Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/M3Y-AsBGp0Z00uPZAGvKHItVyYk.roa
File: M3Y-AsBGp0Z00uPZAGvKHItVyYk.roa (raw, json)
Hash identifier: gSpDjSGZyFuzpQ61M4wSnBOCZLgMYXUQGzTUKWa3uPw=
Subject key identifier: 33:76:3E:02:C0:46:A7:46:74:D2:E3:D9:00:6B:CA:1C:8B:55:C9:89
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A3131A8
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/M3Y-AsBGp0Z00uPZAGvKHItVyYk.roa
Signing time: Wed 23 Mar 2022 23:33:51 +0000
ROA not before: Wed 23 Mar 2022 23:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.38.53.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.137.97.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170996136 (0xa3131a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 23 23:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33763e02c046a74674d2e3d9006bca1c8b55c989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:13:18:a9:9b:72:26:1c:3c:69:c6:34:93:
04:96:69:00:95:c8:60:9e:3f:08:9c:1d:ff:0d:48:
1f:fd:d5:75:56:6a:bf:34:0a:7a:2f:1e:0a:bc:d0:
da:88:68:eb:c4:54:b4:78:65:f2:9b:fd:0f:c7:78:
49:91:25:64:ab:88:ed:e6:91:14:b7:1e:3a:41:18:
b5:6a:ea:14:5a:ce:1f:f1:ee:3a:13:86:87:43:df:
22:ea:8a:96:8c:1c:93:67:31:80:01:33:4a:79:40:
cd:a6:c3:46:c6:29:0f:e2:86:ef:34:54:37:65:3a:
ba:3f:42:90:47:95:20:93:f2:f4:ba:3c:96:7d:89:
c1:93:c0:f0:dd:a4:a3:c0:af:12:bd:d6:6b:cd:c8:
a2:60:e8:89:a0:76:b4:ef:e5:92:c0:d7:c9:f2:24:
e8:82:4d:c4:3f:3f:b7:88:4a:a6:3a:7a:4f:5b:2f:
4a:95:ef:e6:bc:c7:8c:ca:b9:fe:3c:61:db:96:d6:
45:c5:a0:e1:0e:97:c1:99:83:eb:a2:8e:2a:47:89:
18:f8:c2:a1:98:83:f9:92:1e:61:5f:87:4a:cf:e1:
a4:85:01:52:83:e7:97:4c:05:ef:f6:a8:30:67:2a:
fa:3c:8b:c0:c4:ba:44:b1:24:30:be:de:27:52:32:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:3E:02:C0:46:A7:46:74:D2:E3:D9:00:6B:CA:1C:8B:55:C9:89
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/M3Y-AsBGp0Z00uPZAGvKHItVyYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
85.209.220.0/24
193.38.53.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a6:e2:ea:20:bc:04:a7:d2:e6:07:db:0d:66:72:a0:ab:37:
76:5d:9c:71:75:80:3a:fb:28:6a:ca:a5:9d:16:09:a5:35:13:
ef:8c:5e:38:07:d2:f7:28:94:e4:42:1c:fa:21:97:02:c2:5b:
69:08:03:a6:75:71:e5:d6:b5:ae:24:d1:ab:97:c8:ff:99:be:
76:07:55:5a:98:5e:56:c5:e9:3f:c6:f4:df:27:7d:39:69:19:
3c:c5:94:3c:89:a6:6f:42:2f:3c:b1:7b:20:1d:00:87:c5:6d:
50:9e:cc:2a:a3:7b:52:3d:22:25:f0:18:7f:87:7a:5a:3c:3d:
33:42:a2:eb:3c:44:ed:07:a6:74:ee:4e:0e:fc:33:bc:8f:d2:
b3:45:f6:67:a6:f5:27:57:c3:41:72:69:65:2c:35:5c:23:cc:
f7:c0:ab:f7:34:e7:53:38:35:56:e0:cd:c3:1e:e2:31:3b:4c:
f2:4f:26:1a:94:cb:8a:e2:cf:c7:c5:ed:c2:10:9c:48:58:b2:
5a:1e:44:15:0d:ee:dd:2f:a2:8a:ca:c1:f5:3a:cb:68:d9:46:
c8:e0:57:4b:f9:ae:35:ef:89:44:b8:b7:5c:34:0b:0b:25:22:
4a:99:94:52:c0:42:7b:b3:ed:3a:dd:ad:14:73:32:7b:78:48:
aa:61:5e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org