Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/r5Zg2YacQ6ykWFAZZmp5rS-RTPI.roa
File: r5Zg2YacQ6ykWFAZZmp5rS-RTPI.roa (raw, json)
Hash identifier: Qs3r60PHKiWi6bheOcm100D2KAX7khMIIRMCihfOfms=
Subject key identifier: AF:96:60:D9:86:9C:43:AC:A4:58:50:19:66:6A:79:AD:2F:91:4C:F2
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0183AED27B3B9FEABD6F1512AC7356C454B2
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/r5Zg2YacQ6ykWFAZZmp5rS-RTPI.roa
Signing time: Thu 06 Oct 2022 19:42:53 +0000
ROA not before: Thu 06 Oct 2022 19:42:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.25.0/24 maxlen: 24
82.118.28.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.105.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
212.2.239.0/24 maxlen: 24
45.80.4.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:d2:7b:3b:9f:ea:bd:6f:15:12:ac:73:56:c4:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Oct 6 19:42:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af9660d9869c43aca4585019666a79ad2f914cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:79:e5:6e:56:3c:ef:d3:f6:28:a1:5f:ad:
b7:ae:40:6f:f0:4a:24:a2:ea:28:cf:f7:76:e8:d4:
b3:82:66:95:63:26:04:2b:3c:4a:52:a9:5c:cc:e4:
a1:dc:7b:27:7c:3f:32:b0:1e:5d:13:91:74:e0:b4:
b0:3d:8f:d4:ec:3a:6d:2e:b1:55:fd:bd:7c:bc:c5:
b2:ae:60:1d:c7:5c:ea:85:3e:4d:25:5f:51:16:68:
f4:1a:55:86:b6:7c:6a:f7:6e:22:b9:87:c4:84:3e:
87:b6:3d:ad:bd:8a:06:ed:0e:a8:95:1a:f8:5b:2a:
35:58:53:eb:6f:bd:fa:a0:9e:da:05:15:4d:cd:24:
db:01:40:72:1c:68:5b:d4:c5:36:d1:3e:e1:b1:8c:
f4:41:d1:c2:61:16:de:bc:de:f6:e0:f2:9a:e2:57:
64:d6:be:d8:13:d5:ed:9c:20:ac:f3:9a:4d:38:c2:
86:29:39:fc:f4:6a:f2:ec:23:30:f4:93:aa:e4:41:
f0:a8:29:e7:00:29:11:db:84:9e:f0:83:65:54:5d:
62:3c:c9:92:9c:f2:b7:94:8a:6b:9e:f9:0b:b2:84:
8f:2e:06:f0:bd:af:70:2a:34:c6:4c:13:bf:fa:d4:
60:81:de:d0:f6:a3:19:92:d8:61:69:bb:1f:29:61:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:60:D9:86:9C:43:AC:A4:58:50:19:66:6A:79:AD:2F:91:4C:F2
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/r5Zg2YacQ6ykWFAZZmp5rS-RTPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.146.104.0-45.146.106.255
82.118.25.0/24
82.118.28.0/22
141.98.72.0/24
141.98.74.0/23
212.2.239.0/24
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:16:48:2f:41:99:53:98:24:6e:2b:25:f7:b4:ba:ef:9b:15:
3b:04:ef:67:3a:1b:66:b6:3e:78:ac:64:b5:27:d2:fc:23:ee:
1b:e3:51:83:16:2d:2b:9f:06:6f:cd:54:49:c2:f3:59:4e:eb:
23:e3:03:ff:d6:79:5b:59:12:1b:4d:03:e9:bc:19:69:79:15:
47:1a:37:f3:81:e8:29:30:05:3c:78:fd:c5:e0:cd:45:64:61:
b9:29:e6:72:83:54:91:f0:96:d2:a6:e0:82:d6:16:b0:06:c1:
70:50:71:0b:fe:9e:e3:75:a7:d9:6f:93:2b:8f:a3:ef:c5:f0:
36:65:f1:c1:78:60:fc:40:ac:2b:5b:9a:5d:f2:34:45:6d:7b:
8f:a5:2f:6f:44:00:9d:c3:32:96:7d:17:aa:38:2c:2e:df:7e:
d0:ad:b6:4e:6b:97:61:40:72:7b:42:26:e1:7a:de:84:fc:f5:
74:4e:66:6b:0e:e9:13:79:b0:00:74:cc:97:8a:66:5d:fa:69:
44:4f:3b:a6:65:e6:3c:1b:e4:5a:c6:41:2a:35:d2:2e:52:10:
26:9f:48:a9:85:c1:03:0d:19:16:57:05:72:ae:07:88:af:fe:
1a:b0:60:ed:b4:cb:a1:b3:d5:2d:24:ac:79:82:bd:ec:b4:29:
f5:b4:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org