Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/poFR1TdiBjxW26whCO0GRnWe1WE.roa
File: poFR1TdiBjxW26whCO0GRnWe1WE.roa (raw, json)
Hash identifier: eko1lBHdh993kN+c/BBev5VrXE8gsi+frPoMom7pbA0=
Subject key identifier: A6:81:51:D5:37:62:06:3C:56:DB:AC:21:08:ED:06:46:75:9E:D5:61
Certificate issuer: /CN=584510e996ca0b8a55cb18c228c997d63c31a781
Certificate serial: 04DAF3D9
Authority key identifier: 58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/poFR1TdiBjxW26whCO0GRnWe1WE.roa
Signing time: Sat 01 Jan 2022 05:04:35 +0000
ROA not before: Sat 01 Jan 2022 05:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21345
IP address blocks: 85.158.142.0/24 maxlen: 24
85.158.143.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
46.226.52.0/23 maxlen: 23
46.226.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81458137 (0x4daf3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584510e996ca0b8a55cb18c228c997d63c31a781
Validity
Not Before: Jan 1 05:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a68151d53762063c56dbac2108ed0646759ed561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:4a:12:29:8a:69:fc:a0:46:74:7f:4e:1f:
ef:47:cc:73:c0:c2:a2:56:cd:28:19:38:14:35:43:
9c:f7:89:38:d8:61:51:ba:9d:cc:a3:62:92:cc:31:
2f:17:e3:9e:cb:69:a7:ba:70:2a:be:96:ba:17:0a:
e2:c7:37:f0:ae:5d:9d:5e:b1:f3:03:e8:13:c3:87:
ef:5d:ad:5b:f4:19:93:10:e4:75:29:34:97:1a:15:
f6:bb:9a:78:fe:cf:ad:86:a8:3a:98:dd:67:20:a4:
52:91:b5:29:16:33:33:0e:c9:43:35:ed:e9:13:cf:
96:27:a2:46:73:95:f5:49:20:02:86:5d:1a:fb:08:
af:74:3a:7b:6b:a4:97:d0:ed:05:2a:f3:c5:0b:54:
73:02:4b:3f:92:a6:bd:64:aa:45:c0:40:30:b8:a1:
16:92:03:59:0f:cc:24:ad:29:ae:4f:fb:1e:a4:32:
cc:37:2e:6a:c4:e3:b3:fd:07:50:65:1e:70:7a:69:
df:40:bb:42:f4:bd:3d:38:91:cd:7b:2a:44:c3:b4:
cd:80:0c:b8:10:ac:ef:dc:b0:c9:5d:8a:f9:01:51:
46:f6:45:84:94:70:1d:08:e3:78:a0:b4:9f:e6:91:
4c:04:5f:cf:d8:82:e3:91:2a:be:d6:7e:40:f4:d3:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:51:D5:37:62:06:3C:56:DB:AC:21:08:ED:06:46:75:9E:D5:61
X509v3 Authority Key Identifier:
keyid:58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/poFR1TdiBjxW26whCO0GRnWe1WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/22
85.158.142.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
85:69:6c:96:8a:72:05:45:be:b1:90:25:58:98:3e:7e:b6:53:
e4:91:fa:fe:1e:c0:43:ed:5b:2b:15:c4:e0:46:97:91:94:56:
e0:7c:0d:2b:df:c7:0a:40:0d:f6:a2:f0:39:bc:d9:4f:e6:78:
69:8b:db:d7:0b:00:59:e0:de:e5:59:03:0a:85:a9:79:67:3c:
db:fb:1a:b7:da:c6:ec:b7:1d:76:01:bf:26:83:4d:65:47:ed:
d6:cf:e7:32:7e:30:38:96:99:96:bd:10:f6:76:1e:0c:36:3f:
a8:db:44:2e:43:6f:2f:74:74:af:07:6a:95:20:9e:95:f9:8f:
74:fa:51:34:6d:71:3c:06:24:a7:06:06:60:bb:62:73:20:d3:
33:01:82:52:06:23:db:6c:cb:3a:b8:ff:b7:19:29:3f:2b:22:
f5:89:15:92:3b:8a:bb:3c:cb:b6:6b:8e:52:ec:64:e2:f6:8b:
7f:48:b9:b9:f4:61:af:4e:37:c6:7a:fd:10:75:d1:60:f5:14:
6d:11:40:4f:15:a8:e7:54:0e:a5:8e:a0:0d:e4:3b:b9:dc:01:
17:c2:20:d5:b9:5d:9f:73:48:c3:f9:c0:27:8e:c8:d9:26:32:
a8:f9:63:53:fd:0d:2d:a6:08:52:a5:37:2b:92:32:f5:b7:5a:
7b:8e:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org