Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/PxpqD2SFRQcfw6aR829utPQEMf4.roa
File: PxpqD2SFRQcfw6aR829utPQEMf4.roa (raw, json)
Hash identifier: FBrArx0PeSM0RDdvKaDxX78Ny8z0r92eTPYTNxJcQM8=
Subject key identifier: 3F:1A:6A:0F:64:85:45:07:1F:C3:A6:91:F3:6F:6E:B4:F4:04:31:FE
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184D993714912961E57B3D758B31F94BC3F
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/PxpqD2SFRQcfw6aR829utPQEMf4.roa
Signing time: Sat 03 Dec 2022 20:00:29 +0000
ROA not before: Sat 03 Dec 2022 20:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 2.59.56.0/23 maxlen: 24
2.59.58.0/23 maxlen: 24
193.39.9.0/24 maxlen: 24
171.22.76.0/22 maxlen: 24
171.22.78.0/23 maxlen: 24
193.37.239.0/24 maxlen: 24
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
5.181.178.0/23 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.12.80.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
45.91.136.0/22 maxlen: 24
45.91.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d9:93:71:49:12:96:1e:57:b3:d7:58:b3:1f:94:bc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 3 20:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f1a6a0f648545071fc3a691f36f6eb4f40431fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:ed:27:ff:52:3a:e6:f6:04:ac:60:99:b6:
86:50:57:37:c7:7a:e5:ed:03:84:b1:1b:3d:1a:91:
bb:d3:6a:26:4f:0d:af:3d:9b:ab:3d:7a:a7:e5:11:
56:a8:47:66:c5:9a:d6:2e:0b:89:ec:84:12:4b:ed:
1b:f9:c0:36:85:d3:b0:b1:1c:53:27:9c:91:be:08:
76:fb:38:95:c0:92:9f:32:3f:75:d6:5a:0c:1a:b3:
07:c6:a3:85:bb:57:96:12:17:bc:bb:c2:c6:4c:ce:
57:2b:19:bb:aa:53:21:0a:7b:f2:ea:5c:8b:6e:d4:
a6:31:09:80:bc:d1:69:71:2b:93:32:ee:b6:61:79:
1f:fa:e6:6e:03:96:bd:c3:a1:d2:d7:0c:b2:ac:ac:
f5:9c:e6:dc:ad:d1:23:7a:2f:46:ec:ea:07:88:34:
07:c7:71:e2:e8:4f:50:99:1b:31:57:14:56:e2:f4:
05:19:9e:d3:20:c9:0b:8f:33:a5:e3:9c:b3:a5:59:
d2:d4:55:bd:a2:04:5f:df:56:84:20:64:19:0e:57:
40:b1:9b:74:de:2e:5a:e9:52:f3:15:9d:c9:81:67:
ec:5b:6b:38:da:23:a7:96:dc:6b:4d:7d:de:e0:37:
72:2f:35:be:e7:66:11:bf:69:ee:eb:70:d5:b1:e6:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:6A:0F:64:85:45:07:1F:C3:A6:91:F3:6F:6E:B4:F4:04:31:FE
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/PxpqD2SFRQcfw6aR829utPQEMf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
2.59.56.0/22
5.181.178.0/23
45.12.80.0/23
45.87.172.0/22
45.91.136.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
171.22.76.0/22
193.37.239.0/24
193.39.9.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:bd:26:89:50:69:cd:10:48:91:5a:0e:d6:61:24:0a:f9:b6:
53:05:bc:72:1f:87:04:30:5c:4a:bb:4c:f8:9b:f8:56:a5:fb:
8d:a8:50:12:89:45:45:27:58:d4:4d:c8:31:0f:ae:9b:8b:d2:
8c:56:f3:0d:53:0b:cc:50:09:7e:a1:97:ff:55:ce:51:46:a8:
44:77:d4:4f:52:1e:72:73:51:33:c7:0a:a3:81:03:ff:2f:bb:
a0:2d:66:0f:c0:a3:25:a0:d9:01:8e:62:5e:17:01:a7:01:c4:
34:2f:91:ca:98:08:b1:0a:ac:ca:16:20:bf:2c:e4:b0:f5:63:
0f:d1:2b:8c:95:19:89:9c:6b:12:ab:a1:a8:2c:b5:d8:10:26:
6a:c3:39:1c:ac:f3:de:db:d1:49:da:73:cc:34:04:cc:2d:a2:
31:c6:ec:0d:e2:d1:1c:ff:1e:77:33:df:82:c2:f2:37:2f:76:
39:1f:93:20:70:82:b2:8f:99:20:d9:c2:0d:86:5e:1e:dd:b0:
10:0c:0c:84:93:b1:7d:6f:2e:14:77:52:cd:12:13:75:64:d9:
4a:9c:59:ca:af:bf:40:11:c6:52:7e:66:a0:95:90:64:dc:5d:
89:b8:27:83:a3:fa:c9:d8:82:97:60:6c:81:06:6f:12:0a:c2:
64:33:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:04 2025 by rpki-client