Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/I5oZZ0H8uVbhg5QR0KLT3haDA8k.roa
File: I5oZZ0H8uVbhg5QR0KLT3haDA8k.roa (raw, json)
Hash identifier: 0pG55vzqZ019tF/Ym5fcH3Z0tr2L7y4DXFYUa8PQJGM=
Subject key identifier: 23:9A:19:67:41:FC:B9:56:E1:83:94:11:D0:A2:D3:DE:16:83:03:C9
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 094FF8B9
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/I5oZZ0H8uVbhg5QR0KLT3haDA8k.roa
Signing time: Sat 01 Jan 2022 12:04:04 +0000
ROA not before: Sat 01 Jan 2022 12:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156235961 (0x94ff8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 12:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=239a196741fcb956e1839411d0a2d3de168303c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:19:f3:a6:e6:07:34:30:78:65:ed:d2:3a:
86:3e:18:8f:70:75:fc:15:37:57:75:bf:d6:77:94:
9e:e0:75:c2:23:95:07:62:15:ff:cc:8a:17:5e:8f:
f1:f3:17:37:8c:89:63:ec:e1:e8:f3:8b:cc:81:49:
4c:88:72:fd:0e:10:14:f9:cc:59:93:21:36:e5:1a:
f9:ac:55:07:9c:9d:ec:51:c8:4a:5b:ad:dd:62:6f:
30:ba:29:f4:4d:9e:5e:7f:6a:ac:d0:ed:12:18:25:
97:ad:c9:df:38:32:36:3b:3f:19:4f:cb:5b:27:86:
ad:a6:4e:e8:6e:c7:5f:f0:95:37:10:9f:82:17:4f:
5e:8d:47:34:73:a0:73:9a:96:b7:50:83:d9:5e:d5:
2b:7c:df:07:b5:79:83:45:2c:69:9b:63:1c:f1:1b:
fa:89:4f:b3:b7:32:e3:b0:35:0f:8d:fd:4f:ce:6f:
cd:98:0c:59:84:dc:fb:c5:f2:ca:55:bd:6b:79:d5:
22:26:c1:55:13:ce:4a:0c:d6:58:ba:3d:22:92:78:
c9:35:96:c8:63:fe:48:71:dd:64:c0:fe:a5:19:8d:
41:d6:6e:a2:93:24:fa:fa:f3:f3:6a:83:f1:fe:65:
f2:c3:31:0d:f2:58:11:5a:04:2b:05:89:ce:53:29:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:19:67:41:FC:B9:56:E1:83:94:11:D0:A2:D3:DE:16:83:03:C9
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/I5oZZ0H8uVbhg5QR0KLT3haDA8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
193.38.53.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:79:f2:1f:dc:3d:7c:41:73:bf:1d:cd:62:d3:e9:d3:1c:cc:
6e:12:33:f4:25:46:3b:28:83:a5:51:73:44:df:a3:e5:07:0a:
10:ff:97:4d:f9:d7:fd:a6:31:33:e7:75:7f:05:89:56:54:b2:
41:b9:93:e1:d7:05:99:19:72:3d:21:e8:a6:0a:74:26:b0:9f:
10:fb:03:98:3f:60:a4:18:ee:99:3d:b7:0a:46:6a:48:eb:41:
c0:64:0a:4b:73:dc:59:aa:93:4e:1d:3d:27:df:9a:6d:bc:bf:
b3:9e:92:e6:1e:01:89:bf:fc:8c:c5:b8:39:61:77:ea:fa:2e:
8b:21:62:d6:03:4f:c2:a5:34:ba:d9:1b:37:92:84:05:c3:35:
aa:8f:8f:41:fe:69:5b:b8:e1:a5:a7:da:6d:7b:3a:22:77:37:
29:de:6b:23:73:0e:69:31:18:16:e6:38:1c:cf:7c:d8:41:69:
7a:28:5c:db:b1:70:d4:d0:78:98:d8:f1:e4:d4:4b:66:d5:fc:
0d:a3:1c:38:fa:91:f8:c8:a4:c1:e9:5c:7b:d2:e0:5a:66:d0:
24:70:cb:fc:8b:2d:ce:69:a5:47:52:36:66:78:6f:3d:cf:8f:
a6:64:4e:3a:47:dc:05:ae:33:97:8b:09:1a:77:a5:d9:36:11:
84:c5:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org