Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/GRFu0Jdeuq2fltRikbGjXJkXbco.roa
File: GRFu0Jdeuq2fltRikbGjXJkXbco.roa (raw, json)
Hash identifier: sbegX3In9JXgNh2ySG+Sx67QZPR5hhrKLTQ4MHZbNdo=
Subject key identifier: 19:11:6E:D0:97:5E:BA:AD:9F:96:D4:62:91:B1:A3:5C:99:17:6D:CA
Certificate issuer: /CN=584510e996ca0b8a55cb18c228c997d63c31a781
Certificate serial: 01857127875E5F4C9F7A0863358E5570C784
Authority key identifier: 58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/GRFu0Jdeuq2fltRikbGjXJkXbco.roa
Signing time: Mon 02 Jan 2023 06:24:53 +0000
ROA not before: Mon 02 Jan 2023 06:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 85.158.142.0/24 maxlen: 24
85.158.143.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
193.109.255.0/24 maxlen: 24
46.226.52.0/23 maxlen: 23
193.109.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:87:5e:5f:4c:9f:7a:08:63:35:8e:55:70:c7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584510e996ca0b8a55cb18c228c997d63c31a781
Validity
Not Before: Jan 2 06:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19116ed0975ebaad9f96d46291b1a35c99176dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:1f:f6:f3:96:e8:f2:bc:ab:dd:d7:63:a0:
25:9a:3d:18:7b:a8:d3:58:85:eb:9c:83:2a:69:8e:
97:2d:2f:fe:0a:bc:99:d6:b5:e1:c0:69:0f:fa:c0:
ad:fb:0b:12:9d:92:c0:25:a7:f3:91:7f:b0:25:6b:
ca:72:d9:13:63:6d:e2:d3:fe:1a:bb:e0:a2:ff:da:
13:48:4c:46:a4:b1:b2:70:05:28:1f:26:4d:a3:81:
94:50:61:4b:f4:6c:22:b2:39:80:b6:b2:2d:2c:c0:
5f:fd:c0:77:b9:20:2e:82:6a:ff:2a:fa:b4:6e:3e:
f9:79:67:36:3e:5a:47:b7:cf:02:01:de:1d:ed:a6:
0b:0c:52:86:c0:28:96:8b:e8:fa:24:f8:3b:9d:33:
cd:36:9c:df:1e:10:f1:49:bc:37:4f:64:58:45:11:
e9:aa:90:19:e4:15:22:57:b9:3a:08:d9:a7:19:e2:
83:48:e5:82:f3:6d:99:54:11:97:b3:65:db:d3:f4:
cd:b6:e5:7d:08:d1:a0:61:fc:d9:0b:01:fd:46:fb:
9f:ae:72:ad:eb:49:3b:09:9f:ec:87:59:bc:24:d9:
f5:4d:5f:5d:0b:e0:56:e5:36:bf:20:a1:ed:46:b8:
3e:96:92:96:b5:e3:2a:6c:36:5d:7b:39:ff:74:98:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:11:6E:D0:97:5E:BA:AD:9F:96:D4:62:91:B1:A3:5C:99:17:6D:CA
X509v3 Authority Key Identifier:
keyid:58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/GRFu0Jdeuq2fltRikbGjXJkXbco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/23
85.158.142.0/23
193.109.254.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:d3:9f:d9:18:25:d4:79:98:8d:c1:2b:ce:3f:ab:f0:61:b5:
df:dd:be:51:31:a8:64:4b:e7:1b:7f:d6:0f:5a:c9:5f:b7:ef:
53:75:ee:16:0f:be:8a:eb:02:9b:bc:2d:a5:28:fa:75:13:9b:
9c:f9:22:0a:2e:8a:c6:53:35:4c:2c:91:77:8f:b1:38:e6:1c:
aa:a9:be:8d:d4:3d:bc:f2:09:5c:0b:74:f9:94:f3:e8:2a:ca:
da:2b:6f:c4:85:5b:f4:68:c1:f0:f8:d6:05:b9:76:c7:c8:f7:
0d:43:25:e9:7a:95:5d:84:a2:04:83:64:15:ca:ac:16:46:89:
ba:40:fb:1a:27:57:b2:70:ff:70:1c:ee:f1:91:d0:24:28:35:
36:0d:72:a8:4f:11:65:6d:62:b5:96:b2:a4:06:26:35:c5:9d:
fc:6b:59:0b:11:23:e4:31:6f:fa:d5:21:21:44:f1:e8:d7:86:
1c:9b:be:9c:f6:09:58:23:01:ff:4a:ab:39:43:1d:93:99:74:
19:1b:14:19:48:4b:b7:6b:f0:87:9d:3f:f2:5f:6f:21:cb:ff:
b3:5a:da:e5:06:35:4c:ab:ed:ec:9d:f3:09:ac:12:2a:62:ae:
51:ea:f0:95:00:4d:f0:2e:73:65:f7:70:05:80:fd:0e:11:fc:
80:c0:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 14:55:23 2023 by rpki-client on console-fra.rpki-client.org