Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PR8JkCeGndT0uKq2kCu607ka9CQ.roa
File: PR8JkCeGndT0uKq2kCu607ka9CQ.roa (raw, json)
Hash identifier: T44Ph12i/BYXyJwzOqBuKfXaOXnXRdXyxyqcc//AEmE=
Subject key identifier: 3D:1F:09:90:27:86:9D:D4:F4:B8:AA:B6:90:2B:BA:D3:B9:1A:F4:24
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0184C88DB9BC3B60799CA5BA4E9F1745B17C
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PR8JkCeGndT0uKq2kCu607ka9CQ.roa
Signing time: Wed 30 Nov 2022 12:40:42 +0000
ROA not before: Wed 30 Nov 2022 12:40:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 82.118.25.0/24 maxlen: 24
213.225.237.0/24 maxlen: 24
45.80.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:8d:b9:bc:3b:60:79:9c:a5:ba:4e:9f:17:45:b1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Nov 30 12:40:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d1f099027869dd4f4b8aab6902bbad3b91af424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:0e:e1:6c:9d:bf:f3:df:3c:9b:a5:00:69:
70:21:5c:c8:94:9e:3e:e7:15:73:dd:c9:bd:f8:13:
9a:18:dd:ce:f5:a1:9b:99:99:d7:e0:e4:57:dd:8f:
d6:33:d6:4d:64:20:99:69:91:cd:1c:e2:aa:1d:a6:
7c:14:d3:e9:6f:8d:71:9b:71:eb:90:fd:c0:de:38:
6f:10:37:40:fa:d3:75:17:99:4b:36:ad:b6:48:82:
38:6e:70:f0:08:66:45:d3:0a:b4:fa:5d:69:b1:5d:
65:1b:0c:d3:6d:8d:93:be:4c:8b:6e:91:0e:8a:46:
31:59:d0:9c:0a:20:f4:a9:2f:48:4f:ff:c9:5b:3e:
6d:0e:dc:d4:a2:2d:52:76:5e:fb:d3:b2:c5:fa:58:
85:66:42:d1:48:b3:8f:6f:61:2a:4d:bf:bc:3e:c2:
da:1a:45:2f:49:8a:5f:b8:90:6b:88:4d:ea:a7:0a:
e6:7e:b5:27:c3:d8:7c:45:67:1b:8f:ff:89:24:93:
56:40:d0:f3:10:96:91:27:f9:bd:35:9e:88:62:ec:
11:11:f6:30:e2:99:e2:cc:f9:e7:ea:32:61:77:7e:
7f:46:96:7f:e4:17:a5:d7:fc:5a:46:66:c6:8b:16:
fe:81:66:83:c3:19:d2:48:70:9a:6a:11:92:ce:df:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1F:09:90:27:86:9D:D4:F4:B8:AA:B6:90:2B:BA:D3:B9:1A:F4:24
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PR8JkCeGndT0uKq2kCu607ka9CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.7.0/24
82.118.25.0/24
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5e:fc:3b:20:6a:6b:ce:6e:24:84:3a:f0:1a:c9:02:cd:89:
8c:bf:88:47:95:b2:fe:b2:10:95:ed:5f:d0:96:86:64:82:83:
0f:9e:f4:de:2e:32:fc:fc:0d:09:b6:58:8a:47:2a:cb:cd:ed:
aa:25:2c:dc:89:40:29:26:ef:f7:ce:f2:a6:71:a9:9b:9e:66:
e1:3d:30:ed:c6:8c:88:79:44:56:96:bf:72:be:a6:5b:a9:7d:
22:4c:6f:f6:0b:80:57:b7:dc:bb:38:d3:88:fd:8e:49:77:e1:
00:2a:dc:ec:4d:1a:54:2f:d1:9f:13:fd:7f:6a:ad:07:0f:03:
e0:8e:47:f3:4b:0c:83:1e:53:7a:aa:30:f3:16:25:c6:da:2f:
04:53:fb:8f:75:ea:b5:6a:de:ae:b5:6e:64:58:19:c3:3d:7b:
00:0b:ec:b3:3a:b8:d1:37:94:0c:8f:08:02:53:70:94:4c:97:
f1:33:da:d8:f8:1c:40:b8:d0:66:4e:cf:66:2f:9f:3f:fc:75:
1e:e3:d8:27:62:4e:9c:a8:3c:50:e6:37:e6:a8:76:94:e5:35:
73:af:15:09:17:70:b5:b8:50:ef:77:c2:e7:71:0c:cf:1e:9c:
44:39:c5:8d:bb:41:38:3a:59:31:4e:97:fe:27:68:c1:35:1e:
34:fb:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org