:4D:01:26:E8:66:51:3F:40:E2:9C:87:57:F4:5E:42:1A
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 0190FEAC533CD628AB4B822A45049353C2B3
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/s898xE0BJuhmUT9A4pyHV_ReQho.roa
Signing time: Mon 29 Jul 2024 13:27:04 +0000
ROA not before: Mon 29 Jul 2024 13:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50319
IP address blocks: 5.180.140.0/22 maxlen: 22
185.84.196.0/22 maxlen: 22
185.144.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:ac:53:3c:d6:28:ab:4b:82:2a:45:04:93:53:c2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Jul 29 13:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3cf7cc44d0126e866513f40e29c8757f45e421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:cb:4e:26:f0:ad:29:84:0f:53:f3:fe:0f:
f9:83:43:53:ae:d3:a6:73:7b:56:c9:5c:0f:7c:a8:
13:30:e6:4b:4b:e2:ae:e6:a7:8f:94:a1:e8:35:eb:
69:b4:94:e9:c4:60:66:e3:65:c0:91:bb:8b:0b:2f:
86:39:c9:98:86:b4:63:43:90:ab:b0:cf:4e:f1:87:
f6:ed:b6:6e:28:96:2a:63:ad:2d:85:ed:54:29:70:
7c:e4:2b:d4:04:71:82:66:d8:f6:50:f3:35:82:e8:
4c:b0:0d:a1:f3:e0:86:e5:70:90:b3:56:67:ad:66:
79:8e:40:1a:a5:ac:00:14:94:aa:ee:77:e2:87:5f:
eb:e0:72:92:68:d1:66:85:c3:b0:66:d7:3d:66:7f:
68:2c:84:74:56:ac:1e:9c:f3:cf:9b:ec:ee:2c:04:
d8:20:a7:ab:91:63:c6:66:21:46:26:2e:ed:0c:31:
c4:b8:d6:77:2f:bf:a6:ba:97:fd:1d:d4:41:69:33:
42:19:68:b1:76:10:0c:23:f7:d6:e9:c5:43:be:51:
3b:d8:bd:44:f0:01:5c:ef:54:e3:6b:01:2f:3c:20:
76:c5:19:de:20:5a:77:5a:06:ae:3d:70:8a:8e:4c:
89:93:af:b1:ed:49:81:2f:0a:7d:94:1e:ab:db:af:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:7C:C4:4D:01:26:E8:66:51:3F:40:E2:9C:87:57:F4:5E:42:1A
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/s898xE0BJuhmUT9A4pyHV_ReQho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.140.0/22
185.84.196.0/22
185.144.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:c0:8d:66:44:3f:5b:53:1a:e9:72:e7:52:50:22:a0:40:00:
4e:80:ca:27:f2:bc:1b:e2:45:a4:5a:a1:2d:c3:f7:26:14:fe:
1d:9e:a9:40:0f:10:0b:5b:1d:dc:f8:34:13:36:3b:e0:df:f2:
6a:24:b7:c7:ae:d6:fe:34:b3:d9:b6:7d:e1:5c:5a:09:1e:6a:
c7:e4:0a:95:e2:3f:5e:34:83:3e:cf:43:c9:bd:4c:8e:17:66:
dd:48:88:61:c7:e6:d5:9e:9f:be:e5:78:bc:76:95:47:56:8a:
9f:39:18:a7:7c:01:4f:21:e7:a0:9f:98:7b:0f:35:07:71:93:
2f:fa:1a:77:24:6e:a3:3a:cc:4e:da:f5:74:31:93:b9:0d:cf:
4f:bf:26:1d:d2:40:2d:57:4d:f1:f0:74:a5:72:49:63:6a:bb:
05:2e:a7:43:92:0a:1f:73:db:86:6d:79:79:2c:77:9f:ee:9a:
ac:5d:0e:a7:50:6d:f1:f6:57:97:7e:d4:67:eb:6e:2c:ba:01:
7e:4d:c8:d4:87:69:57:d5:3d:f2:a5:01:3f:ac:06:62:e2:5a:
3d:d0:f7:0e:d9:2b:69:e1:33:a7:6a:5b:04:2d:4d:b0:53:c8:
4e:72:2e:89:dd:47:a2:4d:e2:c1:1d:2d:44:2d:dd:04:38:f9:
9b:17:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:16 2024 by rpki-client on console.sobornost.net