Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/1Fo5_-z_DByEPea6LYt0Ya1xAis.roa
File: 1Fo5_-z_DByEPea6LYt0Ya1xAis.roa (raw, json)
Hash identifier: qFycBs2CmnNJmhgPz25nZE1VWioWdU4qBM86S++/q1k=
Subject key identifier: D4:5A:39:FF:EC:FF:0C:1C:84:3D:E6:BA:2D:8B:74:61:AD:71:02:2B
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018DD6208FC5F0040F57D1B798F1EB239D4A
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/1Fo5_-z_DByEPea6LYt0Ya1xAis.roa
Signing time: Fri 23 Feb 2024 13:21:14 +0000
ROA not before: Fri 23 Feb 2024 13:21:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40065
IP address blocks: 45.12.88.0/24 maxlen: 24
45.12.90.0/24 maxlen: 24
45.67.223.0/24 maxlen: 24
185.183.84.0/24 maxlen: 24
185.186.146.0/23 maxlen: 23
185.194.148.0/24 maxlen: 24
185.201.226.0/24 maxlen: 24
185.201.227.0/24 maxlen: 24
185.238.248.0/24 maxlen: 24
185.238.250.0/24 maxlen: 24
193.9.44.0/24 maxlen: 24
193.9.46.0/24 maxlen: 24
193.22.152.0/24 maxlen: 24
212.103.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:20:8f:c5:f0:04:0f:57:d1:b7:98:f1:eb:23:9d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Feb 23 13:21:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d45a39ffecff0c1c843de6ba2d8b7461ad71022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:05:30:0c:2b:1a:77:ff:2d:5d:6b:01:b2:
06:bb:9e:bc:fd:c3:65:e4:0d:c7:f4:eb:85:5e:45:
5a:fc:62:65:d7:21:2b:9a:f0:05:be:7e:25:03:96:
5e:d7:78:9b:68:1b:f6:a7:c2:35:68:c8:6f:78:c3:
d4:e8:66:72:e0:4c:65:0b:a9:f6:20:d2:a5:01:e3:
05:a0:7e:1a:12:64:b3:a6:c3:78:11:d4:dd:17:b5:
2b:e4:8b:18:8f:df:5a:36:a0:2a:cf:2b:9f:11:ca:
2c:82:c3:51:d8:32:e6:c4:21:47:e1:3a:8b:a9:0c:
02:91:06:b1:e1:b6:51:19:7a:59:5d:48:a0:c6:b6:
97:28:14:f1:7a:4a:3e:1c:b2:ee:6b:38:9f:73:97:
20:a1:6b:ac:8f:5b:27:66:2e:38:61:51:35:24:71:
91:24:cd:68:01:de:aa:0f:d7:16:ae:c4:e7:28:78:
26:ac:ad:65:a6:25:51:4d:33:66:27:b2:fb:3b:75:
0f:08:5d:3d:ed:26:1b:dd:7c:ca:14:64:60:08:83:
e7:d9:fb:c9:cc:b6:80:79:31:99:7f:cc:79:fa:fb:
bd:6c:5f:1e:59:91:8c:31:88:08:b4:db:fa:a8:26:
f5:48:d5:42:4c:10:31:3b:5f:81:8f:89:5f:2f:ab:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:39:FF:EC:FF:0C:1C:84:3D:E6:BA:2D:8B:74:61:AD:71:02:2B
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/1Fo5_-z_DByEPea6LYt0Ya1xAis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.88.0/24
45.12.90.0/24
45.67.223.0/24
185.183.84.0/24
185.186.146.0/23
185.194.148.0/24
185.201.226.0/23
185.238.248.0/24
185.238.250.0/24
193.9.44.0/24
193.9.46.0/24
193.22.152.0/24
212.103.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ad:b0:18:4f:af:5e:ac:30:be:f7:79:ad:86:52:81:0b:6e:
9e:1b:41:ec:eb:54:d0:45:94:ae:23:55:77:41:b3:39:5a:44:
60:0e:fc:ec:1f:f8:17:91:ee:45:00:65:3d:65:f4:99:81:46:
7e:0c:be:dd:a0:cd:1f:62:c7:23:87:01:a5:79:bf:5d:d6:87:
99:38:7f:bc:f2:ff:cb:25:36:d3:aa:fa:74:8e:cc:e8:28:9b:
db:42:aa:a3:b9:12:02:e4:c2:9b:7c:6e:0c:04:cc:09:cd:75:
e0:9a:f9:27:38:5b:f9:73:be:c6:4b:5b:98:58:0b:98:01:28:
82:7e:1f:eb:73:49:c4:2a:59:4c:a6:38:d4:9f:62:fd:9a:3b:
07:b8:ed:d4:ff:bb:dd:c2:df:13:ce:ca:6e:3c:0e:88:8e:6c:
5e:82:12:ca:ff:ba:4e:31:69:7d:19:96:79:20:c4:ee:73:b3:
b7:86:a1:a8:d6:c4:70:fc:08:d5:bf:1e:60:1e:62:b5:cb:19:
84:f6:8c:fa:1d:33:7c:cc:be:b8:df:2e:f7:09:71:3d:2e:ff:
ba:f3:14:f0:b7:3d:a0:79:f9:37:b1:6b:98:9d:d5:2f:5b:0a:
90:d6:ac:bc:12:13:fc:29:29:17:7b:61:fe:f9:35:04:cc:28:
a1:81:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org