Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/CLWnV9F3_EAHjJwZm0IHghJMv7s.roa
File: CLWnV9F3_EAHjJwZm0IHghJMv7s.roa (raw, json)
Hash identifier: pgfSpUoKXknvwoxqdkJkDJRPKxqvVEuZR3NaF7Bf9HA=
Subject key identifier: 08:B5:A7:57:D1:77:FC:40:07:8C:9C:19:9B:42:07:82:12:4C:BF:BB
Certificate issuer: /CN=c5a001a86d14ad717bf924719690d917c5a7f952
Certificate serial: 25A8F8
Authority key identifier: C5:A0:01:A8:6D:14:AD:71:7B:F9:24:71:96:90:D9:17:C5:A7:F9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaABqG0UrXF7-SRxlpDZF8Wn-VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/CLWnV9F3_EAHjJwZm0IHghJMv7s.roa
Signing time: Sat 01 Jan 2022 00:51:38 +0000
ROA not before: Sat 01 Jan 2022 00:51:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199738
IP address blocks: 176.32.54.0/24 maxlen: 24
185.48.84.0/24 maxlen: 24
185.48.85.0/24 maxlen: 24
185.48.86.0/24 maxlen: 24
185.48.87.0/24 maxlen: 24
176.32.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2468088 (0x25a8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a001a86d14ad717bf924719690d917c5a7f952
Validity
Not Before: Jan 1 00:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08b5a757d177fc40078c9c199b420782124cbfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:f1:68:40:c1:1a:d4:d8:07:0c:1f:ba:e9:
6e:30:48:70:3e:a9:78:7e:02:bf:d0:bf:97:ad:e8:
dd:91:ed:78:44:93:12:e4:d2:c5:c2:39:6b:93:43:
a9:33:92:aa:73:f4:66:63:26:c8:96:d2:85:a7:01:
f8:58:1b:44:1b:61:0d:11:30:57:81:47:8d:34:56:
e8:a1:5b:b4:39:03:4b:4c:87:dc:f9:c5:6f:b2:24:
55:2c:bc:fe:75:d4:c6:8f:25:2f:cd:5a:c1:6d:a2:
5b:b0:1d:01:35:36:ab:c1:cf:02:55:4d:a6:6f:5d:
95:97:19:ff:8c:5e:e6:5a:17:43:6d:ee:e7:3a:db:
ed:de:24:06:d3:a2:f9:9e:c2:3b:64:73:fd:6b:da:
93:10:28:c6:28:18:e1:75:0b:eb:b0:c1:6f:e2:7d:
e3:9c:3d:b8:f6:a6:e9:5a:b9:11:90:92:f4:47:01:
71:d1:7f:31:2e:29:7a:e9:5b:12:c7:40:2f:ff:e9:
20:76:a4:4b:3f:2f:73:4f:c6:27:76:ed:a8:4f:f9:
25:86:62:27:cc:61:a2:fb:28:9a:ef:b1:8b:21:70:
db:22:13:da:26:a2:c7:7a:54:cf:7e:78:af:74:f2:
24:ac:e8:e3:00:ec:b3:75:76:90:5b:15:ae:03:b4:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:A7:57:D1:77:FC:40:07:8C:9C:19:9B:42:07:82:12:4C:BF:BB
X509v3 Authority Key Identifier:
keyid:C5:A0:01:A8:6D:14:AD:71:7B:F9:24:71:96:90:D9:17:C5:A7:F9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaABqG0UrXF7-SRxlpDZF8Wn-VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/CLWnV9F3_EAHjJwZm0IHghJMv7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/xaABqG0UrXF7-SRxlpDZF8Wn-VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.50.0/24
176.32.54.0/24
185.48.84.0/22
Signature Algorithm: sha256WithRSAEncryption
83:b2:e8:eb:72:8d:2b:28:fc:b3:c4:13:b0:a9:9a:a8:7b:ae:
4b:bf:1b:dc:08:48:01:87:fc:23:d7:e6:ea:62:c1:4b:8d:47:
33:22:5d:fc:d6:79:98:b4:d1:ea:00:5c:cb:f5:83:b0:3b:89:
d8:19:2c:13:74:2d:1e:4b:e6:ac:16:94:e6:3a:8d:2c:8f:b2:
24:a0:21:4e:35:f3:06:7d:d2:36:68:78:24:55:1a:3f:3f:80:
52:ab:4a:f0:7f:dd:36:22:1c:83:79:0b:75:79:9b:c7:b9:6a:
fa:b9:c6:7c:b3:73:68:eb:08:38:b3:d8:80:11:97:14:d3:ab:
a0:61:f3:e8:8e:17:65:55:4b:0f:9c:49:dd:f9:22:91:c3:4e:
86:00:03:0c:da:60:6d:2f:a0:0a:60:e1:33:72:5e:3f:3e:37:
a8:8a:3e:1f:b3:07:59:6e:6a:f4:9d:71:45:ec:e3:2b:ca:1b:
f8:d9:51:e1:b0:11:8d:92:4a:f6:02:2a:cb:25:9f:1e:e9:45:
ea:0c:d4:7f:48:21:56:04:af:b9:76:d1:69:b1:6e:55:68:38:
4b:c6:80:bf:3a:05:e4:ec:71:9a:1a:04:d0:28:69:04:31:d5:
66:df:af:03:cf:70:f5:de:e2:12:11:6a:21:17:9e:91:a2:4d:
87:23:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:14 2023 by rpki-client on console-fra.rpki-client.org