Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GB-qnB9eUlQryAx1Ip7ziwWUub0.roa
File: GB-qnB9eUlQryAx1Ip7ziwWUub0.roa (raw, json)
Hash identifier: re+0wYgEZ5j5C2twvp5mFPI4tlLulpQPr7O7xjM1yX0=
Subject key identifier: 18:1F:AA:9C:1F:5E:52:54:2B:C8:0C:75:22:9E:F3:8B:05:94:B9:BD
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184C01EE48B5EF884AC9529E0D5AD7DD917
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GB-qnB9eUlQryAx1Ip7ziwWUub0.roa
Signing time: Mon 28 Nov 2022 21:22:40 +0000
ROA not before: Mon 28 Nov 2022 21:22:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 2.59.56.0/23 maxlen: 24
2.59.58.0/23 maxlen: 24
193.39.9.0/24 maxlen: 24
171.22.76.0/22 maxlen: 24
171.22.78.0/23 maxlen: 24
193.37.239.0/24 maxlen: 24
185.172.172.0/23 maxlen: 23
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
5.181.176.0/23 maxlen: 24
5.181.178.0/23 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.12.82.0/24 maxlen: 24
45.12.80.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
45.91.136.0/22 maxlen: 24
45.91.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c0:1e:e4:8b:5e:f8:84:ac:95:29:e0:d5:ad:7d:d9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 28 21:22:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=181faa9c1f5e52542bc80c75229ef38b0594b9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:25:33:9d:9f:76:0e:7e:e1:a1:af:85:9a:
a4:74:56:94:13:29:4c:7c:4c:45:0e:a3:ec:e2:9d:
92:4f:80:21:09:f4:dd:81:4c:07:20:2b:5e:72:00:
47:22:29:c8:b9:03:d4:76:4e:95:0c:e1:00:73:a3:
37:d9:78:42:ad:0e:02:57:a1:7e:ac:a2:ea:29:37:
85:02:e1:50:5d:a6:c9:95:b1:90:b2:9c:8d:c0:16:
2d:81:03:15:25:6b:ed:6c:3f:88:48:c4:b5:44:da:
93:45:c7:79:71:97:be:63:f3:df:42:43:5f:b8:a8:
28:75:11:b7:4b:37:3c:9c:6e:74:ae:71:77:61:53:
3c:e2:e7:05:ac:32:f2:48:4a:53:a3:b6:c6:02:ae:
f0:c5:82:d8:1c:7b:bd:c0:0e:74:9c:c1:83:1d:e4:
3a:b3:da:cd:42:10:c4:9e:6c:13:37:c8:ab:90:8f:
2a:8c:56:b8:5a:27:f4:a3:0d:23:7f:b4:2e:e2:bf:
33:fa:e0:41:04:e1:c3:1e:80:f9:4b:ba:89:cc:a6:
76:fb:18:f4:f4:e6:ed:c7:48:f7:b2:36:ef:44:f3:
96:98:f8:7c:2a:54:cc:ce:62:08:35:66:7d:d4:5d:
d6:dc:01:52:1f:3b:31:f2:e4:b6:60:c1:f4:1d:4d:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1F:AA:9C:1F:5E:52:54:2B:C8:0C:75:22:9E:F3:8B:05:94:B9:BD
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GB-qnB9eUlQryAx1Ip7ziwWUub0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
2.59.56.0/22
5.181.176.0/22
45.12.80.0-45.12.82.255
45.87.172.0/22
45.91.136.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
171.22.76.0/22
185.172.172.0/23
193.37.239.0/24
193.39.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:fa:42:be:41:6d:79:33:b4:39:7a:74:42:94:82:03:8c:de:
01:e9:25:4d:2f:fa:04:eb:ea:ca:7c:27:b5:d6:e9:1a:3e:1a:
91:1c:f1:39:09:11:8f:f9:2d:e4:f4:3a:59:22:0e:3a:d9:0d:
0a:13:f7:c7:fd:51:b3:c8:af:f9:91:0c:22:4a:60:f5:8d:72:
a4:2a:b8:50:c8:33:9c:5a:2e:c2:b5:cb:73:8b:3c:e0:b4:98:
c4:c9:3b:3b:67:df:92:33:c5:1b:ff:95:81:62:06:26:85:ca:
73:c2:07:0d:9b:73:a1:fa:d5:14:55:42:69:25:c2:24:ae:15:
e4:12:7d:6f:aa:49:f6:58:7a:ef:cc:d8:9f:38:ef:5d:13:f9:
b0:09:f7:e6:36:9d:6c:35:4b:1e:9d:cb:ef:ab:24:91:89:6c:
56:1e:e8:9b:bc:a1:9a:3d:76:b9:67:72:83:c0:ed:b4:9b:12:
e9:ea:a6:b4:64:96:2f:c3:2e:14:70:aa:92:e1:42:3c:14:97:
7b:8f:9c:0f:d6:c3:64:10:a0:a7:60:8c:52:12:32:07:d1:91:
41:30:d4:8b:f7:30:aa:0c:a9:64:fc:df:92:25:93:aa:df:df:
19:13:d0:d3:46:45:07:74:b2:a8:46:69:14:af:14:e5:36:51:
a2:2f:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org