Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yHXuLR9-U-9Q3wt99_gPMsKOeyw.roa
File: yHXuLR9-U-9Q3wt99_gPMsKOeyw.roa (raw, json)
Hash identifier: rnZJjHZM6A88LUWZKneVf2iSyl/x1U5nnv70Xlo9jpE=
Subject key identifier: C8:75:EE:2D:1F:7E:53:EF:50:DF:0B:7D:F7:F8:0F:32:C2:8E:7B:2C
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A8AA592
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yHXuLR9-U-9Q3wt99_gPMsKOeyw.roa
Signing time: Wed 20 Apr 2022 15:20:26 +0000
ROA not before: Wed 20 Apr 2022 15:20:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.39.9.0/24 maxlen: 24
193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
171.22.76.0/22 maxlen: 22
193.37.239.0/24 maxlen: 24
45.87.172.0/22 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.222.0/24 maxlen: 24
45.158.56.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.12.81.0/24 maxlen: 24
2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176858514 (0xa8aa592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Apr 20 15:20:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c875ee2d1f7e53ef50df0b7df7f80f32c28e7b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:14:16:b6:09:c3:5b:2b:96:67:ba:89:02:0b:
a2:f5:71:b3:b9:97:28:7e:66:96:fc:fe:f2:56:4d:
75:de:60:78:61:c5:0b:33:08:85:6e:70:0a:e5:2b:
65:14:7b:08:f1:0f:7d:df:c8:07:0a:31:e9:9d:40:
2c:ee:6d:05:de:2c:1a:c5:e7:13:f8:24:55:eb:2b:
49:ec:06:d9:42:25:6b:45:4d:73:1f:01:84:78:0d:
db:12:69:2e:82:c4:0e:6e:4d:05:75:24:f5:3f:e3:
06:ca:fa:65:ca:48:eb:13:40:e6:77:60:96:e0:0c:
dc:a4:ca:83:5f:39:22:74:2a:70:20:22:49:19:c4:
1e:b4:da:75:db:eb:dd:b5:89:6a:97:51:e1:51:5b:
be:0d:3e:14:12:8d:87:f2:fc:52:d8:88:b0:16:63:
a0:65:51:c6:44:53:c2:f3:e4:1f:dc:05:5e:36:24:
d3:75:44:d7:fe:4d:f6:92:27:5c:8f:02:75:57:75:
17:46:df:a6:0c:a0:50:a3:7f:ab:60:73:41:a7:b6:
0c:ca:83:b6:d1:56:45:bc:b6:90:76:73:0d:71:2d:
c0:6e:a2:cb:68:b1:c2:8c:7b:11:88:2d:9a:3d:c9:
5c:05:72:6a:ed:5f:bf:12:02:b8:01:8b:df:19:4f:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:EE:2D:1F:7E:53:EF:50:DF:0B:7D:F7:F8:0F:32:C2:8E:7B:2C
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/yHXuLR9-U-9Q3wt99_gPMsKOeyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
45.12.80.0/22
45.87.172.0/22
45.137.96.0/24
45.158.56.0/22
85.209.222.0/24
171.22.76.0/22
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
Signature Algorithm: sha256WithRSAEncryption
48:55:96:74:93:ce:5c:88:a8:0f:2c:fe:91:df:45:10:bb:f3:
5f:91:80:5f:1e:05:7a:9b:c7:ce:07:08:b2:d0:c8:f5:92:dd:
c7:f0:3e:55:09:a1:08:4c:ef:04:53:7c:74:7f:07:d4:84:fa:
a2:4b:6c:98:2c:7e:cb:ed:76:ee:2c:39:c9:92:95:5e:9b:a8:
b1:d8:ca:75:a1:47:e5:82:86:36:53:ae:56:79:1e:c2:45:29:
61:da:08:9a:d3:af:11:33:b5:e6:ba:03:16:5b:93:ff:64:90:
c3:25:bc:6b:1a:52:c6:78:7f:74:fb:3d:43:31:a1:db:aa:1e:
22:3e:14:2b:ac:26:bf:4e:6e:cc:4a:f4:5c:6b:cc:bf:d6:ab:
96:79:bf:46:86:82:0a:7f:1d:5b:c4:89:f2:20:d5:5e:ef:e4:
e9:32:b5:8f:17:a8:0b:1e:b7:fb:be:32:6a:84:75:c0:5c:60:
4d:44:37:76:03:c5:0b:f8:09:88:4f:54:78:9c:2e:75:52:b4:
76:00:57:74:55:b0:6c:61:09:ed:5c:5c:bb:08:a9:ce:6f:9a:
68:a0:d5:9d:6b:9f:69:55:ac:31:d4:e9:c7:5d:54:e1:8e:13:
62:3e:24:27:ac:99:25:20:9b:5d:61:1f:6f:5a:70:0b:af:13:
f3:2c:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org