Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/UUcBqZlnWnf43Jl15aVwn1B_Vcg.roa
File: UUcBqZlnWnf43Jl15aVwn1B_Vcg.roa (raw, json)
Hash identifier: jzjkUP4VbXXP0lIWT4MARsTvvz5fJAWacKqEaFDl8og=
Subject key identifier: 51:47:01:A9:99:67:5A:77:F8:DC:99:75:E5:A5:70:9F:50:7F:55:C8
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0183A6A019DB4A2A298D870BBADD7E5384C6
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/UUcBqZlnWnf43Jl15aVwn1B_Vcg.roa
Signing time: Wed 05 Oct 2022 05:30:53 +0000
ROA not before: Wed 05 Oct 2022 05:30:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 2.59.56.0/23 maxlen: 24
2.59.58.0/23 maxlen: 24
193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
5.181.176.0/23 maxlen: 24
5.181.178.0/23 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a6:a0:19:db:4a:2a:29:8d:87:0b:ba:dd:7e:53:84:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 5 05:30:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=514701a999675a77f8dc9975e5a5709f507f55c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:9f:ad:60:cb:55:83:32:6b:c2:22:6a:d2:
87:53:37:46:8b:e2:30:66:20:9e:0f:b5:4c:8f:d0:
7b:d2:6b:9c:84:53:7b:53:ef:2d:3d:53:44:64:dc:
ca:6f:60:3e:24:d8:d7:92:c0:3e:50:2a:89:95:0d:
db:95:d4:be:eb:e6:0a:10:fd:90:c8:38:ce:c0:e2:
bf:5e:07:81:47:f4:eb:1e:f7:17:bc:bf:ef:0b:e3:
22:1d:ca:dd:35:3d:8b:80:6a:b7:83:8a:45:c1:25:
0e:35:55:5d:77:65:d7:ef:c0:2e:d0:e5:55:ca:2b:
16:09:83:af:9a:81:a1:08:ab:cf:af:b6:cd:50:b0:
d5:7e:d1:c5:df:a2:5f:38:b1:fe:c1:3c:cb:bd:cd:
f5:cb:06:25:e6:ec:75:a8:99:66:ce:2e:6e:ff:13:
5b:53:bc:64:a4:15:2b:8d:e6:b6:66:73:22:f9:0f:
ee:9a:35:b3:ba:9e:03:23:fa:ab:3c:4d:94:0c:d7:
ab:c4:34:38:a3:b7:e5:f9:6f:d4:ed:59:45:bc:66:
49:9d:b3:3b:bd:e7:23:c9:f3:d9:64:af:9d:1d:62:
c3:9a:54:d5:f8:81:9d:ab:5e:7b:39:3e:6d:49:2b:
54:1b:37:3a:78:66:c8:02:b9:ff:63:be:5f:33:23:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:47:01:A9:99:67:5A:77:F8:DC:99:75:E5:A5:70:9F:50:7F:55:C8
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/UUcBqZlnWnf43Jl15aVwn1B_Vcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
2.59.56.0/22
5.181.176.0/22
45.12.80.0/22
45.87.172.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
1c:4d:a6:ac:5c:61:70:09:11:b0:8e:a1:69:83:07:87:60:e7:
5f:ab:f1:96:20:7d:ee:bf:ca:6c:a1:50:a4:65:1e:eb:1a:cc:
02:54:f0:20:54:1d:b6:6a:21:58:4a:8d:fa:f8:bd:d6:55:6e:
ca:9a:b3:5b:29:08:e7:bc:3d:da:fc:1e:51:c4:58:84:72:92:
5e:ee:3e:c2:a7:e4:66:94:2b:dd:73:61:a1:ff:3b:d4:cb:c0:
d4:29:34:48:30:54:d4:f6:50:c5:e3:97:15:71:12:8e:59:24:
86:28:d1:46:e8:74:2a:b9:b7:36:e1:e5:e2:fa:2a:d8:23:4f:
07:b1:e2:f0:a8:91:d4:cd:3d:77:f1:2c:16:78:d3:68:72:0d:
c0:c8:47:aa:bb:cb:cb:fa:cc:7c:76:f7:3d:e7:c2:08:b8:2a:
df:05:ce:8d:4d:8d:1c:8e:6b:4f:23:a0:b0:7a:a3:12:60:62:
55:0c:53:8f:f8:70:05:3e:5f:a0:3e:a8:11:b5:04:b5:5c:69:
b5:4c:b8:21:a9:c9:a5:80:c5:2f:e9:83:74:11:6a:1c:0a:f0:
61:86:d6:c7:b3:77:ea:2d:51:5f:2a:04:a7:80:2a:c0:1f:5d:
a5:e0:14:fc:67:16:46:cc:c9:c1:6b:fb:81:65:57:2a:2c:6c:
9d:7a:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org