Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EznEKcL3M5gBThncKbROwmbYwbk.roa
File: EznEKcL3M5gBThncKbROwmbYwbk.roa (raw, json)
Hash identifier: KkmYTmMeTeNROb088dwBCIUhD/0/FCCNYk072qiIN34=
Subject key identifier: 13:39:C4:29:C2:F7:33:98:01:4E:19:DC:29:B4:4E:C2:66:D8:C1:B9
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018403002ADDCBE4C1605F626841039F78DE
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EznEKcL3M5gBThncKbROwmbYwbk.roa
Signing time: Sun 23 Oct 2022 04:00:53 +0000
ROA not before: Sun 23 Oct 2022 04:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 2.59.56.0/23 maxlen: 24
2.59.58.0/23 maxlen: 24
193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
5.181.176.0/23 maxlen: 24
5.181.178.0/23 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.12.82.0/24 maxlen: 24
45.12.80.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
45.91.136.0/22 maxlen: 24
45.91.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:03:00:2a:dd:cb:e4:c1:60:5f:62:68:41:03:9f:78:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 23 04:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1339c429c2f73398014e19dc29b44ec266d8c1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:ee:c4:f1:3c:2e:5b:11:12:6c:7e:24:a6:
1e:11:98:8d:03:4e:62:10:e7:b1:ee:56:f1:dd:a3:
61:08:3b:d3:0b:32:51:b8:24:69:63:1f:d0:ff:eb:
d6:c3:23:20:13:84:57:ff:f1:7a:f0:1d:89:09:6d:
6a:5e:89:6f:b3:a4:f6:64:04:94:1d:6c:24:7e:bb:
c7:3f:d5:4d:d0:3a:63:8a:6a:40:4d:e5:21:04:61:
4f:3e:41:53:53:c1:18:5b:e6:f3:07:9e:65:6e:cb:
65:dd:03:9d:db:0b:49:c6:a4:88:81:a1:05:89:9f:
54:3b:e5:72:f2:de:6a:fa:01:48:f4:b2:87:20:07:
fe:27:40:e7:cf:35:8e:ff:1c:f4:dc:44:41:ea:04:
31:b8:7f:8c:b0:f4:a1:ef:b0:0c:f4:ce:74:ff:35:
78:2c:17:48:40:0f:c8:e6:d2:c7:6e:69:6d:6d:b0:
26:1a:8e:f5:55:87:3a:59:91:eb:a2:b0:02:c8:7f:
98:56:61:ac:1b:00:90:f5:ad:cd:9a:a5:f5:b4:db:
78:bb:20:e7:66:6e:f2:50:d6:21:50:e3:c5:e6:c3:
01:93:07:ef:81:4c:6a:e1:9a:6b:0a:c1:d8:84:09:
34:24:cb:f5:95:51:c7:7d:84:a5:9d:1f:07:31:24:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:C4:29:C2:F7:33:98:01:4E:19:DC:29:B4:4E:C2:66:D8:C1:B9
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/EznEKcL3M5gBThncKbROwmbYwbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
2.59.56.0/22
5.181.176.0/22
45.12.80.0-45.12.82.255
45.87.172.0/22
45.91.136.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
d7:8b:fe:f3:6f:8c:85:30:c7:9f:39:a9:0b:b3:17:8e:9b:30:
a4:8c:2e:9a:4e:58:a5:73:7d:d7:44:c1:71:83:df:c5:3f:db:
cc:25:64:9c:f2:dd:fa:1a:cb:59:94:cd:0e:15:70:d6:81:d9:
2d:a4:16:cd:74:18:79:a3:22:87:a6:6c:7b:74:6c:d7:d1:50:
ef:da:ab:33:3c:b4:a3:7f:04:6b:d4:42:50:84:cb:1f:b0:0f:
43:20:e6:59:c6:f5:b1:92:42:de:62:e4:73:8d:38:6c:40:1c:
2d:c5:25:88:c0:92:39:5e:3a:83:3d:39:a9:69:b2:da:1d:fe:
9d:3c:5f:94:f8:d2:40:54:f4:2f:0d:70:9e:36:63:f0:26:49:
4d:87:0c:61:b8:05:53:9d:05:d2:27:00:e3:32:99:35:f4:9c:
1e:a1:df:92:9b:3f:e0:80:1e:5e:41:40:db:fd:6f:cc:7b:c5:
d5:79:fa:07:a3:73:26:14:8b:c0:6f:de:80:38:cc:5c:ea:80:
78:9f:7d:5c:80:57:cc:2c:30:25:b7:c0:b0:e7:c7:73:0f:9a:
71:7d:ab:1f:74:35:a6:f8:e0:0f:05:35:1d:a3:cd:62:88:ac:
e1:5e:ad:e8:63:ce:ee:6e:4c:d0:46:c7:7d:45:fe:d6:36:bb:
cd:d0:c3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org