Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/9BAmmcPXqGrvwNBa2UaFJhuDY7s.roa
File: 9BAmmcPXqGrvwNBa2UaFJhuDY7s.roa (raw, json)
Hash identifier: YPAUQ6nC25LlC1D4lVnLVgPp4LWlpsCBf2FK86NZyoE=
Subject key identifier: F4:10:26:99:C3:D7:A8:6A:EF:C0:D0:5A:D9:46:85:26:1B:83:63:BB
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0453F71D
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/9BAmmcPXqGrvwNBa2UaFJhuDY7s.roa
Signing time: Wed 11 May 2022 06:17:02 +0000
ROA not before: Wed 11 May 2022 06:17:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.26.0/23 maxlen: 24
82.118.28.0/22 maxlen: 24
82.118.25.0/24 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
92.114.4.0/24 maxlen: 24
212.2.236.0/22 maxlen: 24
45.80.4.0/22 maxlen: 24
45.132.96.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72611613 (0x453f71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: May 11 06:17:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4102699c3d7a86aefc0d05ad94685261b8363bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:30:38:54:00:70:96:76:96:b6:64:56:0a:
89:ff:9a:fe:9b:be:56:13:d9:a1:5c:03:d5:b0:32:
82:8c:e4:05:53:d4:3e:cd:b6:76:3c:d4:6b:ce:4a:
74:cf:48:66:ce:ff:8b:3d:8a:9d:6e:0d:f4:d5:8e:
e1:07:f9:04:69:a8:7c:d6:7e:5b:68:be:22:b8:b1:
70:b9:78:04:d4:f4:2d:90:c4:7a:18:93:38:86:8f:
6c:dc:07:d6:2a:4e:27:35:df:9c:df:5c:8e:55:24:
cb:15:1c:f1:b2:d3:7e:34:8b:73:96:ee:62:7c:3d:
66:be:fe:72:63:df:55:91:27:c3:fe:c5:c3:23:88:
51:9d:bd:2b:34:f1:bb:61:ee:0d:8a:7f:83:cd:32:
9c:f6:25:24:9c:33:51:3e:42:cc:66:14:88:ec:d9:
4e:0e:32:12:3c:c6:b1:a1:4d:5b:8b:cf:02:85:be:
5e:c4:61:63:69:92:fe:a9:92:85:eb:76:e9:25:df:
94:7c:0d:ec:41:47:3a:59:7b:36:e3:83:2e:5c:23:
5b:3a:4f:10:94:29:1b:74:d2:26:0d:a3:b9:cb:08:
c7:a4:cb:b7:7e:50:70:99:e7:73:7b:95:85:4d:79:
c4:93:22:e6:19:61:d9:ad:23:20:a2:eb:c3:b6:11:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:26:99:C3:D7:A8:6A:EF:C0:D0:5A:D9:46:85:26:1B:83:63:BB
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/9BAmmcPXqGrvwNBa2UaFJhuDY7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.132.96.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0-82.118.31.255
92.114.4.0/24
141.98.74.0/23
212.2.236.0/22
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
91:66:c8:25:91:ea:fb:28:6a:ca:6d:43:1e:4d:48:7f:b2:dc:
ae:63:c4:c1:d3:64:03:0e:af:6f:1d:21:54:da:05:7b:68:cf:
2b:6d:d2:7d:38:06:2f:b7:82:81:21:05:c1:16:66:32:70:e2:
99:77:08:38:1e:6d:5f:8a:a5:b6:98:fd:93:07:74:f6:75:1e:
52:3f:21:2a:31:d0:96:d5:f5:21:e5:b9:30:c7:e7:21:87:45:
d2:27:c7:14:eb:fb:3a:35:43:1b:21:59:34:98:e6:9a:62:5e:
6a:0b:56:ae:06:a2:39:90:ea:4c:0b:e3:4f:54:37:1a:05:7a:
61:33:7f:ee:9f:e2:09:e7:d4:7c:3a:d5:fb:f4:0a:1e:82:56:
d2:b5:be:b9:a0:df:5a:02:f4:3d:e1:78:0f:16:53:67:12:bf:
6a:ae:ed:35:b8:ab:20:95:fa:26:0c:6b:1f:ac:50:73:0d:9c:
e6:21:ed:15:f4:d7:2b:56:9f:9f:48:1c:fa:25:2b:58:11:9f:
ec:70:c9:81:87:a2:3a:0c:49:82:c6:97:bd:57:f8:53:90:85:
e4:b6:dc:52:b1:d2:9b:28:ab:a0:60:5c:2e:62:f2:1c:02:5a:
87:b2:71:17:14:ca:34:dd:32:bd:0b:43:a5:ed:f9:e4:5c:1d:
8d:4a:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org