Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/6Mp3y3m0Sg8AzO866J0xFCl9abw.roa
File: 6Mp3y3m0Sg8AzO866J0xFCl9abw.roa (raw, json)
Hash identifier: mpPEyH3S7wywnkPTFfQCccAGRPweda5qwXJ13ayHATs=
Subject key identifier: E8:CA:77:CB:79:B4:4A:0F:00:CC:EF:3A:E8:9D:31:14:29:7D:69:BC
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 098887D4
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/6Mp3y3m0Sg8AzO866J0xFCl9abw.roa
Signing time: Mon 24 Jan 2022 17:40:33 +0000
ROA not before: Mon 24 Jan 2022 17:40:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.137.99.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159942612 (0x98887d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 24 17:40:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8ca77cb79b44a0f00ccef3ae89d3114297d69bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:d3:67:dd:e1:1e:62:94:b8:31:6a:d3:1f:
9b:b8:95:93:de:ae:5d:6f:63:c9:71:b6:bc:72:31:
87:75:2e:4d:31:17:d4:97:dd:43:d5:5e:64:d3:eb:
7b:e5:8d:02:ac:fd:d6:95:0f:25:20:25:d1:d7:f8:
36:ef:52:97:26:ca:95:03:bf:ef:83:1b:46:2b:01:
51:fa:bb:1f:98:6d:8f:c9:d6:e3:29:b3:87:3b:c6:
9c:e7:b8:fe:d7:6e:92:97:5d:50:96:45:63:89:21:
2c:c2:86:bd:5d:94:19:a9:a1:72:26:11:29:92:06:
e4:e4:10:06:e7:70:dc:ad:cc:26:42:b3:80:d3:b2:
dc:15:38:49:99:ab:71:2f:95:cc:5b:c9:c9:57:35:
d8:a0:c2:f5:46:83:76:ed:1e:5b:c1:23:13:92:03:
5c:a0:09:89:7d:4c:82:d9:f0:32:cc:4f:30:15:a3:
1c:a0:bd:bc:a7:c6:23:27:2f:3e:e7:32:41:84:7b:
d4:47:13:38:3b:d7:bf:a3:45:ed:53:76:fc:7b:b1:
ab:8b:ce:3a:2a:41:ac:e6:9c:10:5b:95:cb:99:45:
c1:2b:87:db:84:d9:b2:8f:18:6b:d7:ae:91:26:97:
01:c2:72:7b:10:3f:be:d5:5a:dd:13:24:29:47:7d:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:77:CB:79:B4:4A:0F:00:CC:EF:3A:E8:9D:31:14:29:7D:69:BC
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/6Mp3y3m0Sg8AzO866J0xFCl9abw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
45.137.99.0/24
45.158.58.0/24
85.209.220.0/24
193.37.239.0/24
193.38.53.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:fe:96:49:d5:ac:0f:b5:96:a9:38:4f:ad:42:8d:64:d6:08:
28:62:f2:4a:04:0a:f7:4e:12:92:d4:ea:51:4d:c5:92:74:d0:
42:fa:51:90:2d:bc:e1:b6:1c:3a:c8:db:7f:01:5b:76:84:05:
76:6c:b1:bd:f1:ff:52:fb:40:94:04:83:b9:33:85:50:61:a8:
e6:ab:79:f3:9a:b2:3b:7a:ec:dc:84:70:ea:4b:98:b1:68:24:
42:74:cb:18:fd:b2:1e:90:65:cb:64:ae:69:a3:c4:cd:23:a1:
63:fb:15:f1:41:3c:ce:8c:e9:d4:cd:2c:11:87:58:a2:51:7e:
84:0e:59:f8:13:f5:3b:92:fb:fd:21:27:7f:0b:3f:d2:8c:95:
46:9b:26:d2:85:b2:58:fd:a6:1d:00:ef:21:3f:a1:47:be:e2:
0d:03:54:35:26:e3:e5:93:d6:ad:c4:23:75:8f:3b:16:32:1a:
46:f4:e9:af:82:55:bf:5e:8b:dd:5c:92:b8:c7:72:41:63:a9:
ab:dd:64:8c:df:98:5b:c7:e4:10:fd:13:80:c0:9c:ec:09:09:
05:d0:fa:54:c8:9c:c7:6c:59:68:fc:13:43:46:36:27:19:d4:
c0:e3:9a:84:e4:2b:e1:22:d3:7d:01:ab:e0:34:c8:62:d9:44:
81:f6:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org