Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/weKcB2gs3dR8UnlgU2aLL_7D4Kc.roa
File: weKcB2gs3dR8UnlgU2aLL_7D4Kc.roa (raw, json)
Hash identifier: m5GHuxcXOTyNHr2mH4OV/M5gyz6Dq8fnUlquKELabv4=
Subject key identifier: C1:E2:9C:07:68:2C:DD:D4:7C:52:79:60:53:66:8B:2F:FE:C3:E0:A7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0AA105DD
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/weKcB2gs3dR8UnlgU2aLL_7D4Kc.roa
Signing time: Wed 27 Apr 2022 16:46:08 +0000
ROA not before: Wed 27 Apr 2022 16:46:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.87.172.0/22 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
85.209.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178324957 (0xaa105dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Apr 27 16:46:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1e29c07682cddd47c52796053668b2ffec3e0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:5e:43:f8:13:27:1d:c7:2e:9a:77:de:e5:
70:32:03:44:6b:b0:87:47:9d:9b:fc:03:f8:c3:5d:
72:5b:22:71:9f:9c:18:5d:f5:1a:cc:31:0c:90:f7:
a8:d1:95:93:34:e2:0f:66:fd:37:28:f8:ec:f6:2a:
0c:4f:11:c9:de:bf:76:65:5d:11:e6:ba:48:3d:85:
1f:c4:9e:1b:bd:d4:79:cd:c4:89:f7:1a:91:68:06:
37:77:23:95:c6:63:e2:63:dc:2d:51:bb:42:c3:37:
d6:2a:db:25:f8:36:47:4d:9a:fa:b8:67:56:28:36:
67:4b:98:8d:3c:70:be:89:45:5b:e7:cb:9c:9e:67:
1c:2d:e7:1e:7b:78:8c:b1:c5:ca:a3:61:8a:d8:d9:
a2:11:97:5e:f5:b9:ad:de:6e:a1:3d:72:2f:de:36:
6a:17:45:fe:3d:98:45:78:e0:9b:11:d2:3f:ad:4a:
aa:22:e2:67:21:f3:d1:dc:b3:2a:2a:ed:d0:68:92:
09:ee:64:f9:01:fa:cf:e1:de:45:5f:20:c6:78:e0:
e2:e2:67:ab:26:3a:b7:6e:19:c4:bf:22:f4:3d:0b:
b3:0f:ca:8e:5e:33:d4:ef:f7:4e:a0:ba:b8:44:b8:
6f:7d:23:50:57:e4:c9:e6:9a:d8:46:f5:e4:62:c3:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:9C:07:68:2C:DD:D4:7C:52:79:60:53:66:8B:2F:FE:C3:E0:A7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/weKcB2gs3dR8UnlgU2aLL_7D4Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
45.12.80.0/22
45.87.172.0/22
45.137.96.0/24
45.158.56.0/22
85.209.222.0/24
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
64:e8:a6:df:46:92:03:b3:23:3b:0c:c5:25:23:6c:4b:f9:4d:
e0:46:85:98:79:bd:7b:94:aa:3d:59:5e:d6:f1:55:e9:c3:60:
52:6f:e8:c1:95:7f:c2:93:95:8d:5a:63:e0:6c:e5:17:e1:9c:
6c:dc:58:66:0c:59:3d:47:c7:59:62:d7:98:99:af:75:f8:de:
0a:3f:02:c4:86:c6:09:0a:b4:36:21:6e:75:f9:52:30:66:b3:
43:44:d9:c5:bc:c6:47:54:90:87:60:28:2a:a1:be:af:99:26:
2b:78:2f:9c:d0:2b:66:7c:12:0b:b4:03:03:f8:c2:88:de:f0:
66:ae:f2:d9:66:5a:da:56:6c:c5:4a:64:62:75:15:70:e7:85:
be:3b:6b:cd:f7:ed:2c:0d:3c:ff:e5:f7:ec:ba:0c:0a:3f:b8:
a1:ff:7a:77:2e:91:2d:38:91:3f:f6:fc:cc:4e:af:18:41:0d:
37:2f:c6:df:d0:b7:4b:b5:7f:a9:fa:0d:43:e8:90:9f:10:1e:
52:2c:c0:f2:66:56:ef:bb:da:df:01:c7:c0:f9:a5:2e:bb:3a:
33:ec:67:b5:9b:1c:e9:f1:9d:86:ba:45:05:53:8f:eb:b3:21:
8a:e7:8c:28:c9:4f:2b:0b:08:cb:f6:58:e8:09:9d:c3:46:73:
7b:72:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org