Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1KTV9cU2UJtwqTe2gEdm1nyg1Gc.roa
File: 1KTV9cU2UJtwqTe2gEdm1nyg1Gc.roa (raw, json)
Hash identifier: q4z9icdH1g61EJ643DwoGqJuK5BGy9AO7zt3d1S9JeI=
Subject key identifier: D4:A4:D5:F5:C5:36:50:9B:70:A9:37:B6:80:47:66:D6:7C:A0:D4:67
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01824B57855B86B2166BA130506C4362CC38
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1KTV9cU2UJtwqTe2gEdm1nyg1Gc.roa
Signing time: Fri 29 Jul 2022 19:03:23 +0000
ROA not before: Fri 29 Jul 2022 19:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
5.181.176.0/23 maxlen: 24
5.181.178.0/23 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4b:57:85:5b:86:b2:16:6b:a1:30:50:6c:43:62:cc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jul 29 19:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a4d5f5c536509b70a937b6804766d67ca0d467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:d2:19:7f:b7:fb:5d:74:af:b3:90:9b:74:
57:58:96:35:3a:71:17:9e:30:e6:ca:65:06:27:75:
b5:58:6c:43:ab:88:3d:f5:00:ef:37:36:ba:a7:cb:
6b:44:55:dd:97:08:85:12:3a:d2:42:5c:c3:00:bf:
e7:55:05:94:03:ac:05:60:cb:54:b0:4f:17:1e:66:
34:70:c1:49:0d:8b:ab:90:7e:e6:b2:1d:a0:8e:63:
ff:73:74:35:56:fe:91:ab:17:7b:a2:61:7a:26:99:
d4:bb:fe:bc:c4:f8:c0:b9:db:46:59:49:90:96:d7:
3c:dc:c4:38:24:26:2d:fd:42:23:f7:0f:63:8c:23:
12:99:22:52:cc:97:6c:12:a7:1d:04:7a:74:7e:df:
5a:35:94:13:06:56:6e:b8:13:3e:e9:04:8a:fc:bd:
10:ea:af:82:03:4c:f5:51:54:e9:aa:b0:9f:25:17:
43:d5:52:03:f1:3f:98:53:ae:12:83:57:b4:11:4c:
9b:87:3e:b2:13:14:85:3c:df:7f:86:37:8e:75:87:
88:32:17:4d:d0:9c:3d:da:83:b8:cc:68:33:fb:4f:
44:00:c7:ca:f7:fc:0b:2d:8e:b7:f9:1e:9f:ec:41:
e1:9a:06:18:24:00:79:78:1b:f3:32:e7:83:d4:e2:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:D5:F5:C5:36:50:9B:70:A9:37:B6:80:47:66:D6:7C:A0:D4:67
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1KTV9cU2UJtwqTe2gEdm1nyg1Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
5.181.176.0/22
45.12.80.0/22
45.87.172.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
0a:02:d8:b4:25:eb:77:39:00:9d:21:1a:23:52:64:df:0a:bf:
98:8c:51:43:ac:4b:88:13:b1:f3:62:13:b7:98:29:52:3c:f2:
35:8c:ca:f3:85:2c:e7:b1:d9:9b:9a:4d:a0:bf:6b:5d:06:b0:
f0:32:fa:f3:45:d4:47:0e:ca:14:1b:72:7a:b7:75:16:aa:b0:
23:9f:43:16:35:20:34:fc:2e:88:81:4f:49:b3:f1:ad:bf:75:
1d:55:ce:b5:5c:20:e1:37:cf:1c:bb:9e:27:a8:4c:1e:04:b7:
95:25:4a:fe:b0:32:c5:0b:ce:d1:ca:f4:e0:5d:bf:3a:c2:2d:
f0:f3:6b:8a:28:f0:cb:d1:e1:c9:5b:e2:e2:7d:ab:49:94:2a:
ea:aa:60:4c:c6:69:31:8a:be:5b:cf:c7:45:56:d3:22:3b:0b:
83:e9:48:f8:a6:f7:01:75:de:4f:61:ec:c6:a2:72:32:e2:ed:
c1:78:c9:bf:1e:f4:1b:3b:78:c3:71:4f:29:d9:ea:3a:28:24:
27:00:55:b7:ab:f8:dc:31:3c:3b:d9:68:93:38:0e:66:4d:98:
2c:2d:8a:41:aa:04:61:de:e8:c8:ef:01:5b:66:e8:c7:d0:5d:
ca:17:26:bc:dd:af:5a:e9:45:6a:09:9e:92:59:77:98:ad:9b:
d3:9b:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org