Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/UNVb5_598MVR51Sw9mbLc3zzEd0.roa
File: UNVb5_598MVR51Sw9mbLc3zzEd0.roa (raw, json)
Hash identifier: Rgq7iZjSWKWcApFKG/I3JW4theOXUxiJpE2DDwpJIsQ=
Subject key identifier: 50:D5:5B:E7:FE:7D:F0:C5:51:E7:54:B0:F6:66:CB:73:7C:F3:11:DD
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 0185728C6C1D2888B28F1C2FEAEC9B16BF21
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/UNVb5_598MVR51Sw9mbLc3zzEd0.roa
Signing time: Mon 02 Jan 2023 12:54:43 +0000
ROA not before: Mon 02 Jan 2023 12:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211114
IP address blocks: 45.80.175.0/24 maxlen: 24
185.136.205.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:6c:1d:28:88:b2:8f:1c:2f:ea:ec:9b:16:bf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Jan 2 12:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50d55be7fe7df0c551e754b0f666cb737cf311dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:ae:ea:3d:e4:6f:fe:f7:72:d0:11:14:dc:
67:1b:30:87:91:68:47:d5:7a:bd:6f:e4:9d:57:94:
c3:1c:d3:93:a7:43:ce:72:a6:9a:0f:74:04:3b:8f:
0a:64:c8:f3:a5:7e:fe:38:3a:06:d6:f7:68:d3:ca:
8c:66:65:63:e3:c3:e0:c9:25:ba:2c:67:76:55:a0:
4d:de:1f:54:d6:28:d3:66:35:17:2e:44:0b:ea:f0:
2a:8f:31:9a:4a:1f:27:77:a1:36:c7:e0:47:f8:2b:
0a:eb:ce:a7:0e:d1:d0:46:f8:a7:b5:92:b5:6c:c7:
95:4f:ef:6a:f2:e5:22:4c:32:af:18:8e:16:ee:5d:
7e:58:f5:5b:a7:67:10:da:68:8c:d6:6f:f1:2b:e1:
d5:2c:44:11:2e:ae:24:0b:e8:05:51:9d:fb:05:29:
d9:b7:77:1e:6d:04:28:48:a2:9a:71:94:24:95:bf:
14:68:8c:78:7e:c5:d1:42:82:8a:32:e1:41:44:29:
43:a5:fc:69:a1:05:77:2a:5d:9a:eb:4a:ee:f7:b4:
d9:63:3a:4b:11:69:3a:91:18:5e:29:ef:4b:be:c2:
da:25:dd:71:25:3c:70:a4:09:6c:fa:22:8c:17:fd:
a7:b5:17:42:01:73:44:41:44:ad:b6:6c:4e:dd:0d:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D5:5B:E7:FE:7D:F0:C5:51:E7:54:B0:F6:66:CB:73:7C:F3:11:DD
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/UNVb5_598MVR51Sw9mbLc3zzEd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.175.0/24
185.136.205.0/24
185.136.207.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
38:78:9d:34:37:60:08:60:a6:33:06:d0:8c:96:e8:ee:47:41:
80:15:de:c9:66:d4:f9:00:ab:57:cd:f7:55:8b:f2:ed:52:33:
9b:bb:af:24:0c:0f:89:14:ce:d3:73:7e:44:19:d0:1b:49:9a:
03:af:16:d5:7f:b6:49:65:99:e3:f3:85:47:2d:98:a3:b4:76:
26:c8:d3:0e:fc:cb:ef:c9:be:8d:bb:d0:52:6c:47:82:ae:06:
93:f5:cc:5c:37:77:1a:75:11:25:3b:da:68:11:be:99:f5:77:
98:8b:e7:6b:db:f9:ad:12:5f:ad:d2:f6:7c:06:dc:2d:56:6b:
99:23:5c:6b:c2:5a:78:76:e1:3a:f9:2c:dd:b8:a0:93:50:c3:
fd:80:99:a3:1b:7e:c1:ce:c5:c8:e8:09:f8:da:46:d5:22:01:
04:75:3d:7e:15:67:08:42:e8:4d:28:99:70:e5:13:00:1d:46:
b1:f0:ba:9d:bd:69:ea:b9:0f:7f:75:a9:5c:13:4d:cc:31:1a:
a1:a8:27:92:57:2e:05:e4:08:1e:4f:53:cc:8e:42:c5:64:84:
24:33:1d:77:3b:96:94:7b:12:5f:b6:88:e8:0f:b2:2e:e0:25:
4c:a5:56:b0:94:b1:5a:76:9c:f5:60:05:39:3c:c1:18:c2:fb:
21:a6:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org