Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/EroysuBNj85QuTOxN-JlYB7MlRc.roa
File: EroysuBNj85QuTOxN-JlYB7MlRc.roa (raw, json)
Hash identifier: dtXK+AXPmDL2iY5sVpe5i+GFafZjYtabH1bUtbwrr1E=
Subject key identifier: 12:BA:32:B2:E0:4D:8F:CE:50:B9:33:B1:37:E2:65:60:1E:CC:95:17
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01873C54AB10A03FECB7CA9A6B9D3B4849DA
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/EroysuBNj85QuTOxN-JlYB7MlRc.roa
Signing time: Sat 01 Apr 2023 10:19:54 +0000
ROA not before: Sat 01 Apr 2023 10:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.28.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.105.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
212.2.239.0/24 maxlen: 24
45.80.4.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:54:ab:10:a0:3f:ec:b7:ca:9a:6b:9d:3b:48:49:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 1 10:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ba32b2e04d8fce50b933b137e265601ecc9517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:ae:05:15:fc:8f:dd:13:40:d7:c5:1a:18:
11:44:38:32:31:61:ce:03:dd:5e:02:d6:fd:ec:03:
bb:29:5f:40:3f:88:80:cd:9b:07:b0:b7:65:a0:82:
44:a1:94:49:7d:3e:92:ce:ba:f8:79:ce:b4:32:d5:
9d:b5:97:2b:9b:b4:1f:14:7b:33:c4:ea:42:1f:61:
60:36:87:bb:3d:a6:cf:c7:6e:3b:44:28:a3:60:0f:
18:26:3b:73:7a:99:81:4b:05:0a:4a:51:b6:0d:60:
97:c3:06:49:d0:1c:15:04:28:06:fa:19:95:63:de:
cf:2a:b3:76:25:fe:c7:e7:16:07:a3:f6:79:7c:c5:
43:ad:f0:ff:06:b8:e3:ff:52:7e:5b:7f:c2:af:5a:
37:05:85:49:aa:e1:5f:64:fa:b3:6a:6f:f0:28:e8:
e4:64:ab:82:74:c4:a6:ba:dc:56:c1:0e:07:30:09:
b1:6b:55:9c:16:f8:32:48:4d:e2:f9:da:38:4b:2b:
46:51:9c:b8:1d:67:fc:d6:44:d2:67:34:d9:1b:ea:
ca:c1:ed:86:96:8c:b8:fd:64:63:57:c0:f1:29:40:
14:8d:7a:e8:2d:e9:60:13:02:43:13:c5:b2:e4:35:
bd:cb:05:e0:6f:52:2f:32:5a:fa:89:72:86:c7:5f:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:32:B2:E0:4D:8F:CE:50:B9:33:B1:37:E2:65:60:1E:CC:95:17
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/EroysuBNj85QuTOxN-JlYB7MlRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.146.105.0-45.146.106.255
82.118.28.0/22
141.98.72.0/24
141.98.74.0/23
212.2.239.0/24
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:48:02:6b:c6:ba:fd:df:43:5e:4c:50:e9:bf:3f:4e:fe:ff:
ed:a5:d7:d0:7b:c3:34:16:77:cc:e4:78:7c:57:29:d1:4e:39:
31:e0:3d:7f:eb:e6:54:42:fc:cd:43:ff:e0:57:cc:6c:ca:04:
aa:14:8f:72:4a:8b:e0:85:93:a5:e5:51:d5:5e:bc:99:ec:99:
e5:94:ee:6b:35:1f:e9:da:60:7f:29:50:0b:e5:13:ed:0f:18:
ca:b9:d3:96:db:44:09:f0:6e:4b:a3:b6:5b:e5:e7:24:16:ff:
e3:50:0b:92:65:b1:dc:22:ed:27:40:07:c2:45:3e:1a:c8:82:
d2:75:5b:d6:ae:b9:9b:1d:fe:72:2c:ad:07:23:d1:8f:58:a6:
73:d1:d2:96:d1:66:4e:33:e2:b9:7c:25:62:24:52:0b:ca:d1:
af:56:92:1c:30:6b:7d:b4:38:2a:bb:ce:86:37:d8:6b:89:c3:
f8:32:78:af:74:01:af:3a:9f:06:14:b0:48:53:c0:61:f8:18:
02:97:8d:64:05:43:02:0a:85:4a:36:aa:d8:62:cd:05:66:5d:
a4:20:67:bb:52:99:8d:4e:07:f5:df:78:e5:01:1d:5a:1d:04:
c6:65:b8:67:7b:6b:98:33:af:f3:9d:92:53:4d:5a:d3:fa:c4:
78:a0:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org