Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/3Y5XoMIMLBKPFFsmxZ8dwiarFcE.roa
File: 3Y5XoMIMLBKPFFsmxZ8dwiarFcE.roa (raw, json)
Hash identifier: Yr1sJjaRrEMiCHA6O3SLxiOtldMkg8u8JcHFlkkH+vw=
Subject key identifier: DD:8E:57:A0:C2:0C:2C:12:8F:14:5B:26:C5:9F:1D:C2:26:AB:15:C1
Certificate issuer: /CN=2a922d0c6c99be3ddb4d2500fe8fb5ddf163c9a0
Certificate serial: 08435139
Authority key identifier: 2A:92:2D:0C:6C:99:BE:3D:DB:4D:25:00:FE:8F:B5:DD:F1:63:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpItDGyZvj3bTSUA_o-13fFjyaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/3Y5XoMIMLBKPFFsmxZ8dwiarFcE.roa
Signing time: Sat 01 Jan 2022 04:01:03 +0000
ROA not before: Sat 01 Jan 2022 04:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42846
IP address blocks: 185.106.211.0/24 maxlen: 24
185.106.210.0/24 maxlen: 24
185.106.209.0/24 maxlen: 24
185.106.208.0/24 maxlen: 24
89.252.179.0/24 maxlen: 24
89.252.178.0/24 maxlen: 24
89.252.181.0/24 maxlen: 24
89.252.180.0/24 maxlen: 24
45.84.188.0/24 maxlen: 24
45.84.191.0/24 maxlen: 24
45.84.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138629433 (0x8435139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a922d0c6c99be3ddb4d2500fe8fb5ddf163c9a0
Validity
Not Before: Jan 1 04:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd8e57a0c20c2c128f145b26c59f1dc226ab15c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:f8:58:24:10:c0:ee:b5:82:b5:16:7a:1d:
2b:ec:71:f5:d3:0c:e7:ff:ea:ab:ab:c5:a5:7c:60:
bd:83:f7:43:b6:6e:ee:58:7c:5d:fc:9b:56:64:87:
a9:5c:a5:9e:36:63:cc:8a:9c:79:f3:12:e4:2a:1d:
42:b2:b4:d9:75:6a:92:d8:8a:60:e1:19:84:00:da:
44:ea:21:0e:cb:1b:07:07:de:47:64:ac:dd:3b:60:
15:fe:f5:3e:9d:b1:af:37:8c:64:71:70:8c:9a:8c:
c1:36:29:64:8f:a1:26:89:43:fd:9e:e2:39:10:06:
16:95:4c:9e:db:65:d3:dc:ce:7c:61:85:c8:5c:2a:
1e:c2:a4:34:4c:58:9b:89:46:ad:df:bc:b0:c5:63:
79:ae:01:5b:5d:34:eb:b3:db:bd:02:7d:13:e0:00:
62:d7:74:1c:f3:3f:ee:2e:89:a0:42:00:66:ff:d8:
76:29:8a:b0:cb:9a:83:c3:78:6c:bf:cc:d3:4f:3d:
dd:e1:6b:7f:da:f8:ba:bf:1b:fb:aa:d1:f0:5e:40:
30:fb:1f:8c:c5:b9:4e:b5:b0:20:87:e6:aa:c0:68:
e0:24:80:56:8a:1c:8e:b8:f4:2e:74:b3:d0:86:f1:
23:d4:4f:f3:4d:ef:32:e1:00:42:37:0d:6e:fa:9a:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:57:A0:C2:0C:2C:12:8F:14:5B:26:C5:9F:1D:C2:26:AB:15:C1
X509v3 Authority Key Identifier:
keyid:2A:92:2D:0C:6C:99:BE:3D:DB:4D:25:00:FE:8F:B5:DD:F1:63:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpItDGyZvj3bTSUA_o-13fFjyaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/3Y5XoMIMLBKPFFsmxZ8dwiarFcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/KpItDGyZvj3bTSUA_o-13fFjyaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.188.0/24
45.84.190.0/23
89.252.178.0-89.252.181.255
185.106.208.0/22
Signature Algorithm: sha256WithRSAEncryption
06:bb:3d:fd:09:91:50:2d:3c:ab:6a:8a:37:12:95:87:bf:bf:
27:98:06:80:35:90:ae:c2:47:21:b5:22:26:05:e2:88:4d:1f:
25:0c:df:94:90:e6:4b:60:69:8e:55:73:d6:28:3e:18:a7:cc:
e2:60:2b:45:35:bf:36:1a:d7:e8:7e:bd:62:1d:a5:eb:5d:1f:
19:28:b8:17:9f:fb:51:75:44:c3:27:ec:94:cb:25:13:4e:39:
23:ab:a4:f8:0b:e2:1b:cc:59:11:51:eb:94:db:73:3f:f1:61:
b2:98:d9:f9:98:06:bc:52:ab:08:d8:27:cd:e3:32:1a:0a:b2:
27:b6:ab:75:63:f7:03:39:4f:73:ff:c9:1a:c1:82:bc:1e:05:
99:92:1f:fe:0c:1e:69:dc:90:a7:55:45:a3:f7:74:f8:61:2c:
35:7a:5f:e0:90:b2:b1:8b:d8:cf:a0:c1:7e:3d:be:85:8f:22:
91:82:7a:3e:4a:63:d3:d7:dd:3e:75:a1:a6:8b:b2:d8:36:d9:
77:b4:f4:3f:89:a3:07:c0:3c:0a:cb:3f:52:16:2f:7b:a6:9a:
a6:1c:3d:22:30:13:f9:c9:34:b1:10:6a:68:3b:b3:25:a6:cc:
18:a8:da:12:d8:c9:ee:fd:da:09:30:5d:8b:b1:0e:26:c2:c6:
d9:c4:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:21 2023 by rpki-client on console-ams.rpki-client.org