Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/R_5JSd8buF27xR-d_Y__YDWd2HQ.roa
File: R_5JSd8buF27xR-d_Y__YDWd2HQ.roa (raw, json)
Hash identifier: pl/KxA0LlNVTmsSTXXlcbokIzIWoDA8uTv5w0x0Dvuo=
Subject key identifier: 47:FE:49:49:DF:1B:B8:5D:BB:C5:1F:9D:FD:8F:FF:60:35:9D:D8:74
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018458F030D619E96AFEE14E9722BF0C41E0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/R_5JSd8buF27xR-d_Y__YDWd2HQ.roa
Signing time: Tue 08 Nov 2022 20:30:46 +0000
ROA not before: Tue 08 Nov 2022 20:30:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.38.53.0/24 maxlen: 24
185.172.172.0/22 maxlen: 22
193.37.239.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
5.181.176.0/23 maxlen: 24
5.181.178.0/23 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
2.59.56.0/23 maxlen: 24
2.59.58.0/23 maxlen: 24
193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
171.22.76.0/22 maxlen: 24
171.22.76.0/23 maxlen: 24
171.22.78.0/23 maxlen: 24
45.87.172.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
45.12.82.0/24 maxlen: 24
45.12.80.0/24 maxlen: 24
45.91.136.0/22 maxlen: 24
45.91.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:58:f0:30:d6:19:e9:6a:fe:e1:4e:97:22:bf:0c:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 8 20:30:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47fe4949df1bb85dbbc51f9dfd8fff60359dd874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:09:7d:80:41:ce:10:36:2f:89:02:d8:e9:f8:
69:bc:60:55:06:8e:16:2e:e7:ba:9d:4a:d8:f9:de:
07:81:05:37:c7:e6:03:4a:ea:34:20:16:79:6b:96:
a8:af:2e:d1:c5:e5:97:7e:5a:38:9b:f3:b4:7e:34:
8c:9e:65:6c:df:5b:91:92:32:ca:6c:15:a3:45:68:
39:c6:8c:fa:1d:a9:bd:d5:d8:67:c1:23:61:7d:b9:
3f:f1:e2:ea:bf:7a:d3:9b:2e:81:d4:02:a5:2a:02:
d0:5a:81:ff:91:b3:91:31:35:64:9a:4d:43:28:9c:
77:11:a7:88:22:bd:f2:79:76:7b:a6:3d:3c:21:6d:
ba:54:5a:7c:91:58:9e:29:9b:bc:72:ab:e3:bf:1f:
1b:91:04:b9:80:1d:07:d7:93:00:3e:12:4d:25:a2:
19:77:fb:13:dd:56:dc:c5:18:fd:05:13:a2:26:06:
18:86:a4:0c:40:60:43:70:50:b4:7c:31:18:9a:fe:
f0:31:5c:de:e2:1e:65:28:b6:89:a6:66:ea:b1:7a:
fb:c7:ef:45:ac:87:88:85:2d:68:8d:a3:ba:ed:15:
43:81:9a:42:97:cf:d0:2b:3c:82:d5:2a:9d:61:6e:
25:74:36:ac:d5:04:9e:86:7e:62:99:b6:90:11:59:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:49:49:DF:1B:B8:5D:BB:C5:1F:9D:FD:8F:FF:60:35:9D:D8:74
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/R_5JSd8buF27xR-d_Y__YDWd2HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
2.59.56.0/22
5.181.176.0/22
45.12.80.0-45.12.82.255
45.87.172.0/22
45.91.136.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
171.22.76.0/22
185.172.172.0/22
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
c5:fc:e4:d1:15:0a:10:50:0b:d0:d7:8f:a8:8c:ec:df:35:2f:
cf:a8:34:f5:89:0e:af:de:f4:23:1d:a2:e7:09:90:ee:dd:eb:
3d:8d:8c:0a:03:65:c3:6c:fa:ec:69:81:97:49:52:29:af:e6:
19:10:3d:68:4a:5f:52:fe:c3:2e:3b:f1:b2:6a:8a:e1:7c:57:
0b:64:ea:dc:e1:5a:a9:f8:96:1c:42:43:21:6f:82:3e:2c:04:
75:6c:c1:c2:79:c9:7d:d5:a3:9a:bb:ba:51:f2:95:f3:d7:9a:
26:9a:ed:26:51:2d:5e:bb:aa:fe:f6:f3:b8:5e:28:6e:cf:ac:
d3:b2:18:da:f1:58:2a:74:db:68:f7:86:81:1f:5d:51:31:fb:
69:46:65:8a:78:f6:7e:26:81:c2:84:19:2f:29:26:19:3e:08:
ef:01:67:0b:1e:c6:60:32:b2:b7:e4:26:84:21:be:b8:4c:36:
82:59:e9:b0:7d:50:f4:ec:6d:c7:18:f2:d3:3c:ae:6d:b1:50:
f5:e1:63:79:8c:39:d4:d8:34:18:0e:93:f1:86:0e:8f:37:38:
36:19:e3:26:b0:38:9a:c0:52:08:24:e6:a4:17:c1:99:d9:7c:
c8:b1:bc:d4:cf:ae:70:ff:d8:2c:1e:92:69:9e:48:94:7c:af:
3d:3a:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org