Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/4_GUOwl_gKPngnEnfDMdomXQ3Ig.roa
File: 4_GUOwl_gKPngnEnfDMdomXQ3Ig.roa (raw, json)
Hash identifier: oXBwdn/TxvpPdBtHFFVuhOBgHCaFryMkvevuu011U14=
Subject key identifier: E3:F1:94:3B:09:7F:80:A3:E7:82:71:27:7C:33:1D:A2:65:D0:DC:88
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 0185A0EED40BBC88D19FA89842D658E70B3B
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/4_GUOwl_gKPngnEnfDMdomXQ3Ig.roa
Signing time: Wed 11 Jan 2023 13:04:44 +0000
ROA not before: Wed 11 Jan 2023 13:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15517
IP address blocks: 80.238.136.0/24 maxlen: 24
80.238.134.0/24 maxlen: 24
80.238.139.0/24 maxlen: 24
80.238.144.0/20 maxlen: 20
80.238.140.0/22 maxlen: 22
80.238.160.0/20 maxlen: 20
45.85.92.0/22 maxlen: 22
80.238.176.0/20 maxlen: 20
80.238.129.0/24 maxlen: 24
80.238.128.0/17 maxlen: 17
80.238.130.0/24 maxlen: 24
62.65.128.0/19 maxlen: 19
62.65.137.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.143.0/24 maxlen: 24
62.65.142.0/24 maxlen: 24
62.65.141.0/24 maxlen: 24
62.65.158.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
80.238.192.0/21 maxlen: 21
80.238.200.0/22 maxlen: 22
80.238.208.0/21 maxlen: 21
80.238.216.0/23 maxlen: 23
80.238.216.0/22 maxlen: 22
80.238.218.0/24 maxlen: 24
80.238.225.0/24 maxlen: 24
80.238.223.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
94.78.0.0/18 maxlen: 18
94.78.2.0/24 maxlen: 24
2a01:330::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:ee:d4:0b:bc:88:d1:9f:a8:98:42:d6:58:e7:0b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Jan 11 13:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f1943b097f80a3e78271277c331da265d0dc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:f8:4a:05:ca:5e:e0:08:bc:75:d9:76:30:
cd:c8:4c:e2:72:f2:5e:a9:c1:b1:e9:d7:f0:74:c9:
89:9b:9c:75:0f:d3:10:86:93:a9:aa:e8:73:10:45:
32:a0:2f:c0:59:bd:e1:5a:8e:73:64:7b:82:1b:cc:
1c:a2:9f:3c:96:d6:53:18:67:38:40:f1:9a:58:39:
d8:2b:ad:08:48:ce:20:9c:8f:df:fb:04:cc:8d:70:
4a:44:70:2d:83:bf:fb:5b:56:16:6b:53:3e:a9:08:
25:c3:21:7b:ec:c9:a6:ed:3b:b9:e0:6b:ff:7d:bf:
54:e1:0b:00:cf:e4:da:3d:18:dd:9c:d3:f2:75:af:
1a:7f:1f:50:e5:a2:47:e0:09:c8:c9:aa:f1:3f:19:
84:da:f1:29:c9:59:8c:d6:e9:d7:d2:36:57:26:07:
dd:03:76:9d:c1:25:27:86:ac:fd:2d:72:95:da:fe:
7a:39:0e:88:b9:2e:2c:53:df:97:98:a0:2f:4d:73:
fd:ac:a8:c2:d0:72:fa:94:2c:82:07:83:08:4a:05:
76:ba:dd:a4:08:f7:9f:33:16:cb:22:5b:78:fd:0d:
9d:58:d2:90:4c:8f:9a:2d:7e:c3:7b:ce:53:27:3b:
31:30:45:91:8d:d8:64:8a:45:e5:27:09:7b:24:bd:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:94:3B:09:7F:80:A3:E7:82:71:27:7C:33:1D:A2:65:D0:DC:88
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/4_GUOwl_gKPngnEnfDMdomXQ3Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.92.0/22
62.65.128.0/19
80.238.128.0/17
94.78.0.0/18
IPv6:
2a01:330::/32
Signature Algorithm: sha256WithRSAEncryption
44:20:d3:a0:c9:0f:23:a8:be:ed:8c:ac:9e:f1:3f:96:37:9e:
80:a4:68:e9:aa:56:0a:7e:55:83:63:69:43:e6:b3:26:59:6e:
77:9f:6c:4d:60:dc:b5:e2:5b:b3:9d:98:28:d0:c6:ca:a9:4f:
1e:18:25:54:8b:2b:9e:27:49:ad:8f:7b:40:aa:57:0b:45:26:
f9:f2:5d:46:8b:25:c3:d6:d5:a9:e7:9a:c4:82:17:e3:37:d3:
d8:dd:f9:ed:e5:be:f1:c5:f2:f9:52:56:74:cb:ea:64:51:e3:
c6:62:f7:4e:bf:3b:36:36:75:99:4c:48:d2:52:24:13:c9:00:
a4:c4:91:7f:dd:c8:73:61:18:5f:dc:0c:c4:bd:cf:5b:94:1a:
ac:f1:93:e4:18:80:35:ae:ac:dd:cd:13:d2:75:70:94:9d:46:
64:29:f2:5a:62:a4:4b:c8:9c:b4:be:24:28:67:93:a0:26:d9:
c6:d7:cc:12:df:e4:94:9d:4c:6d:a7:a6:5f:27:c2:c9:31:e1:
dc:56:f3:0a:74:9d:f6:7c:0a:85:f5:45:d1:f5:19:99:40:18:
44:b3:cf:69:d2:eb:74:bc:fa:41:6e:48:55:68:0d:78:00:a4:
04:b4:e1:05:de:2d:1c:44:86:93:52:5d:94:d6:35:29:1a:36:
1b:49:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:55 2024 by rpki-client on console-ams.rpki-client.org