Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/hJauAdGtxvNbFHIIUuj3hOgxDtc.roa
File: hJauAdGtxvNbFHIIUuj3hOgxDtc.roa (raw, json)
Hash identifier: iNIUjrPr9fqwjqQtBNIGPNX3Zzqyj0Wz5gBjyFe+dM0=
Subject key identifier: 84:96:AE:01:D1:AD:C6:F3:5B:14:72:08:52:E8:F7:84:E8:31:0E:D7
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 0DA1550C
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/hJauAdGtxvNbFHIIUuj3hOgxDtc.roa
Signing time: Sat 01 Jan 2022 08:59:29 +0000
ROA not before: Sat 01 Jan 2022 08:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 275
IP address blocks: 185.84.19.224/27 maxlen: 27
213.130.47.16/28 maxlen: 28
5.158.213.64/31 maxlen: 31
2001:728:0:5000::1532/127 maxlen: 127
2001:728:0:7000::/64 maxlen: 64
2001:728:401:21::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228676876 (0xda1550c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 08:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8496ae01d1adc6f35b14720852e8f784e8310ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:35:27:a3:e8:34:cb:7a:c5:52:5b:37:19:
7e:08:24:02:63:d1:ba:b4:c5:15:ee:e3:3c:58:c2:
f1:89:44:7e:de:37:fa:0d:d0:f9:f7:6d:93:c9:6b:
6e:b6:ed:9d:77:9f:47:66:fe:a9:dc:51:e7:6e:74:
a7:5f:ed:ea:1f:36:be:a8:88:ef:39:9a:1f:3f:c2:
f2:6e:a6:a7:e1:05:a7:ca:37:26:d1:61:de:9c:9e:
ba:dc:b9:5c:3b:d1:ff:db:92:55:e2:fb:4c:a9:27:
42:12:7d:88:79:b9:3d:a8:d0:d8:c1:2e:9c:63:ce:
d8:b9:74:4a:5f:5f:34:88:22:04:3f:30:60:1c:8e:
3f:7c:eb:6d:88:62:31:ea:33:58:9b:ab:84:b6:9d:
27:ec:86:59:64:15:1c:88:c4:49:14:0f:32:87:e6:
50:70:50:53:be:37:02:80:76:0c:0f:73:d4:94:00:
d0:15:b1:f8:f8:4e:e7:69:d1:28:0c:53:57:89:fe:
1d:b9:20:fc:31:b5:08:0a:64:ac:67:e9:21:92:12:
87:a7:39:72:7a:6a:12:99:5d:b8:39:01:82:07:54:
8b:76:c0:ec:a7:29:1a:64:7d:f1:97:37:ac:ae:41:
7f:de:d0:95:47:f6:40:3e:22:90:c9:e1:18:67:b6:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:AE:01:D1:AD:C6:F3:5B:14:72:08:52:E8:F7:84:E8:31:0E:D7
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/hJauAdGtxvNbFHIIUuj3hOgxDtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.213.64/31
185.84.19.224/27
213.130.47.16/28
IPv6:
2001:728:0:5000:0:0:0:1532/127
2001:728:0:7000::/64
2001:728:401:21::/64
Signature Algorithm: sha256WithRSAEncryption
95:4e:a5:13:dc:3b:37:20:96:30:47:cf:9c:16:ab:da:f2:eb:
ce:7b:53:d7:29:1e:18:54:60:a3:00:4e:a3:ac:6e:02:f9:6b:
c8:20:5a:9e:4f:60:db:c1:84:91:17:fc:cc:b5:e2:0b:b6:31:
34:bb:1d:75:06:e0:13:38:ef:14:b0:b7:46:3a:ea:bd:57:be:
88:45:9a:cf:6a:ac:cf:9d:79:c2:03:60:4a:8d:ac:92:9c:bc:
8b:48:6f:19:84:60:be:af:1c:50:50:6c:29:23:d2:ec:1d:1e:
99:5c:57:61:53:62:86:f6:ee:af:d9:ed:08:f7:45:bc:01:78:
22:38:78:d9:a0:f1:9d:e7:e7:c0:90:b3:7a:a7:51:14:3f:3f:
e7:30:3c:fa:8d:46:e1:da:56:05:20:29:a5:ab:d4:b9:f0:9c:
a1:d0:44:c4:99:b6:f5:29:cc:58:0d:ce:73:50:2b:bc:b2:55:
e3:0f:1f:b0:0e:f4:e7:fb:5f:8e:46:56:3c:98:0c:d4:ac:32:
c3:c2:fe:5b:03:34:8d:86:39:ef:44:26:d8:d9:5a:e3:67:2b:
63:8f:ca:20:64:86:a4:48:a7:25:29:11:41:58:b8:57:40:37:
9c:f5:28:f3:a6:6e:37:20:48:bf:20:1d:6f:7e:50:4d:80:03:
53:32:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org