Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/OjhyrH5XZAaP_2BPLRB3uSo8AQg.roa
File: OjhyrH5XZAaP_2BPLRB3uSo8AQg.roa (raw, json)
Hash identifier: zbup+66nvFnXbfUcaFNTT0NxKEHLu0f8yNfy+lWz1S0=
Subject key identifier: 3A:38:72:AC:7E:57:64:06:8F:FF:60:4F:2D:10:77:B9:2A:3C:01:08
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A0EC360
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/OjhyrH5XZAaP_2BPLRB3uSo8AQg.roa
Signing time: Fri 11 Mar 2022 18:04:09 +0000
ROA not before: Fri 11 Mar 2022 18:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168739680 (0xa0ec360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 11 18:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a3872ac7e5764068fff604f2d1077b92a3c0108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:70:a4:43:8a:82:95:4a:b6:7b:e8:6d:77:
72:d3:03:cc:f4:e1:e9:76:ae:c5:22:7e:48:19:3a:
97:06:a1:58:45:64:ec:66:3d:2e:0c:e1:f0:67:1c:
f0:64:2a:85:b0:d7:ea:a5:64:55:47:21:33:98:ea:
15:f9:68:b4:45:e1:01:3e:94:25:e6:36:22:ef:80:
fc:d9:88:9f:06:78:7a:7b:1f:4b:bd:ac:25:1e:ff:
22:1e:97:2e:69:a8:74:ee:d9:f7:a5:fe:e0:5c:85:
73:c8:cb:15:64:95:f7:af:e6:d1:a4:f5:b9:07:0c:
f5:43:00:60:38:68:9a:c4:53:5f:1d:63:68:a9:5f:
de:58:47:d5:0f:2b:fc:60:79:e1:c3:ee:ec:f3:64:
2b:49:1e:a1:a4:c9:c8:51:84:11:5c:7a:cf:e1:3b:
eb:0f:cd:67:a9:b1:f5:ae:30:7c:92:14:30:15:de:
ae:8c:f1:2a:9c:31:f5:fe:72:54:a4:e1:9c:76:1b:
f9:5d:13:6c:32:47:2d:a3:3a:e9:86:bd:93:de:20:
e1:93:76:39:cb:5d:d5:f4:43:d1:f0:88:aa:8b:28:
1b:43:c8:70:1a:b2:9e:ff:11:be:db:47:65:bb:4e:
b2:e9:24:2c:13:92:ba:9b:5a:b3:0c:4d:3b:8c:8e:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:72:AC:7E:57:64:06:8F:FF:60:4F:2D:10:77:B9:2A:3C:01:08
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/OjhyrH5XZAaP_2BPLRB3uSo8AQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.96.0/24
45.158.56.0/22
85.209.220.0/22
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
9f:cc:9e:73:56:0d:54:10:2d:a6:d7:8b:d6:45:ae:9c:21:70:
59:61:c5:2e:25:06:81:34:fc:37:d2:81:d3:e2:cf:d1:bf:5e:
1f:0e:e3:f1:5f:82:25:9c:79:38:5d:51:8f:45:cb:98:7f:e2:
89:c6:c9:11:6b:16:af:f9:34:31:e0:91:aa:a5:07:e2:23:8d:
7e:d0:c7:62:62:85:0d:35:d5:c4:b3:a0:39:61:eb:b0:c7:fd:
e0:e7:06:2e:b8:d7:f0:eb:ec:64:4a:c8:88:b9:ad:0d:cf:5d:
49:c8:7e:ba:03:b6:4c:3b:b5:ac:1d:69:4c:be:fc:94:11:80:
85:35:00:3a:ca:d6:3f:14:85:5d:9b:a6:cd:fb:76:5d:cb:71:
6c:f1:b0:32:58:bf:40:41:32:6e:50:55:86:67:c9:7f:38:83:
4e:ca:c8:c3:4e:50:00:7f:28:e4:59:ab:3b:03:90:3f:ab:d3:
41:3c:48:24:9e:7a:e6:2d:8f:cd:f4:0a:54:66:32:3a:50:d4:
89:c0:93:79:c9:40:1e:12:a4:ad:57:45:76:eb:6c:3f:0c:15:
60:6e:d4:a1:73:d6:f5:85:af:98:88:ec:89:ed:ff:4a:1d:0c:
67:fc:45:64:03:9b:b9:1d:93:38:ec:ac:8d:05:79:50:1b:e3:
37:86:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org