Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cGY2HmjSh6hLKc-6PXX15lYczw8.roa
File: cGY2HmjSh6hLKc-6PXX15lYczw8.roa (raw, json)
Hash identifier: +YNnJM+C/aPa5WUdw1FLZJjoFwwmjGEPwQmhZAI0cEE=
Subject key identifier: 70:66:36:1E:68:D2:87:A8:4B:29:CF:BA:3D:75:F5:E6:56:1C:CF:0F
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09BBCAF1
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cGY2HmjSh6hLKc-6PXX15lYczw8.roa
Signing time: Thu 10 Feb 2022 14:13:24 +0000
ROA not before: Thu 10 Feb 2022 14:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163302129 (0x9bbcaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 10 14:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7066361e68d287a84b29cfba3d75f5e6561ccf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:d6:89:8b:90:c6:4a:6c:27:b4:9a:3c:02:
7f:83:d8:77:fd:08:a7:46:8c:e7:97:7a:63:fc:8c:
7a:88:73:41:b0:f1:a6:6e:40:c9:e6:99:2a:c9:09:
90:b0:de:27:e3:1d:e4:d0:94:86:5e:b1:68:07:67:
51:dc:d5:04:7a:39:26:7d:e7:af:98:8c:cd:c2:2e:
57:75:5e:01:17:af:9c:96:55:8f:14:0a:87:a6:84:
01:2c:10:c7:3a:09:72:ae:56:b2:e4:0a:50:3e:4e:
68:78:05:20:ba:1a:4d:1e:0e:a2:8f:86:ce:c3:97:
e1:09:77:53:ab:f2:4a:17:a0:80:cb:30:4f:54:3e:
b4:31:46:05:d9:5d:95:8d:5d:76:f8:10:5c:8b:6f:
b6:79:89:cd:c2:15:44:cb:93:9d:42:00:d0:78:1c:
04:22:50:27:0e:62:7f:e6:04:51:89:76:a9:82:11:
cd:12:56:07:4f:4f:90:c8:2b:9a:6c:66:81:36:97:
f2:d5:12:f4:af:d0:99:de:68:71:11:1f:52:ac:25:
4c:b2:3e:b0:4b:4d:4b:49:43:d5:e4:1b:4a:a1:19:
89:bc:62:22:ff:10:e2:78:0a:4b:52:19:d9:83:e7:
22:f5:6d:9f:5f:43:58:bd:a1:7c:dc:25:95:85:52:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:36:1E:68:D2:87:A8:4B:29:CF:BA:3D:75:F5:E6:56:1C:CF:0F
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cGY2HmjSh6hLKc-6PXX15lYczw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
85.209.220.0/24
193.37.239.0/24
193.38.53.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b9:de:6b:cb:16:5a:73:71:28:df:1e:bd:94:0c:06:18:39:
88:1f:ad:6e:cd:32:09:1f:e7:da:20:52:11:f4:da:11:2d:e7:
03:55:71:30:17:cf:d3:77:93:53:4f:46:ad:2f:5d:9a:79:1e:
63:b1:9a:21:9a:f5:ff:dc:ea:2a:20:92:19:2f:e4:16:92:33:
83:21:96:a6:78:d1:c7:53:a9:20:17:88:8f:34:3d:01:f0:d3:
66:e8:02:d7:eb:a6:41:10:1b:98:81:a2:b5:f8:e1:ba:77:1a:
02:a6:a5:d1:ac:93:bd:d4:27:7a:db:b0:2a:7f:4f:2b:86:8a:
13:00:2e:fc:2b:a3:d6:19:52:aa:c2:28:19:c6:1d:bc:3a:32:
ba:fc:34:20:3b:f8:55:2b:5c:c3:22:2e:4c:b6:3a:72:06:d6:
18:de:8e:48:f9:4b:1f:48:4c:e8:6c:15:26:bb:50:9f:19:52:
e7:ce:85:8c:15:e5:a3:46:01:26:46:5f:6c:ed:f0:1c:d3:9f:
b2:6f:fe:38:26:c0:66:f7:a6:29:c7:67:7e:ed:7a:76:1b:ba:
c4:38:c7:1c:1e:79:a1:4b:5a:67:e8:69:d0:81:20:68:c1:36:
26:1b:92:7e:d7:db:6a:b8:8e:52:f2:ce:ca:37:f6:61:1b:88:
38:fe:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org