Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/REO2KnNn1_gCOUMQMqqxSV1Xl-8.roa
File: REO2KnNn1_gCOUMQMqqxSV1Xl-8.roa (raw, json)
Hash identifier: 6eduvKfJrTRnYztHBetf6yX7h3JBH57rDeu9NkHv62k=
Subject key identifier: 44:43:B6:2A:73:67:D7:F8:02:39:43:10:32:AA:B1:49:5D:57:97:EF
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 041A94F8
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/REO2KnNn1_gCOUMQMqqxSV1Xl-8.roa
Signing time: Tue 19 Apr 2022 10:52:59 +0000
ROA not before: Tue 19 Apr 2022 10:52:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.26.0/23 maxlen: 24
82.118.28.0/22 maxlen: 24
82.118.25.0/24 maxlen: 24
213.225.236.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
213.225.237.0/24 maxlen: 24
92.114.4.0/24 maxlen: 24
212.2.236.0/22 maxlen: 24
45.80.4.0/22 maxlen: 24
45.132.96.0/22 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
141.98.72.0/22 maxlen: 24
141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68850936 (0x41a94f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 19 10:52:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4443b62a7367d7f80239431032aab1495d5797ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:4a:f8:c4:20:fb:5b:0b:9e:ea:26:f9:0d:
3e:8e:78:bb:62:54:32:a5:bf:b5:35:1d:38:31:0d:
a8:6b:13:85:70:ce:23:12:67:9b:16:d0:b1:22:fd:
ac:a8:1d:95:62:42:54:b3:b0:5e:22:00:e0:1c:2e:
ed:f0:3f:e2:8f:b6:d0:c6:f4:05:ba:6c:56:2a:33:
2f:c3:71:11:ea:e8:e4:41:34:45:72:bc:6f:5c:53:
43:c6:38:08:4f:4e:8a:b8:df:db:91:29:0d:db:22:
4b:5e:3f:49:90:eb:ee:0d:e5:71:13:98:fa:5f:48:
e8:87:b2:03:8a:ff:0f:b0:8f:0a:26:31:66:bc:24:
9a:b6:18:40:60:b1:55:52:e0:7d:5e:d0:2b:38:a6:
23:b6:33:33:45:76:a6:a8:6e:2a:2b:0c:33:8c:a5:
b0:2b:3d:b3:8a:55:8f:68:19:7d:b4:3e:14:c9:07:
fc:29:79:da:7e:db:53:34:53:31:d3:bb:9b:e0:41:
08:d3:0c:e0:94:ad:c4:55:fe:77:c0:29:fb:4e:0e:
ec:e5:bb:58:32:b8:01:4a:23:d6:21:13:f3:3e:5a:
70:07:01:41:bd:6f:74:33:84:d1:72:3a:b0:37:2f:
e4:64:9c:5f:8e:f3:d2:3c:30:58:db:00:bf:af:11:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:43:B6:2A:73:67:D7:F8:02:39:43:10:32:AA:B1:49:5D:57:97:EF
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/REO2KnNn1_gCOUMQMqqxSV1Xl-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.132.96.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0-82.118.31.255
92.114.4.0/24
141.98.72.0/22
212.2.236.0/22
213.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
06:14:3e:ac:f2:b3:b0:97:64:d4:92:87:7c:0c:c9:4f:bc:1f:
ef:48:be:ab:5a:a6:34:80:24:c0:7a:06:79:7e:f4:74:dd:7d:
f1:a2:4a:24:59:c2:74:2e:b4:9f:cf:9f:ef:b4:8f:c2:33:f4:
cc:ea:d1:b7:06:9e:90:37:9a:1b:cc:5b:b5:19:55:bb:2a:93:
a4:02:77:f3:7c:36:45:c2:33:68:14:e8:13:44:ac:37:68:22:
9f:6b:1d:d4:d2:87:4b:f2:f5:f0:2f:b5:f6:4c:45:0f:25:0a:
32:eb:7c:93:21:a3:64:78:b8:7f:5e:6a:68:e0:47:c5:17:b4:
5e:4d:db:bd:78:ff:a0:5a:11:f2:4a:77:02:12:21:b5:84:cd:
88:8c:19:72:8e:19:4f:21:76:c6:36:b0:fa:1a:92:57:0a:62:
f8:ce:f1:d6:e8:b9:06:29:65:73:17:bc:72:08:7a:e6:fc:05:
b9:6d:48:d7:fc:31:ee:56:57:68:ed:de:13:15:57:bc:32:a1:
96:36:b7:bf:40:f2:e2:79:5c:9d:01:6f:15:18:15:55:69:06:
de:ab:3b:f1:70:f0:80:1b:25:28:08:ab:18:dc:04:e5:d2:3d:
4f:08:79:c4:22:39:5d:c5:97:38:fd:d6:44:72:45:69:aa:35:
79:a9:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org