Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/de5e-wZeBeUeJvZ5D2Bun8jQr2A.roa
File: de5e-wZeBeUeJvZ5D2Bun8jQr2A.roa (raw, json)
Hash identifier: 1M4orIrnV34yCPVmveYnh9GRHvxND4BoW6kwogH3Wsw=
Subject key identifier: 75:EE:5E:FB:06:5E:05:E5:1E:26:F6:79:0F:60:6E:9F:C8:D0:AF:60
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186531900D21AEE19193CB5428D407FF901
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/de5e-wZeBeUeJvZ5D2Bun8jQr2A.roa
Signing time: Wed 15 Feb 2023 03:23:12 +0000
ROA not before: Wed 15 Feb 2023 03:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.39.10.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
2.56.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:19:00:d2:1a:ee:19:19:3c:b5:42:8d:40:7f:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 15 03:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75ee5efb065e05e51e26f6790f606e9fc8d0af60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:d8:af:43:2e:ac:10:df:cf:26:eb:c1:18:
bb:96:1d:91:9a:10:fc:88:94:d5:02:09:ac:4d:b2:
08:b2:00:42:92:ee:c8:64:17:fa:25:eb:7c:a3:08:
a7:6c:40:5f:2d:91:19:7d:0b:03:ee:fe:d5:6e:1a:
3c:f0:ec:d5:8c:bb:d5:a2:7a:f7:c5:38:08:22:7e:
75:62:82:09:34:99:c4:4f:1b:47:87:63:a4:a5:a3:
cd:7d:52:0a:b6:60:9a:5a:d5:9d:8a:a8:50:4f:0f:
74:b8:ef:63:c2:06:99:bd:0c:b4:07:f0:86:dc:7e:
53:59:a9:a7:de:29:69:ef:12:69:0a:8b:89:b4:9f:
1f:a6:1a:69:69:b5:95:b9:06:5e:cf:1e:e5:3b:91:
da:eb:72:23:36:55:2b:c7:f6:ea:1a:d4:44:40:fd:
70:63:64:9d:1f:23:69:dc:6e:2c:51:20:63:54:1c:
9d:d3:a7:28:12:3d:0d:ac:35:a5:d4:7f:30:0b:cd:
24:8d:c5:0c:ac:19:94:99:2a:15:81:58:a6:aa:fe:
8a:5a:94:a8:63:86:98:cf:a4:a8:c5:c7:bb:b8:fc:
1b:a4:f8:69:0d:94:53:f2:88:77:e4:00:36:4d:e7:
b7:bc:97:36:1e:ff:dc:cc:1b:a0:3a:45:7f:fb:94:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EE:5E:FB:06:5E:05:E5:1E:26:F6:79:0F:60:6E:9F:C8:D0:AF:60
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/de5e-wZeBeUeJvZ5D2Bun8jQr2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/23
45.12.81.0/24
45.87.173.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d9:62:c7:a2:fa:d4:19:ad:9c:a4:48:65:62:1a:5f:57:a5:
99:3e:d0:b8:76:58:61:52:10:99:ed:a4:1e:39:c5:c3:97:c3:
22:a9:c6:bf:0c:89:37:6c:97:60:ce:1d:ff:08:47:b3:9c:94:
fe:3a:7f:53:a0:a0:e9:fd:0f:ef:33:3e:85:bd:5f:27:0f:79:
be:ce:d5:c7:6a:b4:38:7d:5c:17:f9:33:40:ba:67:0f:97:e2:
1e:59:d2:64:77:a1:3f:2a:00:20:cb:de:2b:e9:b4:13:91:9f:
65:49:de:31:21:e3:92:44:e6:77:68:8c:7d:66:4a:59:0b:90:
41:36:13:d5:59:86:a3:d6:9d:d1:48:37:3c:20:04:ea:7d:08:
cf:24:7e:cc:c8:f0:d2:76:ed:a4:c3:cb:db:a0:12:fd:9e:cb:
42:ac:89:01:35:c3:72:65:9a:ba:53:64:1b:c4:22:3e:6e:20:
c0:30:75:f8:04:06:52:83:77:3c:23:fd:11:18:53:3a:3d:1d:
e5:8b:41:65:9d:d7:8a:07:93:4b:12:c4:d6:db:1a:0a:66:02:
82:83:44:16:0a:6b:4e:e5:31:b5:3d:90:88:5d:f7:34:85:a2:
42:4c:a8:7e:10:15:1b:95:d2:58:12:b3:44:24:61:55:9a:8d:
0a:1f:4a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org