Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1WXqI1o5ChoUAhRDebhOB8h9OnE.roa
File: 1WXqI1o5ChoUAhRDebhOB8h9OnE.roa (raw, json)
Hash identifier: gI1x82g58IHFCJ82As2KIzvPoSVvr6DGxgEem1qkjDg=
Subject key identifier: D5:65:EA:23:5A:39:0A:1A:14:02:14:43:79:B8:4E:07:C8:7D:3A:71
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A419671
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1WXqI1o5ChoUAhRDebhOB8h9OnE.roa
Signing time: Mon 28 Mar 2022 18:45:38 +0000
ROA not before: Mon 28 Mar 2022 18:45:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172070513 (0xa419671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 28 18:45:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d565ea235a390a1a1402144379b84e07c87d3a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:83:f7:b9:4f:6a:7c:04:ba:d1:1d:17:c3:
bd:cb:6d:91:ae:a4:d3:a5:5c:40:9c:dc:45:37:df:
ee:69:cc:aa:e5:56:2c:89:fc:61:20:2a:27:e9:2f:
e9:1c:12:c3:b3:40:b3:e5:89:26:5a:ec:88:9e:db:
a5:ab:93:5d:c8:e9:9a:3d:8b:f2:fd:ac:d0:72:13:
6b:1c:5b:69:08:9a:8b:3b:2b:4d:3e:85:72:d1:eb:
e1:fd:11:2d:bc:56:a0:19:ac:d0:66:ce:f5:fa:63:
0c:a7:16:18:c7:a0:35:24:b7:2a:ad:6c:f3:59:d7:
84:90:23:00:9a:95:8c:d0:37:55:46:b4:8c:ac:67:
33:ac:be:ce:73:07:32:00:84:b8:30:42:2f:8f:e2:
d2:c4:4e:98:27:31:61:05:5f:b3:51:28:73:85:1e:
18:36:77:60:6b:c9:c7:94:87:6c:7a:14:39:e4:ab:
f1:26:7f:e8:85:fc:f0:db:b3:42:aa:96:4b:b5:43:
1d:42:bc:5b:a9:bb:a2:60:e5:ac:6c:8e:cc:14:9d:
e2:51:09:ab:e8:f9:d5:4c:f6:51:29:32:0b:91:88:
5c:5f:02:01:68:f9:f8:46:cb:8b:47:bf:f5:e6:f6:
cf:38:a4:91:0a:00:89:55:0a:56:e7:6d:7e:ff:d1:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:EA:23:5A:39:0A:1A:14:02:14:43:79:B8:4E:07:C8:7D:3A:71
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1WXqI1o5ChoUAhRDebhOB8h9OnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.96.0/24
45.158.56.0/22
85.209.222.0/24
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
4a:8d:f9:46:87:2a:e9:94:e6:18:a6:8e:82:c0:f9:a5:2f:e6:
d8:d1:b0:06:c0:c3:36:58:9c:5e:3d:89:52:15:93:a9:60:58:
eb:f3:12:88:39:a9:36:ff:68:44:90:db:01:19:89:f4:5e:e3:
1e:e9:58:ee:94:e0:24:5c:82:7a:ce:07:a8:02:73:a7:b1:af:
5e:7f:09:0c:32:d1:38:a9:a4:12:a4:1e:0b:33:f9:18:19:14:
9d:ce:e6:3d:2a:18:90:0a:80:16:cc:36:b1:f2:8a:21:33:a7:
81:47:d3:e2:42:60:90:8a:33:f8:5a:4a:20:5a:8c:20:87:a6:
b1:a2:1a:fa:7c:d6:33:1c:e9:0b:b1:71:bd:d1:9a:bb:49:4b:
59:12:8c:c3:83:d8:89:45:86:d7:e5:63:b7:f5:b6:38:09:25:
93:c1:56:d6:7e:6b:e1:00:46:3b:7c:22:65:1a:22:69:70:0b:
5a:f8:7b:61:7a:e0:5e:11:f5:7b:d7:71:4b:55:1f:2f:63:b9:
8f:c8:93:45:69:9f:35:77:3a:f3:42:9e:1b:6c:b4:b6:7f:fc:
23:43:e9:14:98:29:3e:f4:ab:9b:46:a1:db:e4:d0:fd:02:de:
8a:df:af:a3:dc:09:ea:42:e6:34:70:ce:aa:9f:48:69:e0:e4:
4c:bf:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org