Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5f5js7pi9rO2bZJ6D3KpNicwReQ.roa
File: 5f5js7pi9rO2bZJ6D3KpNicwReQ.roa (raw, json)
Hash identifier: U8vTIOSUig68ZNTLRG9DPEEy3dhv26g1vJD/HBBMAqc=
Subject key identifier: E5:FE:63:B3:BA:62:F6:B3:B6:6D:92:7A:0F:72:A9:36:27:30:45:E4
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 098CFBB3
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5f5js7pi9rO2bZJ6D3KpNicwReQ.roa
Signing time: Thu 27 Jan 2022 00:39:06 +0000
ROA not before: Thu 27 Jan 2022 00:39:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
193.38.53.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160234419 (0x98cfbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 27 00:39:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5fe63b3ba62f6b3b66d927a0f72a936273045e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:67:09:e3:68:90:13:3b:69:fe:6a:1e:71:
7d:4c:d3:87:82:2c:37:30:6d:39:8e:f7:ae:f1:a4:
95:43:27:67:d5:bf:d7:f6:fc:de:44:b4:96:f4:50:
d2:36:45:32:2e:94:9f:ba:2e:0a:d1:e2:75:61:05:
fe:3f:f4:86:e6:2d:29:41:01:57:bf:47:5e:8b:a2:
65:c2:a6:d2:58:b1:46:e6:6e:f1:8f:ea:70:3d:04:
3b:03:e0:81:43:fc:df:5e:1b:c6:87:0f:1a:5e:4b:
57:e0:38:0c:1a:a9:c9:aa:c4:81:66:35:f6:84:e3:
ee:ef:17:c1:12:a7:d2:38:55:bb:45:6a:3c:c6:cf:
86:15:19:ca:26:2d:ab:6f:81:82:31:7a:a4:b0:68:
ec:6e:ff:ca:63:64:7d:ac:66:c7:ef:d2:6f:44:08:
37:d4:9d:4e:c2:ca:62:35:4c:52:d4:31:27:f6:97:
28:26:a2:d7:50:f0:9b:05:52:3e:09:3f:42:b6:51:
6f:c6:7c:5c:7b:a5:6a:48:10:7d:4e:03:07:af:2e:
55:2c:4f:8a:fc:50:08:66:89:5e:0c:38:66:3b:c0:
ac:31:5f:0f:c5:4b:84:92:ba:94:58:80:7e:4e:74:
56:01:87:66:82:65:8d:ee:13:70:08:16:87:fa:67:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:63:B3:BA:62:F6:B3:B6:6D:92:7A:0F:72:A9:36:27:30:45:E4
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5f5js7pi9rO2bZJ6D3KpNicwReQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.96.0/24
45.158.56.0/22
85.209.220.0/22
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
6c:50:94:f3:2f:14:af:07:ff:2a:ac:cb:51:6e:26:44:4d:a6:
09:94:07:62:e8:5c:0e:29:73:0f:c6:ba:73:48:64:9e:94:84:
72:06:f9:18:cc:2c:9b:5c:c0:e6:97:e7:d8:e5:70:ad:c5:33:
8c:9e:d0:94:5b:5d:79:02:76:64:ff:26:ea:f5:0e:77:2d:db:
4d:03:69:ba:2b:7a:9c:4f:26:c8:aa:82:27:80:2a:b1:a2:e7:
d4:1d:df:4d:44:ec:39:03:44:a2:26:c2:f0:ea:42:1f:67:1c:
ef:e0:fa:21:b1:4b:4a:29:2a:e7:57:f1:80:e5:9a:22:cd:c4:
93:3f:20:0a:b1:4c:ea:f5:b6:d8:d3:1e:18:ef:5d:68:ab:2d:
4d:48:47:50:18:29:58:c5:fd:d8:1a:5b:53:ca:20:34:25:82:
97:69:55:14:27:7a:ee:3c:4f:df:43:4a:aa:b1:9b:2e:77:49:
6b:aa:66:69:58:87:d4:f5:30:89:5f:b7:c1:8c:c3:9c:8e:15:
48:17:18:fb:0c:de:e7:66:d7:dc:43:71:31:af:43:14:69:e9:
ed:90:f0:ea:17:27:43:f4:2a:ed:61:4b:19:ad:24:32:43:62:
8b:cf:a6:25:ab:05:b3:e1:79:2c:79:1d:86:9c:c9:83:d7:0b:
38:2f:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org