Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/e6l59lgE1oxnoZsIUgQ9ExzOP-A.roa
File: e6l59lgE1oxnoZsIUgQ9ExzOP-A.roa (raw, json)
Hash identifier: WIGbsnNQggUGcFt7T2LP4m7T/73usE4aISzUEG1tbHk=
Subject key identifier: 7B:A9:79:F6:58:04:D6:8C:67:A1:9B:08:52:04:3D:13:1C:CE:3F:E0
Certificate issuer: /CN=584510e996ca0b8a55cb18c228c997d63c31a781
Certificate serial: 018571278896964D4D402E2AC3D352DB7AA2
Authority key identifier: 58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/e6l59lgE1oxnoZsIUgQ9ExzOP-A.roa
Signing time: Mon 02 Jan 2023 06:24:54 +0000
ROA not before: Mon 02 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21345
IP address blocks: 85.158.142.0/24 maxlen: 24
85.158.143.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
46.226.52.0/23 maxlen: 23
46.226.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:88:96:96:4d:4d:40:2e:2a:c3:d3:52:db:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584510e996ca0b8a55cb18c228c997d63c31a781
Validity
Not Before: Jan 2 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ba979f65804d68c67a19b0852043d131cce3fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:63:28:8e:0c:65:47:bc:40:b5:f5:f4:27:
8a:7f:b8:c5:1c:b4:1b:1e:ef:2c:68:b1:44:3d:42:
9a:b7:b8:e9:47:85:25:fa:67:52:d6:2e:a5:b6:3f:
4a:97:bf:6e:13:7e:8c:f8:fc:77:fb:97:eb:b4:f8:
4d:c9:54:1e:18:bc:07:0a:c4:23:87:92:ce:26:99:
b6:9b:05:68:8f:87:36:28:44:55:e0:c7:89:02:84:
de:1f:70:3a:ef:8a:f2:c4:f4:32:db:c0:9d:ac:37:
ad:fd:c2:79:e6:5d:4c:42:a8:dd:2a:92:76:e7:5c:
d5:61:42:60:ae:64:6b:03:0c:cc:e2:3a:6d:f0:04:
02:b3:4c:2d:f1:8f:79:ce:4b:ca:d2:d6:3f:9c:6c:
62:fe:90:fd:a0:3e:b8:ea:4e:8c:ca:c3:e1:9e:fe:
aa:8d:7c:d2:30:2a:5a:7b:e5:12:79:5e:82:64:90:
b3:cc:6e:81:09:02:c5:08:71:89:76:2f:ea:5a:3a:
49:62:63:82:39:60:a0:7a:b2:8f:66:b7:67:1e:89:
89:62:84:45:a0:e6:34:42:28:42:dd:07:5f:35:16:
93:58:6d:5e:88:62:34:a7:e2:59:fb:1c:9b:68:c7:
38:ec:2f:50:2c:90:dd:b9:fd:2d:48:bc:2d:fe:22:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:79:F6:58:04:D6:8C:67:A1:9B:08:52:04:3D:13:1C:CE:3F:E0
X509v3 Authority Key Identifier:
keyid:58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/e6l59lgE1oxnoZsIUgQ9ExzOP-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/22
85.158.142.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
54:f2:1f:11:52:41:c8:f9:66:4f:23:70:38:0b:e6:d7:68:dc:
34:84:9a:56:41:77:14:9d:f1:35:3a:23:9d:fc:84:de:8c:3f:
2f:73:8c:1e:97:d3:e2:82:5e:0d:74:f5:46:6f:5b:fa:6a:cf:
2f:10:15:e2:d6:93:f8:7c:2f:ec:cc:69:e1:41:21:b9:30:65:
a1:96:7c:af:d6:eb:34:0c:b4:4c:39:d1:be:83:cc:70:c8:78:
58:74:4e:95:bf:7c:d4:a9:4f:99:1e:fa:c5:d9:21:4a:f9:66:
94:2e:d6:64:83:cf:97:80:63:0a:ca:97:3d:42:91:76:38:db:
28:b1:3a:d2:af:34:51:98:e2:57:0b:a9:11:61:39:d3:cb:6f:
b9:8c:73:ad:50:d1:34:ce:d7:65:5a:74:95:25:cd:ca:a1:db:
bc:f1:d9:dd:35:58:8a:c2:d2:80:e0:bd:3d:6a:bc:18:e2:0c:
ad:8b:99:67:03:bb:f9:ab:28:d3:a9:b3:3c:e9:0f:d5:3e:99:
d4:92:5d:ab:cc:f1:75:76:a0:86:c2:4c:36:1b:de:f6:0d:39:
e5:f9:3c:22:a9:06:b2:a5:e4:1a:92:8d:1d:ae:5a:a9:76:7d:
3f:be:18:70:aa:6e:77:5e:39:5f:fc:58:c5:23:52:59:e0:55:
6d:cf:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org