Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/5IZyDob0MurAns2VwNcsUNm7W_c.roa
File: 5IZyDob0MurAns2VwNcsUNm7W_c.roa (raw, json)
Hash identifier: DiHrzsyTlevBhN0Zwy88fILXkVQugUhVILaX1A9ALsA=
Subject key identifier: E4:86:72:0E:86:F4:32:EA:C0:9E:CD:95:C0:D7:2C:50:D9:BB:5B:F7
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 018D78C951B68CB5973210BEB62B40712721
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/5IZyDob0MurAns2VwNcsUNm7W_c.roa
Signing time: Mon 05 Feb 2024 10:21:15 +0000
ROA not before: Mon 05 Feb 2024 10:21:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9145
IP address blocks: 194.0.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:c9:51:b6:8c:b5:97:32:10:be:b6:2b:40:71:27:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Feb 5 10:21:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e486720e86f432eac09ecd95c0d72c50d9bb5bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:b2:2b:4e:9e:95:07:75:8f:b4:dd:b8:10:
03:d1:e1:8b:22:83:1f:44:b7:eb:cd:9f:9a:7e:02:
d4:a6:59:34:8f:af:fb:18:77:80:c9:54:0d:bf:c9:
b6:90:78:e1:73:55:74:22:17:8f:1b:ef:44:bb:39:
de:68:1e:fe:de:97:dc:16:0b:72:0b:fe:5d:59:b8:
4b:c7:f1:9c:cf:3b:4d:97:26:6d:aa:73:9d:18:fc:
3f:1c:54:bb:02:03:1e:75:1e:5b:5b:8c:95:da:1c:
54:b5:26:c0:c6:ae:6a:73:ad:47:d1:04:10:db:39:
1c:cc:50:9b:15:0d:8c:f1:80:e8:9f:25:d5:f6:6e:
0f:28:4c:de:bb:46:2d:7a:4a:a1:61:b5:46:80:46:
3e:01:a1:29:5e:73:25:b6:96:73:72:cb:9c:8d:00:
7d:8f:5d:82:71:b7:66:57:5b:ce:d3:1c:6f:cf:cd:
0d:d3:a1:39:7b:98:df:8a:28:36:e4:a5:e5:a9:f2:
bc:76:a3:8e:b6:7a:06:86:e1:91:9d:f9:a1:f1:ee:
10:e0:16:e3:11:96:66:11:d2:36:95:27:83:7e:9d:
72:81:ca:f8:19:ca:ba:d3:c7:7c:41:60:e6:e0:d7:
e1:bf:2b:a6:dc:b4:66:a9:25:14:3d:c4:fc:73:c9:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:86:72:0E:86:F4:32:EA:C0:9E:CD:95:C0:D7:2C:50:D9:BB:5B:F7
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/5IZyDob0MurAns2VwNcsUNm7W_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.216.0/24
Signature Algorithm: sha256WithRSAEncryption
68:89:44:8b:28:cd:ca:5e:d4:9f:71:ae:d7:26:8e:53:cb:b8:
b6:ae:2c:2c:52:4b:f6:60:ee:6c:33:25:a9:9f:5c:19:41:49:
70:5a:6a:83:00:9e:31:b6:91:71:b3:37:6d:88:3a:23:df:5b:
1a:b6:73:ac:f3:05:df:57:e3:91:4c:f8:17:af:dc:af:04:c9:
63:46:f4:43:ec:c2:64:2b:9b:00:44:1e:78:15:ed:ea:3c:96:
ac:4f:70:34:5d:e2:b7:1c:78:1b:9d:31:11:58:24:cb:5c:c8:
ef:b9:4c:e5:48:e7:c0:96:97:d9:3a:54:19:f0:41:42:ec:8d:
e5:7d:2c:eb:f6:b0:6b:87:3c:c3:5e:8c:2f:ac:67:9f:f2:77:
ca:7f:56:1f:58:bf:0f:22:09:c7:28:b4:90:97:3b:b6:6d:df:
90:3d:f1:c4:52:af:91:d9:0d:d0:20:ca:cc:bb:09:25:a8:f8:
8b:9b:bf:c8:0c:cb:53:f3:8e:f2:4b:71:81:31:83:af:0c:ef:
59:cd:89:50:62:4a:8d:99:e9:66:85:4d:34:04:1a:6c:50:6c:
ed:ed:06:92:0c:f6:19:2e:df:b4:c9:c2:cc:bb:00:c1:78:8a:
09:87:0e:4b:9e:4c:9c:e3:d5:de:09:47:ce:a5:ad:ba:d8:94:
2c:ab:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:23 2024 by rpki-client on console.sobornost.net