Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/3N1GGuOk3vCqtHS93K_oy8RBawM.roa
File: 3N1GGuOk3vCqtHS93K_oy8RBawM.roa (raw, json)
Hash identifier: 7j2dnHH+5CN19s6jUNFu2VocEclkizgBgd+kkDOZuoI=
Subject key identifier: DC:DD:46:1A:E3:A4:DE:F0:AA:B4:74:BD:DC:AF:E8:CB:C4:41:6B:03
Certificate issuer: /CN=2a922d0c6c99be3ddb4d2500fe8fb5ddf163c9a0
Certificate serial: 0844A835
Authority key identifier: 2A:92:2D:0C:6C:99:BE:3D:DB:4D:25:00:FE:8F:B5:DD:F1:63:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpItDGyZvj3bTSUA_o-13fFjyaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/3N1GGuOk3vCqtHS93K_oy8RBawM.roa
Signing time: Sat 01 Jan 2022 04:01:04 +0000
ROA not before: Sat 01 Jan 2022 04:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 89.252.186.0/24 maxlen: 24
89.252.185.0/24 maxlen: 24
89.252.184.0/24 maxlen: 24
89.252.183.0/24 maxlen: 24
89.252.182.0/24 maxlen: 24
89.252.187.0/24 maxlen: 24
45.84.189.0/24 maxlen: 24
2a0f:e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138717237 (0x844a835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a922d0c6c99be3ddb4d2500fe8fb5ddf163c9a0
Validity
Not Before: Jan 1 04:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcdd461ae3a4def0aab474bddcafe8cbc4416b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:9e:5b:60:dc:a0:97:f4:b5:23:4b:ff:25:
53:65:35:5e:92:8d:fa:73:00:03:5d:fb:9d:0f:2f:
a0:03:41:7a:37:8c:2d:d8:4c:3e:3a:50:5d:75:22:
e7:40:a1:4d:a7:fb:8e:20:61:e4:31:37:11:cb:c8:
2c:b3:50:d5:e9:fd:c3:37:5f:c5:d7:49:ed:fc:8a:
ef:56:6e:2d:e1:e2:0e:d5:90:ca:4f:76:42:ae:c8:
20:56:ed:8f:99:8b:02:d8:0f:a6:a4:43:c3:01:81:
9a:1d:38:39:41:08:b6:30:cc:d7:14:73:85:b6:a3:
8d:e2:2b:59:bd:66:61:2b:7e:bc:06:be:f4:dd:cc:
d2:d3:fb:9a:59:fd:7e:36:5e:32:e0:98:dc:28:e4:
eb:a1:4f:6e:26:f0:a0:53:05:4e:fa:1a:48:c3:9f:
c9:c2:06:4d:c4:47:cb:66:83:c5:fc:b6:c4:38:c2:
3c:8f:4e:5f:7a:c8:8b:da:3b:e0:e5:ca:b8:b7:94:
51:b5:ff:c3:d1:a6:3b:78:1d:30:bb:18:71:dd:26:
98:f3:01:ff:20:b7:3e:31:7a:06:f5:57:95:95:58:
f7:1e:a1:05:af:da:02:c4:45:23:26:d3:d5:7e:5e:
bb:05:c8:91:78:c2:b9:38:53:08:96:96:44:af:46:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DD:46:1A:E3:A4:DE:F0:AA:B4:74:BD:DC:AF:E8:CB:C4:41:6B:03
X509v3 Authority Key Identifier:
keyid:2A:92:2D:0C:6C:99:BE:3D:DB:4D:25:00:FE:8F:B5:DD:F1:63:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpItDGyZvj3bTSUA_o-13fFjyaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/3N1GGuOk3vCqtHS93K_oy8RBawM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/KpItDGyZvj3bTSUA_o-13fFjyaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.189.0/24
89.252.182.0-89.252.187.255
IPv6:
2a0f:e80::/29
Signature Algorithm: sha256WithRSAEncryption
59:33:83:a1:f2:73:84:1b:66:a7:4e:4f:43:41:a1:81:59:8c:
f4:a3:95:53:a7:2a:8a:45:95:ea:59:5e:01:6f:5d:d8:7b:49:
66:1f:c4:b3:10:e3:13:b0:b0:7a:ee:19:d4:60:7e:75:17:12:
6c:85:02:0e:25:f2:82:51:60:a7:db:f0:55:b5:09:b7:b2:79:
83:37:44:21:76:1c:d5:b7:fd:16:9f:f0:0f:82:ab:9d:9f:dc:
53:31:b0:40:fd:c6:ec:f3:e2:fa:c8:d0:6f:a3:99:6f:49:06:
e8:6d:fc:ca:ea:f2:00:6d:18:ac:99:50:df:8c:19:39:05:fd:
b4:8e:c6:4e:ec:91:db:89:62:24:bc:8d:c9:3b:94:21:24:9d:
78:c9:a6:1d:24:1d:5e:70:00:37:26:55:06:ae:f9:56:18:77:
db:48:be:4d:c6:7c:c2:80:65:a7:7e:ab:75:fe:e9:ee:35:82:
66:cd:50:3e:06:c7:ba:8a:9e:3c:35:aa:49:ce:ae:16:87:1f:
71:a4:cb:ae:e6:ef:9d:49:e3:69:bf:73:58:72:ed:04:7e:6b:
4d:f8:07:7e:98:0e:70:86:c3:b5:11:13:10:d0:a6:58:9e:e2:
b5:97:01:a9:0a:35:ba:a1:45:9c:48:12:52:f5:cd:f3:13:ae:
f3:b2:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org