Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/VUWhnSJbVNmh8gJU22nWabILcDE.roa
File: VUWhnSJbVNmh8gJU22nWabILcDE.roa (raw, json)
Hash identifier: x9/uizHP4GSGMAwKs4y+6LZNCVIusYz/EzLAdUokC04=
Subject key identifier: 55:45:A1:9D:22:5B:54:D9:A1:F2:02:54:DB:69:D6:69:B2:0B:70:31
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184AFF7007C4666A3F0331067E66BE40FA9
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/VUWhnSJbVNmh8gJU22nWabILcDE.roa
Signing time: Fri 25 Nov 2022 18:05:11 +0000
ROA not before: Fri 25 Nov 2022 18:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 2.59.56.0/23 maxlen: 24
2.59.58.0/23 maxlen: 24
193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
171.22.76.0/22 maxlen: 24
171.22.78.0/23 maxlen: 24
193.37.239.0/24 maxlen: 24
185.172.172.0/23 maxlen: 24
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
5.181.176.0/23 maxlen: 24
5.181.178.0/23 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.12.82.0/24 maxlen: 24
45.12.80.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
45.91.136.0/23 maxlen: 24
45.91.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:af:f7:00:7c:46:66:a3:f0:33:10:67:e6:6b:e4:0f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 25 18:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5545a19d225b54d9a1f20254db69d669b20b7031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:2d:60:85:09:ad:c5:6e:b3:bf:5b:12:15:
c1:83:45:e7:f9:9b:4a:7e:73:06:ea:42:e1:c5:68:
88:ab:9f:ab:dd:5e:52:0f:ef:c5:84:d5:93:fe:30:
c0:e2:11:59:d5:a4:20:dc:e9:5d:ac:ec:e5:6d:61:
46:51:21:5e:c4:67:c6:cc:d9:19:26:ea:81:fd:8a:
f8:c5:df:d2:6e:b4:c4:39:fe:73:15:77:1b:bf:a0:
7e:9b:c4:6a:02:bb:aa:47:ac:a1:c7:77:d9:78:85:
1b:0c:a9:88:38:f1:e9:83:f7:7c:48:c9:22:bf:84:
53:88:91:27:e6:16:24:73:99:8f:ed:9f:48:ca:68:
fc:3b:84:4b:60:d4:b7:a3:ca:10:87:5f:0c:f7:13:
f4:bf:04:b2:ce:89:c1:6c:33:3f:e3:bf:4d:db:70:
c7:a7:68:aa:e2:27:fc:aa:88:72:28:28:aa:f8:c7:
4d:85:c1:5a:4d:49:71:d4:96:a4:98:0c:7b:02:d8:
ea:6b:82:ba:58:ab:c3:42:7d:8f:b7:27:98:67:3c:
1e:e8:78:e0:d7:c0:d2:77:5c:9f:13:e2:17:2b:7c:
94:ba:02:a7:1e:23:36:31:f9:47:0f:a8:d7:fb:76:
62:87:e7:64:cb:d8:1a:11:60:b9:08:4f:ef:14:9b:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:A1:9D:22:5B:54:D9:A1:F2:02:54:DB:69:D6:69:B2:0B:70:31
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/VUWhnSJbVNmh8gJU22nWabILcDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
2.59.56.0/22
5.181.176.0/22
45.12.80.0-45.12.82.255
45.87.172.0/22
45.91.136.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
171.22.76.0/22
185.172.172.0/23
193.37.239.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
d4:0a:2c:d4:3c:a3:c4:8e:40:2d:f0:a4:09:66:fe:df:bf:b6:
d1:f1:e9:50:dc:b6:ae:4f:b5:55:1a:53:ea:7a:22:f5:ab:e7:
b0:f7:30:09:a8:13:97:20:0e:a0:58:ca:57:9d:02:68:db:03:
e4:32:a8:84:52:3b:2d:1c:08:52:5b:48:be:6d:f9:f4:4b:94:
4a:89:23:09:94:65:37:9a:75:68:a3:94:7e:0d:94:bf:c0:04:
e4:6d:f4:b0:25:b8:de:83:8c:7e:db:6f:65:33:fb:cd:d5:38:
d6:90:da:a6:b0:08:8c:87:56:04:d1:f9:8b:3a:81:3c:ae:cc:
8f:ad:91:be:69:7a:b6:0d:8f:a9:8d:33:7d:05:d8:6b:00:ef:
a2:ab:44:2e:3c:34:68:64:53:f8:53:a5:77:e0:57:3a:fd:3e:
b6:84:88:7a:5c:d4:e2:51:68:e6:f8:ac:76:6e:12:05:5d:9b:
96:45:6f:cd:e3:3a:b9:3c:15:87:0b:02:bb:c3:64:05:9c:76:
47:59:38:0e:aa:ee:13:e3:6d:8a:36:12:4c:a7:8a:b5:29:f8:
e8:d3:a5:7c:b9:10:5b:02:8e:77:e3:2a:33:16:b1:9a:8a:7e:
48:67:88:39:bc:5f:c4:16:0c:69:32:48:7b:a1:67:b6:01:f4:
3a:65:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org