Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/USvVCu8izoJni7nBJ2TaR-B8X8Y.roa
File: USvVCu8izoJni7nBJ2TaR-B8X8Y.roa (raw, json)
Hash identifier: MKjYWG8RjhzIWTVQz9HmMzy+rkHDJwbN/DI8/XZk53s=
Subject key identifier: 51:2B:D5:0A:EF:22:CE:82:67:8B:B9:C1:27:64:DA:47:E0:7C:5F:C6
Certificate issuer: /CN=4405a22269e7c274423cdc83e1ea141d6cb29bf7
Certificate serial: 01837EF6D2ABAFCB7FD6459B8691BE07F3BA
Authority key identifier: 44:05:A2:22:69:E7:C2:74:42:3C:DC:83:E1:EA:14:1D:6C:B2:9B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWiImnnwnRCPNyD4eoUHWyym_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/USvVCu8izoJni7nBJ2TaR-B8X8Y.roa
Signing time: Tue 27 Sep 2022 12:40:48 +0000
ROA not before: Tue 27 Sep 2022 12:40:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 62.100.0.0/18 maxlen: 18
84.41.128.0/17 maxlen: 17
217.17.128.0/20 maxlen: 20
212.67.160.0/19 maxlen: 19
217.112.112.0/20 maxlen: 20
80.248.32.0/20 maxlen: 20
88.211.128.0/18 maxlen: 18
2a02:938::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:f6:d2:ab:af:cb:7f:d6:45:9b:86:91:be:07:f3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4405a22269e7c274423cdc83e1ea141d6cb29bf7
Validity
Not Before: Sep 27 12:40:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=512bd50aef22ce82678bb9c12764da47e07c5fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:c0:f5:66:ce:3b:22:ad:82:b3:4f:54:e7:
38:7f:ff:43:f8:ec:b3:a9:dc:09:fe:25:2c:0d:eb:
bb:d7:10:00:2f:68:f5:59:98:83:9e:28:4d:f5:b3:
10:ac:db:62:c3:d0:16:29:89:d8:54:71:8c:04:e7:
ff:35:5c:a9:12:46:06:16:81:7e:24:c9:8a:bb:87:
dd:0a:ce:6b:66:f1:b8:f7:43:86:02:e6:6c:14:8b:
92:60:87:49:13:9f:ca:2c:82:eb:4a:03:f5:13:fe:
8c:3b:3e:f9:6c:7c:89:b6:cf:fc:d0:ea:37:e5:ff:
e4:93:b1:a4:b5:12:e8:5a:f9:63:cd:10:f3:31:69:
36:bb:79:d8:e7:bc:69:eb:91:b4:7c:ed:c2:e6:c9:
3a:b6:fa:a8:45:2a:17:69:84:11:be:7d:2e:7c:d9:
d2:05:2a:c9:10:85:bc:3b:f8:82:75:c9:3f:30:d1:
03:c5:67:35:59:ab:fe:74:51:ab:e6:c3:c9:d1:5f:
d4:82:b5:d8:ef:5e:0f:83:7e:3b:d8:9e:f9:c2:8c:
1c:ac:8d:51:ee:b1:70:4d:80:1a:da:c8:a5:65:37:
4e:ad:28:88:88:fd:ad:6f:4b:36:0b:4e:ef:f0:59:
c4:c4:46:29:e4:14:5f:23:91:1b:b4:89:aa:e5:77:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2B:D5:0A:EF:22:CE:82:67:8B:B9:C1:27:64:DA:47:E0:7C:5F:C6
X509v3 Authority Key Identifier:
keyid:44:05:A2:22:69:E7:C2:74:42:3C:DC:83:E1:EA:14:1D:6C:B2:9B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWiImnnwnRCPNyD4eoUHWyym_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/USvVCu8izoJni7nBJ2TaR-B8X8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/RAWiImnnwnRCPNyD4eoUHWyym_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.0.0/18
80.248.32.0/20
84.41.128.0/17
88.211.128.0/18
212.67.160.0/19
217.17.128.0/20
217.112.112.0/20
IPv6:
2a02:938::/29
Signature Algorithm: sha256WithRSAEncryption
9f:1b:e3:db:7f:06:c6:32:91:7b:35:36:db:36:3d:e7:6d:11:
ba:a1:d7:02:c6:17:56:50:97:a7:fb:da:45:b9:9e:57:fe:b9:
03:89:8a:dc:66:7b:94:cd:91:96:b7:71:77:be:fc:d1:70:49:
2f:d5:c1:89:8d:0a:2b:1f:34:3b:6b:ab:5d:3a:3a:d0:74:4d:
b5:45:de:f8:df:c8:76:44:da:88:93:e5:d7:d9:6f:99:03:62:
e1:32:83:a0:c9:5c:5c:33:c7:eb:16:56:35:f4:ad:d2:71:2a:
ac:96:e5:f9:60:8c:4c:a0:3e:22:d6:66:41:5f:fe:8e:c0:79:
b3:07:a5:ce:5d:c4:82:84:a1:af:db:b7:c0:65:c1:1d:57:59:
cb:b5:0e:af:d7:45:73:0c:76:dd:08:f7:34:96:de:c6:21:48:
03:d4:d3:30:44:f0:a8:61:8d:a3:b1:aa:55:76:65:eb:00:b1:
a4:1c:75:9a:d7:46:a6:48:63:16:33:5a:db:bd:af:e9:8c:21:
57:29:66:07:fc:c3:2b:c7:ed:7f:3b:8d:85:47:5c:9e:9b:44:
74:4a:d7:2f:4a:fe:95:22:44:5f:28:7b:29:66:11:9a:69:59:
5a:cb:e9:0f:c9:7b:d7:13:49:f7:96:09:c9:31:cf:21:d2:86:
7f:5a:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:43 2024 by rpki-client on console-ams.rpki-client.org