Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/uO6WGkm9zEmkMLbtUv7ibGamjFk.roa
File: uO6WGkm9zEmkMLbtUv7ibGamjFk.roa (raw, json)
Hash identifier: +RJlWOquS6DVWWBMiJugeeEE86ihfEtn1ID8OrUM93k=
Subject key identifier: B8:EE:96:1A:49:BD:CC:49:A4:30:B6:ED:52:FE:E2:6C:66:A6:8C:59
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 0E955058
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/uO6WGkm9zEmkMLbtUv7ibGamjFk.roa
Signing time: Thu 07 Apr 2022 15:24:06 +0000
ROA not before: Thu 07 Apr 2022 15:24:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210398
IP address blocks: 83.217.238.128/26 maxlen: 26
83.231.149.64/28 maxlen: 28
213.130.49.64/26 maxlen: 26
213.130.47.32/28 maxlen: 28
2001:728:1404::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244666456 (0xe955058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Apr 7 15:24:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8ee961a49bdcc49a430b6ed52fee26c66a68c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:fd:9a:b8:85:a9:d5:f2:6c:38:43:fa:dc:
f9:1a:8d:55:a9:6d:77:55:c4:b8:22:b6:5f:f7:e4:
26:23:00:ce:c8:9a:34:70:25:8c:16:7c:73:ae:d8:
4a:99:ab:01:38:0b:13:b4:e5:79:46:68:33:e9:40:
de:64:52:b7:02:bb:10:fa:fb:92:11:b5:cf:6c:ae:
d2:f2:d6:ff:cd:b8:a0:fc:47:5e:5f:83:0f:8f:b7:
37:c2:38:37:14:c9:5f:06:b3:e8:67:f3:bc:eb:88:
e2:c5:16:94:d7:6b:3d:7e:d0:71:ba:18:99:b1:1b:
19:53:44:12:19:b2:af:16:a9:30:37:79:ae:30:ba:
b3:e6:04:aa:2e:60:a8:7a:bb:8c:6f:87:e3:3f:39:
1e:86:a1:20:5e:19:7e:1a:40:e6:a6:5e:79:38:6c:
1f:01:2c:d5:d1:b5:ff:a1:54:58:ba:e9:d8:f7:96:
b3:0c:4a:c1:7f:7c:0a:a4:85:8d:4e:88:26:1e:e1:
62:53:76:2d:ef:2c:d4:8b:b6:01:e6:80:fb:6f:7a:
7b:5e:f7:39:38:22:71:48:aa:2f:7f:7f:75:5d:bc:
cf:8c:90:9c:92:a6:3a:01:f7:ad:86:6e:7f:1b:f9:
8a:3a:1e:3d:cc:47:df:db:21:0e:96:fb:ea:d6:24:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:96:1A:49:BD:CC:49:A4:30:B6:ED:52:FE:E2:6C:66:A6:8C:59
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/uO6WGkm9zEmkMLbtUv7ibGamjFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.238.128/26
83.231.149.64/28
213.130.47.32/28
213.130.49.64/26
IPv6:
2001:728:1404::/48
Signature Algorithm: sha256WithRSAEncryption
47:17:c5:5c:5e:da:fe:ea:bf:61:13:05:f3:d0:26:8f:98:a7:
66:cd:46:cd:62:3b:2a:ea:fd:bc:a6:34:15:0f:e1:fb:97:e1:
8c:29:60:aa:95:eb:98:71:28:07:66:4d:50:66:f5:45:5b:f7:
86:8e:f5:75:e8:09:88:5a:30:06:04:c2:cd:d9:03:0c:a2:9f:
3b:c4:6c:c3:39:89:75:70:e3:86:c9:6f:04:68:30:79:62:8a:
f2:20:03:2c:02:b7:3d:a2:96:26:a2:22:a7:a3:16:c0:ad:fa:
c5:5a:11:84:4f:f9:6c:ff:18:1a:59:8d:6c:27:63:e4:eb:8f:
01:62:60:b6:eb:db:f8:2e:8c:33:bc:d7:94:10:60:2f:83:46:
3d:0a:83:b6:82:03:6f:80:5f:dc:d4:a3:8e:2b:61:c4:4e:b4:
62:6f:72:ee:56:eb:80:9a:b0:83:da:05:3b:a6:f4:47:64:16:
e8:3f:00:49:7a:66:1f:57:f8:6d:8d:25:a8:b3:7b:6c:ec:da:
3a:3f:29:15:c3:9f:e4:43:b6:9d:8f:42:6b:45:79:7a:50:5d:
d7:41:f2:23:6b:51:2b:17:a2:40:b7:b8:b1:75:00:12:d7:d9:
e0:12:1f:cf:78:ea:58:d8:cc:f2:78:56:19:7b:73:63:18:6d:
b0:7b:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:06 2023 by rpki-client on console-ams.rpki-client.org