Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/_gxMPsxpfCNVo6y-Yd-yr7_WOqU.roa
File: _gxMPsxpfCNVo6y-Yd-yr7_WOqU.roa (raw, json)
Hash identifier: 8zImjy5+B983cS8+5mcqch6RP/+cJQqGjJ7D48PkPZE=
Subject key identifier: FE:0C:4C:3E:CC:69:7C:23:55:A3:AC:BE:61:DF:B2:AF:BF:D6:3A:A5
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 018606B7FA5C060BD12251D416633AD22240
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/_gxMPsxpfCNVo6y-Yd-yr7_WOqU.roa
Signing time: Tue 31 Jan 2023 07:26:05 +0000
ROA not before: Tue 31 Jan 2023 07:26:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15517
IP address blocks: 80.238.136.0/24 maxlen: 24
80.238.134.0/24 maxlen: 24
80.238.139.0/24 maxlen: 24
80.238.144.0/20 maxlen: 20
80.238.140.0/22 maxlen: 22
80.238.160.0/20 maxlen: 20
45.85.92.0/22 maxlen: 22
80.238.176.0/20 maxlen: 20
80.238.129.0/24 maxlen: 24
80.238.128.0/17 maxlen: 17
80.238.130.0/24 maxlen: 24
62.65.128.0/19 maxlen: 19
62.65.137.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.143.0/24 maxlen: 24
62.65.142.0/24 maxlen: 24
62.65.141.0/24 maxlen: 24
62.65.158.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
80.238.192.0/21 maxlen: 21
80.238.200.0/22 maxlen: 22
80.238.208.0/21 maxlen: 21
80.238.216.0/22 maxlen: 22
80.238.225.0/24 maxlen: 24
80.238.223.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
94.78.0.0/18 maxlen: 18
94.78.2.0/24 maxlen: 24
2a01:330::/32 maxlen: 32
2a01:330::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:b7:fa:5c:06:0b:d1:22:51:d4:16:63:3a:d2:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Jan 31 07:26:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0c4c3ecc697c2355a3acbe61dfb2afbfd63aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:b3:2b:91:d2:07:b2:3f:1f:1e:00:ff:1b:
1b:4f:5b:7e:ea:95:85:99:cc:7a:73:9d:e8:a8:10:
fd:5d:b2:25:7a:70:02:6e:f5:fe:41:85:f7:82:5b:
17:9c:9a:96:cf:4f:13:6c:05:03:f9:65:35:b4:0d:
02:e6:93:c9:c6:bd:18:b2:18:cb:5d:a2:83:27:7e:
b0:16:7b:30:cd:9f:4e:0b:a4:1b:c5:87:e0:fd:79:
68:ef:4d:a6:87:94:0b:7d:fb:5d:f4:0c:3f:ec:2c:
7c:be:eb:49:8f:30:44:59:bb:89:3e:76:fb:a3:1c:
4a:1e:9c:fa:0a:85:b0:d6:85:63:93:1d:95:51:cb:
4f:f1:c7:b7:45:92:8c:0a:67:2b:1c:6f:c9:cd:24:
dd:9e:bd:88:fc:84:25:a7:c1:4d:ab:85:1e:40:1e:
e8:a7:8b:52:82:fc:d0:cf:8c:50:70:8a:14:ea:da:
14:f7:74:26:6b:e2:cc:43:1a:7f:6c:c2:4f:9d:d5:
4a:a9:e3:05:e5:e2:9d:e0:15:91:f4:89:17:7c:cd:
c6:a7:65:be:8e:53:d3:e7:68:22:6d:d4:07:ea:84:
bb:d4:69:ba:ee:44:bf:df:ff:ec:e0:b8:fb:51:b8:
ff:6a:d0:6e:57:d1:23:73:b8:97:bd:29:1c:0f:08:
38:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0C:4C:3E:CC:69:7C:23:55:A3:AC:BE:61:DF:B2:AF:BF:D6:3A:A5
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/_gxMPsxpfCNVo6y-Yd-yr7_WOqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.92.0/22
62.65.128.0/19
80.238.128.0/17
94.78.0.0/18
IPv6:
2a01:330::/29
Signature Algorithm: sha256WithRSAEncryption
61:02:e8:82:19:1d:d2:5d:bd:07:91:85:7e:c3:c9:56:02:af:
34:88:44:f1:68:d2:5c:8d:69:c9:c7:5e:4f:ea:83:eb:8d:0f:
b4:5f:f2:8d:ee:ec:85:22:a0:1e:0e:48:ff:2c:e5:c6:1e:4b:
aa:e7:d4:da:c7:68:51:3f:c6:82:df:7b:73:d7:31:b8:a8:af:
89:7f:8b:3d:7b:71:76:3c:f9:58:d4:90:ae:3e:1e:fb:dd:5f:
43:96:d2:73:05:6f:9a:e3:02:4a:63:c1:8f:32:c3:10:a3:8a:
31:a0:e3:fb:37:42:49:dd:16:0d:e7:74:17:2b:84:64:d1:95:
2b:eb:a6:83:fc:f4:28:2a:a0:8d:d8:c8:e6:c2:2c:97:ae:34:
c8:67:52:9a:47:18:fc:04:d8:ae:0d:42:94:0a:a0:a6:60:a1:
bf:66:64:bc:f7:74:c5:6b:0f:c0:50:59:58:97:fb:ae:42:4a:
9b:4b:88:70:81:93:20:1c:0f:be:a4:54:78:f1:e1:e1:e7:08:
5b:f7:2c:02:2b:8d:73:89:12:c0:c1:0e:de:e6:62:85:d2:7a:
24:b0:78:e0:6d:76:46:ce:8e:a2:76:b2:90:15:d2:c0:ff:61:
1b:9b:5c:40:78:82:32:52:52:d5:94:c4:88:bd:d9:be:bc:4b:
e5:0b:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:17 2023 by rpki-client on console-ams.rpki-client.org