Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/852364-ca64-4c12-b457-ca7e1ca676c8/1/rIrhSDsGgCmheqnuEjwIIFL7yIc.roa
File: rIrhSDsGgCmheqnuEjwIIFL7yIc.roa (raw, json)
Hash identifier: JAkGBeazGoW7H5LyE0X9Zfeda+fEsPbReVea2TmgG/A=
Subject key identifier: AC:8A:E1:48:3B:06:80:29:A1:7A:A9:EE:12:3C:08:20:52:FB:C8:87
Certificate issuer: /CN=518c14d7fbd0a7b765b1960b8bea82cf7d0cb4be
Certificate serial: 1395FCA2
Authority key identifier: 51:8C:14:D7:FB:D0:A7:B7:65:B1:96:0B:8B:EA:82:CF:7D:0C:B4:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYwU1_vQp7dlsZYLi-qCz30MtL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/852364-ca64-4c12-b457-ca7e1ca676c8/1/rIrhSDsGgCmheqnuEjwIIFL7yIc.roa
Signing time: Mon 16 May 2022 09:13:29 +0000
ROA not before: Mon 16 May 2022 09:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35654
IP address blocks: 80.72.66.0/24 maxlen: 24
80.72.69.0/24 maxlen: 24
80.72.68.0/24 maxlen: 24
80.72.75.0/24 maxlen: 24
80.72.77.0/24 maxlen: 24
80.72.80.0/24 maxlen: 24
80.72.82.0/24 maxlen: 24
80.72.93.0/24 maxlen: 24
80.72.92.0/24 maxlen: 24
80.72.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328596642 (0x1395fca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518c14d7fbd0a7b765b1960b8bea82cf7d0cb4be
Validity
Not Before: May 16 09:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac8ae1483b068029a17aa9ee123c082052fbc887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:71:57:f5:d8:bd:7f:4e:99:d7:c1:e9:98:
1f:97:8f:14:f3:75:4a:44:ed:fe:6a:78:d5:27:35:
39:e6:20:65:52:85:20:2b:91:f0:bf:71:8d:4c:9d:
53:00:31:f8:0c:02:0a:cf:20:36:d8:df:7c:29:6f:
d2:d0:e1:31:8a:a0:6f:0d:0a:f5:30:47:ff:90:a5:
42:c4:d2:0a:af:08:01:fd:89:63:5c:07:f8:c7:3c:
be:f4:54:7f:43:d9:34:7b:85:49:1c:a5:ff:76:d4:
46:45:fe:7a:bb:bb:99:fa:6c:57:65:18:7f:da:7e:
a5:0c:13:7a:ca:39:f2:9b:8d:b9:ee:68:5d:7f:f9:
d4:42:0d:66:60:33:52:8c:79:87:0b:0c:f6:94:c4:
72:b2:d7:05:07:70:80:fb:d9:9f:e3:25:d4:ca:2f:
25:14:0e:d2:53:d9:2c:b1:7c:99:4a:7a:59:0b:8f:
3a:14:e8:4a:d6:b5:91:fa:cf:81:65:4d:72:d0:cf:
ed:0f:64:9f:aa:8a:a7:1f:83:59:ba:51:c7:f7:da:
28:5b:69:57:76:dc:45:2e:cb:c9:08:2c:4d:6d:53:
cf:25:d9:d2:08:24:e7:97:6d:cb:f3:4a:f0:76:f0:
a2:ac:ab:8a:6a:57:bb:31:6a:5f:5c:d4:be:1f:b5:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:E1:48:3B:06:80:29:A1:7A:A9:EE:12:3C:08:20:52:FB:C8:87
X509v3 Authority Key Identifier:
keyid:51:8C:14:D7:FB:D0:A7:B7:65:B1:96:0B:8B:EA:82:CF:7D:0C:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYwU1_vQp7dlsZYLi-qCz30MtL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/852364-ca64-4c12-b457-ca7e1ca676c8/1/rIrhSDsGgCmheqnuEjwIIFL7yIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/852364-ca64-4c12-b457-ca7e1ca676c8/1/UYwU1_vQp7dlsZYLi-qCz30MtL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.66.0/24
80.72.68.0/23
80.72.75.0/24
80.72.77.0/24
80.72.80.0/24
80.72.82.0/24
80.72.92.0/23
80.72.95.0/24
Signature Algorithm: sha256WithRSAEncryption
62:de:9a:3c:14:23:61:3a:3d:40:5a:51:8b:02:75:cf:68:39:
6b:c4:a8:50:c9:dd:f1:ff:ec:7a:25:9d:47:9e:c1:5f:dd:90:
e1:e8:65:7e:cb:2a:a3:a6:95:1a:a8:ac:ec:3c:67:19:cd:3a:
0f:e2:a6:7b:93:36:10:a0:00:d2:6c:f4:85:40:46:75:1f:5e:
3d:51:8e:29:0c:77:ab:e0:3f:6f:5f:f9:09:6a:52:dd:27:7a:
0d:72:e1:b6:3a:bd:f8:d5:40:d2:4f:3c:3e:a9:f1:5f:78:2b:
e8:e0:89:0d:11:8a:dc:83:4c:2b:f7:1b:91:92:35:c3:9e:8b:
99:c0:9a:19:39:d3:51:57:69:bf:f1:2f:76:cf:00:be:00:16:
23:a5:0e:6b:95:1c:7d:8b:b5:04:07:18:e3:a8:b1:3c:55:f6:
4b:93:52:20:54:18:db:3f:6e:95:f2:c3:6a:aa:a0:a4:9b:92:
9c:83:e7:07:64:c1:3c:d4:99:16:94:fb:40:46:bf:8d:4d:9d:
d5:2e:cd:85:3d:dd:2a:4f:32:71:cc:ae:4d:1c:62:cb:f9:23:
6b:a5:c8:17:06:61:af:3e:53:90:a5:59:97:83:a3:67:3d:89:
ab:e7:cd:94:33:b4:79:75:2e:8d:45:b0:29:39:8a:3a:5c:03:
d4:d8:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:22 2024 by rpki-client on console-ams.rpki-client.org