Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/A3hc0uhKY0uybUZBGJ1BweerBis.roa
File: A3hc0uhKY0uybUZBGJ1BweerBis.roa (raw, json)
Hash identifier: mgVzJXVRJ30g6gAmH9+Q87F5bRRfsaevTBarNi8ENLw=
Subject key identifier: 03:78:5C:D2:E8:4A:63:4B:B2:6D:46:41:18:9D:41:C1:E7:AB:06:2B
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018DD6208F8D1129974B1EA3C84A2B9833C8
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/A3hc0uhKY0uybUZBGJ1BweerBis.roa
Signing time: Fri 23 Feb 2024 13:21:14 +0000
ROA not before: Fri 23 Feb 2024 13:21:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 45.12.52.0/23 maxlen: 23
185.238.249.0/24 maxlen: 24
185.238.251.0/24 maxlen: 24
193.9.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:20:8f:8d:11:29:97:4b:1e:a3:c8:4a:2b:98:33:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Feb 23 13:21:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03785cd2e84a634bb26d4641189d41c1e7ab062b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:a9:0f:70:fa:2b:90:aa:36:7e:b9:4b:1b:
83:8d:e7:20:5b:3e:2c:c3:c1:39:3a:7f:32:75:84:
34:77:55:9f:b5:79:fe:bc:8a:41:d1:f7:98:1e:d1:
3c:8d:7f:d5:e1:97:f4:03:4e:c5:92:10:73:58:24:
ee:4b:67:35:ed:ec:28:5c:aa:28:7f:5e:8e:ff:dd:
34:b7:3c:76:cb:88:e9:25:a4:88:9b:ea:5d:52:f2:
dd:45:23:cb:1b:e9:97:80:0a:82:6f:b4:5e:36:69:
40:82:d2:d3:c3:58:3e:01:0e:90:96:66:6d:91:bb:
ce:ac:bd:2a:35:0e:2c:54:28:46:0b:e8:8d:28:71:
bd:8f:20:d4:fd:8d:55:80:2e:07:0b:71:40:fd:44:
a4:cc:f4:72:11:f8:8d:98:f5:73:72:f0:91:b1:ed:
d7:78:88:25:05:c4:fd:29:43:c2:a0:8a:80:29:85:
47:a3:b6:a3:9c:e1:9d:04:3b:37:00:eb:bb:27:5d:
03:33:04:11:17:51:a5:11:d1:f5:71:82:b5:02:60:
77:ee:f7:f6:44:d6:43:8b:4a:03:0a:8a:8f:3d:51:
d8:09:27:8f:72:fb:c8:8f:48:0b:0e:d7:97:76:d6:
1e:d7:dd:92:bf:09:b1:29:02:47:65:ca:a2:47:0d:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:5C:D2:E8:4A:63:4B:B2:6D:46:41:18:9D:41:C1:E7:AB:06:2B
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/A3hc0uhKY0uybUZBGJ1BweerBis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.52.0/23
185.238.249.0/24
185.238.251.0/24
193.9.45.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a2:b7:61:cb:1d:45:3e:bf:4a:d8:58:62:05:05:ea:d8:0f:
10:65:ac:26:b8:06:56:ce:fe:85:8d:32:3f:ff:3f:76:1f:6d:
78:df:36:e0:47:d9:e6:46:1c:b8:cf:fc:d8:74:6e:c4:2f:32:
cd:fe:0f:a0:3e:5a:6d:c2:95:5e:09:dc:ab:0a:83:06:3f:cf:
5b:08:b9:8d:87:28:6c:05:e5:dd:8f:a0:a6:7e:49:d7:57:0f:
84:c5:36:26:bb:d5:e4:84:b0:d3:12:79:89:13:25:d4:c3:61:
cc:fd:cd:3d:76:7e:10:24:0f:3e:82:bd:50:8b:35:fa:eb:43:
2b:e8:87:d1:45:e3:ad:85:a4:05:bf:26:0b:f9:53:e3:64:e4:
8b:22:8f:68:13:71:87:38:29:9d:3f:f9:29:f5:47:08:6c:e0:
60:ca:3f:6c:57:91:0b:f9:1a:e8:47:12:28:22:ec:b4:c0:54:
6b:49:f7:eb:98:a9:49:b4:c6:b4:1d:1f:2f:03:c6:36:a2:cd:
9f:7c:3d:02:93:74:b9:fe:64:ee:fc:51:7b:df:47:85:fd:e6:
71:17:22:08:38:7f:33:f0:3b:cb:8a:40:ca:92:e5:08:17:39:
32:71:6d:de:aa:e0:bc:2a:63:db:32:3d:2f:81:f1:5c:56:0c:
28:8a:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 20:12:11 2024 by rpki-client on console-fra.rpki-client.org