Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/j_D_oNPBkXgyH0CE7xsSCZp8elg.roa
File: j_D_oNPBkXgyH0CE7xsSCZp8elg.roa (raw, json)
Hash identifier: jlo66sJVPduBnzRApI6UFmkOc/soXJdre7uAXBLtq+o=
Subject key identifier: 8F:F0:FF:A0:D3:C1:91:78:32:1F:40:84:EF:1B:12:09:9A:7C:7A:58
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184BF173A8BE8C2576BC7C8DA737E3E9A9C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/j_D_oNPBkXgyH0CE7xsSCZp8elg.roa
Signing time: Mon 28 Nov 2022 16:34:41 +0000
ROA not before: Mon 28 Nov 2022 16:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 2.59.56.0/23 maxlen: 24
2.59.58.0/23 maxlen: 24
193.39.9.0/24 maxlen: 24
171.22.76.0/22 maxlen: 24
171.22.78.0/23 maxlen: 24
193.37.239.0/24 maxlen: 24
185.172.172.0/23 maxlen: 24
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
5.181.176.0/23 maxlen: 24
5.181.178.0/23 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.12.82.0/24 maxlen: 24
45.12.80.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
45.91.136.0/22 maxlen: 24
45.91.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:17:3a:8b:e8:c2:57:6b:c7:c8:da:73:7e:3e:9a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 28 16:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ff0ffa0d3c19178321f4084ef1b12099a7c7a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:73:dd:b7:5c:4e:5a:04:12:03:26:a6:aa:
8d:66:39:37:28:6e:e3:b4:58:a4:dd:0e:9a:97:b8:
d8:55:41:de:25:bc:9f:72:82:7b:cb:51:2e:74:40:
8d:eb:56:9b:21:6d:fb:59:83:15:4b:14:9f:ec:32:
5d:c4:88:44:57:3a:a2:bb:23:a5:d5:00:56:7f:2d:
74:ba:63:73:a8:e2:4b:be:f5:fc:b8:bf:84:a0:ff:
e9:e1:91:9d:2a:87:92:7d:62:70:66:dc:36:62:ec:
f7:5c:86:17:0a:bd:5b:88:ea:c7:6a:06:61:1f:57:
9e:a7:7c:bd:62:ff:1c:c7:1f:e4:d1:50:a0:23:29:
ab:a7:a1:da:b9:dc:ab:3c:f9:2a:ab:1b:ce:1a:b1:
cf:f7:34:4f:b3:60:54:78:4a:44:43:3c:48:e3:43:
b6:28:dc:f6:f6:46:96:2c:88:c1:0a:83:9b:4c:6e:
b5:4b:f4:01:3e:ca:b6:ca:76:d3:26:53:30:12:96:
d7:9a:9f:d7:bb:fc:81:3d:be:b8:3c:9f:18:eb:1a:
90:ec:3f:7a:74:d4:15:2d:23:dc:e4:1c:bb:46:2f:
1b:58:91:06:da:3e:d3:c6:d4:79:65:5c:84:ba:7e:
de:96:2b:30:b5:66:43:8c:e5:22:33:1b:fe:78:98:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F0:FF:A0:D3:C1:91:78:32:1F:40:84:EF:1B:12:09:9A:7C:7A:58
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/j_D_oNPBkXgyH0CE7xsSCZp8elg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
2.59.56.0/22
5.181.176.0/22
45.12.80.0-45.12.82.255
45.87.172.0/22
45.91.136.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
171.22.76.0/22
185.172.172.0/23
193.37.239.0/24
193.39.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ba:07:36:b4:0f:22:e5:97:98:82:b9:a6:a8:8b:19:53:22:
4f:73:c7:f8:b8:3d:c8:9d:37:8a:e6:58:45:86:86:5a:6a:3c:
f2:04:7d:be:2d:19:42:6e:50:65:10:28:b4:c1:95:ca:8f:fb:
17:2a:73:e7:3d:33:c0:c6:73:66:63:f2:07:79:a0:0d:0d:97:
ec:ee:ee:ab:1b:cd:f5:a5:f0:74:3a:cd:22:58:c0:be:6b:21:
ca:c1:68:62:2a:89:e5:21:2a:d6:11:d9:90:e4:75:05:ea:e1:
fe:8d:87:77:33:55:96:6f:1b:45:ac:60:85:f2:d8:a6:21:d2:
a4:38:08:1d:c3:77:2c:51:da:e2:1d:a9:70:da:8b:35:97:e8:
b5:33:8f:8e:e7:86:67:a5:bf:9c:88:76:e8:6b:93:bc:50:22:
08:8e:8b:a6:f4:1c:96:e3:1c:bc:95:25:70:05:73:22:4b:3c:
5d:1b:63:c8:d5:36:28:6b:56:62:8e:f6:17:7f:af:9e:2f:74:
0a:5a:84:8d:85:34:08:43:2c:6b:3e:fe:96:5c:84:2a:a2:54:
a8:0b:0d:82:a0:0a:46:c6:2e:7a:c0:13:b0:3a:2d:b2:18:8f:
77:d0:fe:a5:98:c1:1a:27:89:dd:b3:d6:88:d5:13:5c:8d:f5:
66:5b:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org