Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/n5bWAPFJxO3--3SdxD2k0g0wNAI.roa
File: n5bWAPFJxO3--3SdxD2k0g0wNAI.roa (raw, json)
Hash identifier: VBnkOgzrjXndKYtNJ2D918i/JsVKi8iSwF15nUXhSVY=
Subject key identifier: 9F:96:D6:00:F1:49:C4:ED:FE:FB:74:9D:C4:3D:A4:D2:0D:30:34:02
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018342B44EA6ADC7048656CCB4AFC3EDB73F
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/n5bWAPFJxO3--3SdxD2k0g0wNAI.roa
Signing time: Thu 15 Sep 2022 19:50:56 +0000
ROA not before: Thu 15 Sep 2022 19:50:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.25.0/24 maxlen: 24
82.118.28.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
45.80.4.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:b4:4e:a6:ad:c7:04:86:56:cc:b4:af:c3:ed:b7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Sep 15 19:50:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f96d600f149c4edfefb749dc43da4d20d303402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:43:92:b0:34:44:5b:1c:d2:d5:cb:58:21:
3e:a2:ce:08:c0:59:72:5a:5e:6f:ae:46:9e:2e:58:
4a:3d:69:e5:54:29:2b:13:9b:56:84:7d:1e:19:cf:
f4:6a:da:b3:81:80:b7:a0:d7:f0:2f:05:a8:5d:e7:
6d:31:0b:03:f0:d6:3d:c1:6a:2c:7b:a0:bd:1f:da:
06:45:81:06:e1:07:2d:7c:4f:83:da:17:8f:14:83:
06:42:e6:86:1e:2e:13:13:c7:3e:2d:86:94:66:61:
79:f0:c1:48:7d:35:63:94:b5:ff:16:f7:fc:90:02:
cd:1b:71:e9:e3:a4:15:37:c0:73:71:15:74:dc:7d:
92:c9:b0:a0:f4:1f:e8:89:31:f6:e1:33:8a:8b:68:
67:12:10:aa:6d:ca:36:ee:ff:25:67:83:a5:5a:94:
0d:76:3f:79:07:f6:df:ff:52:0e:d4:b7:ce:a3:39:
d5:cb:79:b6:4e:2c:a2:3b:85:b9:2c:70:d3:a0:14:
fb:8f:d3:2b:b0:4f:cf:00:68:ca:8b:4d:91:2f:4e:
e9:55:0b:a6:a6:a8:b7:f3:61:18:df:c5:bf:21:21:
60:9e:6c:20:8a:a4:3f:fa:12:82:9c:af:3a:0c:71:
67:43:44:0a:00:68:39:69:f0:78:f9:22:84:cc:e3:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:96:D6:00:F1:49:C4:ED:FE:FB:74:9D:C4:3D:A4:D2:0D:30:34:02
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/n5bWAPFJxO3--3SdxD2k0g0wNAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0/24
82.118.28.0/22
141.98.72.0/24
141.98.74.0/23
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fd:84:79:eb:12:24:84:41:1a:f8:1c:c8:dd:f4:1b:f3:28:
bc:d2:65:1b:c5:65:8d:b2:9d:77:df:3d:0e:b4:1b:67:3d:3e:
21:bb:d8:c9:ac:92:b3:aa:f0:96:86:76:77:41:12:21:68:fc:
3f:94:e1:17:39:db:1b:c7:a6:2a:09:ac:e3:44:cb:98:f5:00:
2d:ed:17:24:e1:54:71:e5:d6:37:d5:33:72:f2:45:86:bb:89:
ad:5a:32:87:ea:22:bf:96:ed:31:ac:f4:c6:05:02:4d:be:06:
d8:62:d3:10:3c:25:00:50:5e:b9:2e:6c:0d:61:11:0f:f0:01:
c3:48:13:d6:d5:34:3f:5d:3a:17:b8:3b:95:b3:bd:4d:98:31:
e3:8d:f6:ca:60:4e:8f:8d:20:82:c2:e0:e1:e3:b7:6b:7f:2d:
b8:81:6e:82:e9:d9:54:78:6e:3e:1c:de:0f:03:ec:7f:4b:f9:
ce:4d:88:9c:c5:e7:a6:e1:65:98:73:f9:c9:34:08:4b:1b:51:
f8:ea:36:4f:d1:09:0d:16:6f:16:51:5f:09:e5:cd:cc:b2:0f:
6a:d8:42:07:87:33:c2:af:4d:55:49:65:9d:24:42:a6:ba:18:
92:27:e5:76:c0:0e:2e:fa:fc:79:5d:a1:59:0f:30:6c:4c:27:
db:e2:88:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org