Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xIOoksqxxGoDdLWvT4vXFqoGpeM.roa
File: xIOoksqxxGoDdLWvT4vXFqoGpeM.roa (raw, json)
Hash identifier: dFdcX4yAPBJoidDoIQ0JM4dEPHwr2Fn7fFlI4gQ4pOg=
Subject key identifier: C4:83:A8:92:CA:B1:C4:6A:03:74:B5:AF:4F:8B:D7:16:AA:06:A5:E3
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0B1EF130
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xIOoksqxxGoDdLWvT4vXFqoGpeM.roa
Signing time: Fri 17 Jun 2022 00:02:44 +0000
ROA not before: Fri 17 Jun 2022 00:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
193.37.239.0/24 maxlen: 24
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186577200 (0xb1ef130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jun 17 00:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c483a892cab1c46a0374b5af4f8bd716aa06a5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:ac:f6:4b:f7:47:48:f4:58:88:60:36:0c:
9c:b6:81:ef:6c:08:8a:26:b6:1b:6e:b1:47:de:59:
97:eb:02:08:1b:2c:a7:64:bf:1b:85:1d:c4:77:86:
b4:27:86:e8:b6:97:49:58:1b:85:41:e1:a8:b0:60:
da:8d:a7:ff:34:13:b6:03:97:78:0b:69:d2:c1:17:
d6:4b:04:88:d6:43:c4:f9:ca:42:28:14:9c:19:19:
36:81:f2:67:62:54:53:3d:78:29:3c:9d:db:54:83:
7f:ad:9a:3b:2a:f2:ed:df:bc:b3:05:7e:9e:0b:ac:
8c:dc:b2:ff:ba:cc:48:ca:c7:fd:cb:6a:21:2b:57:
13:8e:5b:8a:8e:e5:5e:c5:2a:0a:fb:33:d7:bb:09:
53:ea:e2:44:aa:81:9c:9f:80:43:94:79:db:ad:17:
f2:d4:f7:6e:06:fe:eb:05:9e:50:9c:bb:31:44:32:
04:4c:07:5a:14:94:07:29:d4:05:6b:4b:0d:6a:5f:
4d:f5:29:4e:d8:6a:12:94:e0:b8:fe:a6:0c:9b:84:
01:eb:21:ef:56:c7:30:10:c8:e8:74:8c:e7:f7:2b:
ab:05:ad:6f:1b:0b:9c:1f:c1:f4:cc:cd:1e:91:9b:
64:94:04:63:32:05:eb:93:8b:2f:54:06:99:a8:33:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:A8:92:CA:B1:C4:6A:03:74:B5:AF:4F:8B:D7:16:AA:06:A5:E3
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xIOoksqxxGoDdLWvT4vXFqoGpeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
45.12.80.0/22
45.87.172.0/22
45.137.96.0/24
45.158.56.0/22
85.209.221.0-85.209.222.255
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
4a:53:31:51:e4:10:f2:aa:7f:1d:20:0f:f0:ef:f3:83:6f:ae:
ae:44:0a:98:ba:74:66:7c:46:63:0c:fd:7f:07:a3:60:d4:4f:
65:7c:d3:bd:cf:31:82:b8:4f:bd:20:3f:52:23:ef:93:78:3b:
42:25:1e:4e:9f:c7:25:ce:d6:df:54:f9:e1:84:57:9d:56:b4:
c3:b9:0e:45:ac:b8:e2:59:b7:78:06:05:ca:4e:18:38:16:5a:
ef:93:b1:f3:ca:e2:d0:63:3b:71:b2:82:43:26:95:6c:33:8e:
41:48:74:d9:cb:40:30:34:6f:c3:f8:38:dd:97:23:59:43:dd:
f4:3c:a9:3d:64:77:af:70:30:2c:20:8c:2e:ed:ba:65:fb:f4:
67:64:fc:58:5a:3f:3e:01:8f:d3:e0:54:83:5d:80:93:4f:2c:
94:61:67:01:91:6e:c9:15:98:72:4b:70:ce:e8:6b:46:ae:f7:
58:c7:69:76:4d:63:e4:da:a0:fa:f3:61:73:79:28:18:52:a7:
f3:83:14:98:7a:f1:2a:f7:83:54:5d:31:4e:88:3e:16:a1:0f:
62:d7:87:4d:f6:74:5d:48:d9:9a:5f:98:1b:fd:9f:73:28:7c:
85:e5:6c:42:74:6b:79:fb:0a:7a:b4:c7:f8:6e:8f:05:cd:6f:
03:fc:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org