Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/heL_qh7m2ot63b3b_Pi69W2z-AU.roa
File: heL_qh7m2ot63b3b_Pi69W2z-AU.roa (raw, json)
Hash identifier: at4nTVfHRIT1nvOGc9crsj9lbipjvtmYUqvzjAJRpaw=
Subject key identifier: 85:E2:FF:AA:1E:E6:DA:8B:7A:DD:BD:DB:FC:F8:BA:F5:6D:B3:F8:05
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 03DB10B8
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/heL_qh7m2ot63b3b_Pi69W2z-AU.roa
Signing time: Sat 01 Jan 2022 05:55:55 +0000
ROA not before: Sat 01 Jan 2022 05:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.104.0/22 maxlen: 24
194.150.204.0/23 maxlen: 24
194.150.210.0/23 maxlen: 24
45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64688312 (0x3db10b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 1 05:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85e2ffaa1ee6da8b7addbddbfcf8baf56db3f805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:2c:a3:9b:da:da:ab:f6:3c:1b:f0:d0:ab:
96:94:99:a3:c4:58:c1:65:36:d1:7b:27:ee:82:d2:
ba:75:f5:12:9a:10:bd:50:07:0a:cb:93:bc:10:d3:
db:53:48:7d:4a:3e:67:15:ea:ef:a7:d8:c6:ac:7e:
e8:2b:15:a4:e8:15:55:5c:95:16:49:44:a2:e8:3c:
bc:63:c0:32:c4:00:8e:8c:d9:81:53:c5:08:28:92:
f4:47:f1:27:a1:e9:ec:cd:82:72:f0:51:51:bf:86:
03:5f:3a:cd:1d:ac:46:9a:fd:87:c8:31:33:84:d4:
1f:50:f3:3b:44:99:83:83:ef:18:0a:31:38:25:f7:
76:65:77:73:ac:8f:76:42:7d:ab:ae:1a:c8:c5:69:
fd:06:25:6f:5f:bb:0f:bf:4c:f2:5c:b0:69:10:7d:
68:81:da:ee:c6:41:2f:5c:2c:44:b2:7d:ae:fc:1c:
34:81:c3:ac:30:5f:8d:77:b7:23:c8:e6:b9:8f:1f:
1c:18:b7:54:ef:7c:78:35:26:2d:1e:6f:5d:af:44:
56:17:2d:f6:26:f8:32:ad:0e:29:1c:10:0d:d6:8d:
4c:cf:ea:0d:69:9c:b7:2a:3c:6d:79:47:c1:c5:f8:
4b:5e:28:8b:d7:8e:29:d1:9c:a0:b9:66:19:58:d0:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:FF:AA:1E:E6:DA:8B:7A:DD:BD:DB:FC:F8:BA:F5:6D:B3:F8:05
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/heL_qh7m2ot63b3b_Pi69W2z-AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
77.83.104.0/22
194.150.204.0/23
194.150.210.0/23
Signature Algorithm: sha256WithRSAEncryption
66:9a:f8:e3:73:04:44:20:f8:cb:7a:bd:0b:18:c1:f6:f2:a6:
59:4b:d3:c5:55:bb:ac:9c:d4:f1:6c:14:e4:35:5c:a3:92:6c:
f6:03:f1:74:c1:7e:51:8c:84:1a:11:66:55:48:ff:d3:09:91:
14:58:9d:1a:d5:9b:22:65:1a:18:87:56:c3:e7:42:7e:14:92:
c5:f6:d0:58:72:1c:0c:31:83:bc:19:c2:22:ba:ac:a9:32:f9:
00:04:b6:03:87:66:80:ac:6e:63:d5:15:2f:2d:b1:6a:c1:8d:
c8:f2:3f:81:04:d3:84:af:4c:ed:e6:04:50:33:18:ad:75:2e:
ad:3a:57:41:76:a2:90:c8:d5:a1:b2:66:a2:9a:0a:dd:12:16:
5f:2b:26:1b:36:1f:bd:76:7b:c8:f6:3c:e0:64:62:c3:53:bb:
7e:c0:bc:ba:66:17:4a:80:d7:4a:7e:a8:85:8e:2f:7c:0b:22:
c4:39:00:e1:09:cb:81:60:0e:2c:31:a3:05:74:27:b8:d8:ff:
44:6b:9f:69:6d:b6:0e:ce:46:fb:cb:47:85:53:3a:e3:39:15:
be:a2:05:b5:87:51:28:e9:7c:7b:89:6f:ce:c0:80:fd:c7:7b:
8b:b4:c3:76:8d:3e:da:46:bb:ed:16:9a:cf:01:60:17:88:c3:
99:be:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org