Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/7-1oKGQywy9FbX0Ubb2V5bND6FM.roa
File: 7-1oKGQywy9FbX0Ubb2V5bND6FM.roa (raw, json)
Hash identifier: OTQWy0e138OOnKU1IFtQC10jMbw7hHs8rmRUNiW+9Z4=
Subject key identifier: EF:ED:68:28:64:32:C3:2F:45:6D:7D:14:6D:BD:95:E5:B3:43:E8:53
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018C3A00B824EE0E91FABAEC8E8481DC12BE
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/7-1oKGQywy9FbX0Ubb2V5bND6FM.roa
Signing time: Tue 05 Dec 2023 12:42:54 +0000
ROA not before: Tue 05 Dec 2023 12:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.31.0/24 maxlen: 24
86.62.28.0/24 maxlen: 24
86.62.29.0/24 maxlen: 24
86.62.30.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
45.80.28.0/24 maxlen: 24
45.80.30.0/24 maxlen: 24
45.80.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:00:b8:24:ee:0e:91:fa:ba:ec:8e:84:81:dc:12:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Dec 5 12:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efed68286432c32f456d7d146dbd95e5b343e853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:39:7a:8a:ae:2e:85:2b:b2:56:8e:50:77:
1b:8e:83:0d:ff:30:4b:83:d6:30:b6:a0:07:31:0f:
9b:65:d7:a4:8f:f6:cf:95:f7:32:61:91:b8:ab:0c:
5d:d0:a5:d4:8b:81:dd:0b:30:d9:e1:1f:fa:04:6e:
90:47:78:09:4c:da:fe:4b:17:e7:9f:76:8f:9e:94:
95:4f:da:cc:7c:16:4a:36:4b:1d:f1:07:69:4d:b2:
9d:95:f2:dc:1f:34:53:27:87:a9:1e:9f:6c:64:d4:
9a:47:d3:7f:a6:ab:d3:a8:bb:53:1a:f6:c6:e0:6d:
31:1f:92:ff:3c:3b:67:97:17:ab:19:ba:cf:2e:b9:
8e:f7:b5:92:f4:ed:be:84:e2:ca:c7:fe:7c:0a:67:
78:d8:27:b0:7d:fc:e3:fb:de:5e:49:e3:55:ba:82:
b8:41:39:17:bd:b3:8c:2f:84:e2:1c:47:5a:68:59:
3b:c1:6c:90:c4:91:75:b4:4a:f7:9b:9d:98:48:75:
20:47:2a:03:9e:9e:01:b6:12:63:a8:22:df:8b:ee:
01:be:8c:dc:92:c3:1b:c0:d3:e4:96:05:12:1d:dd:
0f:e3:0e:77:6a:98:50:a8:4d:fd:2b:de:ad:ea:d7:
44:ea:0d:4f:16:8d:b1:b9:59:04:f5:d3:f4:8f:92:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:ED:68:28:64:32:C3:2F:45:6D:7D:14:6D:BD:95:E5:B3:43:E8:53
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/7-1oKGQywy9FbX0Ubb2V5bND6FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.28.0/24
45.80.30.0/23
86.62.28.0/22
193.228.139.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
53:24:5e:45:d3:fc:c9:a1:08:40:5d:dc:e8:7b:ef:85:5d:b4:
9e:80:68:a6:e9:57:07:45:b5:f4:23:e7:32:55:7a:b2:3a:e2:
a8:c2:74:5c:88:58:b4:59:da:fa:07:9c:d1:49:29:8a:7a:46:
71:a2:09:bb:2b:32:32:64:cd:4d:2e:38:75:3f:1a:ea:0e:36:
15:f7:b5:c1:15:35:91:fb:2f:26:7f:a8:0b:47:64:d7:99:72:
09:ad:01:07:f6:20:69:29:07:e5:4d:7b:80:14:1a:52:ed:5e:
87:da:1a:27:d7:38:89:45:cf:42:95:49:df:f0:a9:25:96:24:
7a:7c:6e:18:b3:5b:db:e1:79:03:b9:64:42:11:30:8f:f2:86:
24:50:f7:ba:6f:ff:b7:12:f4:7e:90:4b:03:7f:12:8e:e9:dc:
5d:9b:20:6b:ef:a2:00:f1:d6:68:d0:7f:0b:ea:24:01:53:53:
b2:e5:82:d3:17:0c:1b:5b:0a:67:41:2e:b3:68:6b:70:8b:59:
02:a9:51:5b:36:61:23:34:e9:ac:c9:bb:ac:2f:a2:65:3b:dd:
54:f9:e8:93:89:6b:b0:e3:98:98:3e:f6:bd:39:84:73:c6:a1:
56:f1:37:3f:1d:84:94:30:02:22:ce:fc:c3:98:60:0f:8b:a4:
d9:e1:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:37 2025 by rpki-client