Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XXhRJqPd90IRZkylOWeb3jTDL9c.roa
File: XXhRJqPd90IRZkylOWeb3jTDL9c.roa (raw, json)
Hash identifier: 5Nc8YxlLWSt44MwaABmZUhx1VoQZIlUD/XRjFrNswFk=
Subject key identifier: 5D:78:51:26:A3:DD:F7:42:11:66:4C:A5:39:67:9B:DE:34:C3:2F:D7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A3105B4
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XXhRJqPd90IRZkylOWeb3jTDL9c.roa
Signing time: Wed 23 Mar 2022 23:33:50 +0000
ROA not before: Wed 23 Mar 2022 23:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170984884 (0xa3105b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 23 23:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d785126a3ddf74211664ca539679bde34c32fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:3f:d2:36:63:b0:ef:ef:e3:6d:a1:74:7a:
94:03:94:36:30:33:31:e9:09:9c:41:16:06:56:c8:
0f:f0:75:17:38:62:20:a3:2b:07:aa:de:9a:8f:8a:
2d:f5:cb:c0:f7:e3:e5:7a:d8:16:70:9f:7e:ff:39:
65:05:af:c5:a1:19:80:9f:e6:85:99:07:32:12:80:
2f:4d:b2:53:c5:b9:b6:52:20:46:2e:11:01:1d:a9:
90:48:6b:8d:5e:a4:ba:5e:41:28:19:85:de:11:69:
d8:94:3d:5f:b7:53:a5:66:5b:04:f2:40:7b:20:1d:
dd:b7:f3:a2:d1:41:7c:7b:2d:7c:0d:d7:31:17:ed:
b1:24:e3:8f:84:67:df:68:24:f9:06:f9:83:9b:c1:
b8:b8:ae:2a:a0:d9:c5:c9:50:82:30:e5:3e:f0:3e:
85:64:0c:07:e0:e3:8f:eb:cb:0b:63:e9:16:a5:2c:
36:88:6f:7b:62:bf:0c:ad:ef:4a:0a:ff:74:bc:73:
80:fb:9e:61:b6:87:20:28:be:f1:6a:7d:62:97:12:
d5:20:22:62:97:d3:32:45:c7:0d:49:1f:89:c1:dd:
36:b8:75:48:7f:3b:b9:57:b1:fc:ca:e4:7c:0e:e7:
41:22:64:a0:5a:f8:c2:92:00:b6:de:bf:a5:54:40:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:78:51:26:A3:DD:F7:42:11:66:4C:A5:39:67:9B:DE:34:C3:2F:D7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XXhRJqPd90IRZkylOWeb3jTDL9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.96.0/24
45.158.56.0/22
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
63:c9:25:65:c5:db:43:b7:86:66:6b:94:fb:91:f6:25:f1:e7:
c1:99:6a:4c:06:65:09:72:e0:2b:c5:a7:bf:12:61:68:af:2b:
41:b8:f4:b0:70:ae:a9:6a:79:e2:9d:47:f2:eb:c2:e0:94:2c:
97:92:07:e9:c4:78:95:04:19:26:c5:ae:3f:24:be:38:25:de:
2d:45:32:ef:a4:a2:c5:a8:58:4c:19:9d:df:b6:54:6c:0e:e3:
af:8c:1e:39:c7:18:87:d2:f8:bd:9e:90:b4:4c:98:a8:d1:76:
0d:56:3a:66:96:1f:ee:94:e3:c3:b6:82:8a:16:d9:09:e6:16:
77:32:d5:86:3a:af:5d:2c:d0:30:e5:f3:dd:c1:56:18:90:63:
fe:6f:d2:fe:79:01:b6:76:32:05:a3:cc:c7:71:7c:64:59:e2:
c9:b7:75:b8:ca:60:c4:03:5d:b8:8e:d3:fd:84:da:19:33:74:
f8:8c:1a:18:9d:0e:84:64:dc:4d:54:8a:3c:a1:c6:21:dc:0f:
82:24:2b:4e:9c:1e:a2:cb:63:05:4f:37:54:e7:ac:de:c3:02:
4e:07:73:47:8b:6c:29:03:23:c9:6b:04:ee:91:3d:4f:5b:61:
e6:b3:ae:5f:3c:fb:0b:fd:c6:6f:a7:48:d0:15:ba:1b:ca:d2:
32:e2:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org