Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/pTnGNKUzFuxpXjwVFjRGW3htGMY.roa
File: pTnGNKUzFuxpXjwVFjRGW3htGMY.roa (raw, json)
Hash identifier: 0gziv5ycJtO6Q646TMdIZmen4AshzW59fKHEtFekyYM=
Subject key identifier: A5:39:C6:34:A5:33:16:EC:69:5E:3C:15:16:34:46:5B:78:6D:18:C6
Certificate issuer: /CN=97c926998e26e283fd0220f59f4b06737bff3661
Certificate serial: 01856F825611319089E0AC4A80741B4B6E41
Authority key identifier: 97:C9:26:99:8E:26:E2:83:FD:02:20:F5:9F:4B:06:73:7B:FF:36:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8kmmY4m4oP9AiD1n0sGc3v_NmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/pTnGNKUzFuxpXjwVFjRGW3htGMY.roa
Signing time: Sun 01 Jan 2023 22:44:50 +0000
ROA not before: Sun 01 Jan 2023 22:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43618
IP address blocks: 5.183.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:56:11:31:90:89:e0:ac:4a:80:74:1b:4b:6e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c926998e26e283fd0220f59f4b06737bff3661
Validity
Not Before: Jan 1 22:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a539c634a53316ec695e3c151634465b786d18c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:f5:25:3c:35:ce:6e:51:69:4f:76:2d:36:
b0:97:3f:bf:8d:ce:3f:a2:09:26:ad:71:dd:f0:e3:
af:86:90:b3:58:ec:4e:77:05:13:56:4f:17:3f:a0:
ed:61:e1:70:f3:13:2e:81:b0:5c:1c:bf:15:02:f8:
82:40:bc:c3:07:f3:6c:9b:c5:11:3c:07:2b:ac:18:
c1:81:67:7f:d8:3d:9c:3f:b5:f9:52:4e:a3:fd:74:
ad:0f:ad:46:95:8b:de:8d:d7:98:1f:70:dd:40:3e:
af:53:c8:9d:54:fb:bc:b6:5e:69:4c:84:bb:ae:a7:
85:1b:8d:93:17:97:97:bf:cc:48:a6:d9:9c:fd:96:
80:f9:a1:f4:f9:c3:44:b6:18:82:9a:9f:8b:27:d4:
a0:42:bc:52:71:fa:7b:a3:31:35:26:45:75:7a:35:
09:bc:3b:49:6d:c3:76:f8:a9:31:02:07:10:c9:dd:
25:69:72:90:14:01:59:4f:0c:5a:e3:3e:73:32:b9:
95:41:f7:36:c8:2a:50:4d:0f:eb:8c:74:9c:5d:23:
91:64:a0:13:ae:5e:57:c1:f6:af:88:7a:d8:8f:ca:
5d:e4:52:61:80:9d:e4:2c:39:17:50:f8:10:af:93:
83:d1:1d:93:25:78:5b:34:0a:b1:07:db:b2:52:a5:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:C6:34:A5:33:16:EC:69:5E:3C:15:16:34:46:5B:78:6D:18:C6
X509v3 Authority Key Identifier:
keyid:97:C9:26:99:8E:26:E2:83:FD:02:20:F5:9F:4B:06:73:7B:FF:36:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8kmmY4m4oP9AiD1n0sGc3v_NmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/pTnGNKUzFuxpXjwVFjRGW3htGMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/l8kmmY4m4oP9AiD1n0sGc3v_NmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.150.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5f:93:a6:08:3b:87:5b:29:85:2a:1c:e8:1d:f2:12:02:6c:
c8:9e:ef:bf:8d:46:62:dd:24:f8:0e:c6:52:f0:3e:61:09:d9:
21:83:d8:9a:a4:bb:30:c3:1d:75:cb:44:29:59:2e:06:c2:0d:
9f:bf:45:92:34:ad:9f:a9:0a:ac:25:db:e8:93:d0:ff:35:aa:
53:8d:97:b1:f3:e3:d4:1a:3b:01:a7:27:4b:dc:e5:41:6d:19:
1d:72:ef:8b:ed:78:10:e8:0c:58:d7:e0:8b:3f:a3:13:52:2f:
11:4b:83:3f:a5:48:73:b6:cd:b8:eb:8a:8d:de:36:75:1b:39:
3c:9e:2d:aa:59:a8:3f:5a:3e:7a:c8:eb:99:cd:7e:5f:0a:84:
f3:e3:f9:41:dd:de:6d:8c:bb:1c:51:20:c1:eb:03:bc:25:95:
37:ec:dc:44:34:b8:18:6d:8d:32:a2:ef:52:23:a4:34:0c:42:
5a:fa:1f:d8:82:62:1b:49:3f:0b:af:5d:bb:88:ce:5a:62:6d:
95:7a:a5:df:19:39:95:fc:48:0d:7f:5a:e4:95:f7:9c:bd:43:
c1:70:65:ab:94:02:5a:68:4e:72:88:ca:7f:e4:fe:c3:6c:0c:
8f:81:29:f6:bd:bd:a5:84:7f:f1:32:82:3b:0c:a0:32:3c:17:
93:4a:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net