Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/T8UCGAYxWK1WIKf7kb_ABez6fiQ.roa
File: T8UCGAYxWK1WIKf7kb_ABez6fiQ.roa (raw, json)
Hash identifier: Wc/Xtl0scurMXeqKujbpi+2KXWLvb4UKmgxEEE6lCnE=
Subject key identifier: 4F:C5:02:18:06:31:58:AD:56:20:A7:FB:91:BF:C0:05:EC:FA:7E:24
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186B34618DA9734727866B7DBE16257410C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/T8UCGAYxWK1WIKf7kb_ABez6fiQ.roa
Signing time: Sun 05 Mar 2023 19:36:00 +0000
ROA not before: Sun 05 Mar 2023 19:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.39.10.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
2.56.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:46:18:da:97:34:72:78:66:b7:db:e1:62:57:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 5 19:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fc50218063158ad5620a7fb91bfc005ecfa7e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:06:db:46:21:b9:eb:80:94:c9:d9:49:5d:
3b:db:ae:94:6e:aa:cd:86:11:dc:33:5f:b5:ae:06:
f5:59:10:8e:55:42:85:de:63:76:05:1c:51:c8:e3:
dd:c8:52:40:f1:d9:f5:5b:40:67:7c:08:b2:4d:de:
55:5b:5b:42:77:b4:93:6a:1c:66:dd:5c:1e:6f:27:
37:83:34:54:d5:63:51:34:29:39:98:58:29:5d:20:
e7:18:33:91:ed:33:8a:e4:7d:eb:e3:ca:a7:7d:fc:
40:df:5c:ef:1e:53:88:ae:70:a6:04:4c:88:ba:db:
cd:81:36:d4:9b:5e:31:c8:51:36:d0:b4:91:75:b5:
49:95:6a:fd:49:7e:e4:43:dd:d9:8e:01:15:b6:7c:
03:58:9d:23:bd:69:03:86:54:82:95:0d:9c:18:fb:
27:6d:85:6b:9e:65:5c:6b:27:9c:80:5e:f1:75:55:
71:b3:13:9c:70:87:a4:3f:dd:13:38:f3:50:04:9b:
38:35:80:b8:d8:ec:62:0d:a0:7f:54:87:c3:4e:33:
bc:e6:3b:9e:1a:f7:4c:c0:c6:bd:dc:7d:e6:8b:e0:
fa:7d:9b:9d:3f:be:c5:b6:79:fe:43:25:82:cc:ef:
f5:29:f6:3a:d7:be:15:17:ec:bb:94:be:59:15:c2:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:02:18:06:31:58:AD:56:20:A7:FB:91:BF:C0:05:EC:FA:7E:24
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/T8UCGAYxWK1WIKf7kb_ABez6fiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/23
45.12.81.0/24
45.87.173.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a2:f3:8e:05:fb:1d:c8:a6:0c:64:5b:fc:61:e9:c9:d9:22:
18:1e:6e:5f:cb:1a:9d:93:9e:c2:66:85:11:80:3c:3c:b5:90:
a1:d0:af:d9:b3:ad:c0:28:0c:11:09:d5:f0:0f:5b:18:b1:91:
bf:3e:a5:6c:d6:ff:ba:ab:67:67:70:b4:7b:f3:2e:f2:7f:a9:
05:a4:41:78:47:00:08:31:1c:4b:98:99:52:7a:0b:77:5f:5e:
9d:50:1d:97:ca:e2:c1:8c:3d:5f:23:81:55:16:a5:f5:90:94:
96:9b:e2:cb:03:01:4f:84:0e:44:f3:4b:b0:11:02:f9:c7:fc:
75:b3:71:7d:75:97:09:f8:86:88:a2:2f:bc:ff:39:7e:42:8b:
6b:5d:b4:7c:ed:a2:fb:fd:bd:99:79:e6:82:82:35:d0:e3:ba:
23:7f:1f:2a:4c:bc:5a:70:15:75:7a:2b:f6:3d:91:39:b9:8f:
82:2d:74:3b:f7:60:dc:86:1a:7c:4c:33:ff:20:c7:4a:b4:8f:
e4:2d:1d:05:64:ae:20:ea:fd:05:85:8b:ae:0f:34:a6:d0:9c:
db:6c:25:81:af:9a:f5:05:d9:fb:ff:54:53:d4:e6:01:70:b0:
a1:53:85:9c:a8:ee:d4:f5:c9:e3:55:55:ad:f2:b2:76:a6:78:
8e:fd:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org