Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/4gLCwvev8vTaGehJxLT2aw-0H_s.roa
File: 4gLCwvev8vTaGehJxLT2aw-0H_s.roa (raw, json)
Hash identifier: 54OqGy6trh18leoNgyup/ixHgXDMU04UOCHnzNRc9xY=
Subject key identifier: E2:02:C2:C2:F7:AF:F2:F4:DA:19:E8:49:C4:B4:F6:6B:0F:B4:1F:FB
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A1A7998
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/4gLCwvev8vTaGehJxLT2aw-0H_s.roa
Signing time: Mon 14 Mar 2022 23:19:24 +0000
ROA not before: Mon 14 Mar 2022 23:19:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.38.53.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.137.97.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
85.209.223.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169507224 (0xa1a7998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 14 23:19:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e202c2c2f7aff2f4da19e849c4b4f66b0fb41ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:4a:c1:e8:70:f9:73:68:17:2a:d0:34:2f:
83:ba:ec:ff:9f:28:33:0d:b1:82:fc:9e:8c:1c:e3:
68:8b:36:c7:4b:86:99:79:e4:57:57:2e:1b:32:e7:
f0:c0:50:dc:aa:52:9f:04:e8:fc:47:17:24:19:63:
be:51:10:02:ca:69:7e:fd:bb:0d:5b:06:ba:d8:73:
93:3e:24:4e:f3:3b:d6:4a:a6:53:30:61:ae:fe:72:
aa:21:58:cd:45:e1:f0:22:61:1a:df:8c:31:fc:ad:
fb:b5:3d:41:ec:b7:84:3c:61:9d:6d:50:96:17:c9:
b0:8c:6e:b1:68:04:1e:d9:8d:7a:e2:99:aa:95:30:
03:a9:22:6d:e0:fd:fb:05:f9:94:2f:cc:24:b6:54:
39:44:5d:4f:c9:37:13:03:cf:ec:a9:fd:10:1f:54:
21:e5:c4:68:19:c4:7e:d0:70:bd:08:ef:df:af:ac:
fd:4c:76:49:be:82:f6:22:3e:e5:d5:4f:dc:36:6d:
a1:6b:10:e6:c1:39:50:e7:4f:84:7c:4c:bd:fc:01:
9c:07:8e:3d:2b:e9:f8:ac:dd:91:d0:3e:5d:7e:1a:
9f:44:2b:e4:94:58:e3:ce:2a:51:7c:b0:51:9f:e4:
e8:7e:32:c1:fb:65:b8:97:7d:7f:6a:ec:ee:2a:ac:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:C2:C2:F7:AF:F2:F4:DA:19:E8:49:C4:B4:F6:6B:0F:B4:1F:FB
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/4gLCwvev8vTaGehJxLT2aw-0H_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
85.209.220.0/24
85.209.223.0/24
193.38.53.0/24
Signature Algorithm: sha256WithRSAEncryption
60:39:af:16:cb:55:53:3b:e1:47:f3:9c:1b:87:6c:1a:7f:5a:
f7:b7:16:5d:7c:cb:8f:31:7c:da:9b:d4:aa:fe:12:1a:2d:8e:
cc:5a:cd:cc:ad:81:0d:f4:82:36:d4:ce:e7:99:28:c3:8c:94:
b9:73:ec:9c:e3:20:75:48:bd:3e:1b:cc:b4:f3:85:51:07:d3:
83:3d:89:bc:19:fe:c0:ef:50:09:55:f9:6a:db:64:99:a9:a1:
26:1f:90:3a:65:be:9b:29:80:3d:91:cf:66:51:e6:05:cd:9b:
a9:44:f4:12:dc:59:3a:3c:d1:93:16:69:a2:a1:0d:35:f3:16:
4c:1c:79:9a:e4:60:2f:64:34:fd:80:ac:7e:1a:b8:34:8a:7a:
d0:a3:3e:c2:48:1e:a5:b5:b8:27:b1:0e:36:94:54:25:c2:b5:
5e:6b:96:80:dc:42:f5:46:26:bd:f4:fc:60:b6:4d:0f:7b:30:
84:a4:c5:48:37:82:bb:f9:1e:82:5a:5e:fe:e0:11:6a:e5:3a:
3d:41:ee:ac:29:64:ee:39:6c:60:57:cb:81:40:74:e7:94:53:
c2:29:f3:f7:d3:99:b8:45:b3:26:6d:6e:39:5a:ac:8f:d0:a9:
4f:8b:ca:99:5c:e3:08:fb:8d:e6:c9:ea:42:97:62:93:58:da:
9f:56:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org