Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/oLYA63YEEl_sIew8OUmMc8T7IEw.roa
File: oLYA63YEEl_sIew8OUmMc8T7IEw.roa (raw, json)
Hash identifier: gF0E/pEwklbxMVDJN9WESv6J8wic6FZ9Z4iTM1mSYPw=
Subject key identifier: A0:B6:00:EB:76:04:12:5F:EC:21:EC:3C:39:49:8C:73:C4:FB:20:4C
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0184CF0E22C5F59E41A70FEAEEFD94F1709E
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/oLYA63YEEl_sIew8OUmMc8T7IEw.roa
Signing time: Thu 01 Dec 2022 18:58:40 +0000
ROA not before: Thu 01 Dec 2022 18:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 85.255.125.0/24 maxlen: 24
85.255.123.0/24 maxlen: 24
85.255.121.0/24 maxlen: 24
85.255.120.0/24 maxlen: 24
85.255.126.0/24 maxlen: 24
85.255.127.0/24 maxlen: 24
178.212.205.0/24 maxlen: 24
178.212.204.0/24 maxlen: 24
178.212.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:0e:22:c5:f5:9e:41:a7:0f:ea:ee:fd:94:f1:70:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Dec 1 18:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0b600eb7604125fec21ec3c39498c73c4fb204c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:d9:8d:f3:a8:61:4c:7a:11:c0:66:60:c0:
e2:ba:41:0c:1d:c7:34:94:4b:83:de:e6:ca:62:58:
6f:97:5c:8e:8b:a9:08:73:26:6a:55:c1:22:91:67:
57:33:6d:80:9a:00:8e:21:3c:3d:62:1b:fb:c8:35:
e4:17:5d:f1:bc:d4:b2:99:c8:6c:8f:78:49:18:51:
f1:7e:12:3d:cb:50:59:eb:73:1d:40:8f:36:36:84:
71:de:58:b9:63:7f:2e:75:2c:b1:32:c4:a0:76:fa:
aa:52:89:27:ef:98:69:72:7a:98:e7:a0:7c:7b:7e:
2e:fe:ae:42:4a:e9:73:45:c9:06:fa:4f:2e:e9:88:
90:e0:2a:63:7d:3f:3b:3e:c0:fc:80:b2:2e:db:56:
ac:aa:c7:ba:1d:6e:5f:10:05:d9:3d:29:7c:c0:3c:
ee:7e:76:34:4e:68:c2:eb:0b:31:d5:37:9b:9d:fc:
53:e0:24:e7:41:69:5c:90:19:2f:fa:04:7f:3d:08:
bb:ee:bc:5b:00:c2:a4:64:03:37:5b:69:7d:ab:5b:
b9:a4:26:00:e0:11:7d:69:d8:a8:9b:6c:f5:6a:95:
1c:52:a5:6a:03:3c:b8:23:e2:c5:75:a0:28:67:7d:
db:20:b7:8c:14:52:4f:7c:e9:20:f2:1d:6e:bb:26:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B6:00:EB:76:04:12:5F:EC:21:EC:3C:39:49:8C:73:C4:FB:20:4C
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/oLYA63YEEl_sIew8OUmMc8T7IEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.120.0/23
85.255.123.0/24
85.255.125.0-85.255.127.255
178.212.203.0-178.212.205.255
Signature Algorithm: sha256WithRSAEncryption
5c:8d:32:19:88:a1:4a:a0:2d:52:d5:84:6f:2e:4a:4f:32:63:
fc:a9:f5:fe:98:d7:7e:f8:0d:d9:cb:84:fa:24:cf:11:23:c4:
6f:40:b0:a5:68:bb:04:8f:4e:d7:fd:ef:ff:be:dc:a9:d8:d6:
58:9d:20:b4:12:82:cb:e3:2f:fb:99:c3:32:cd:0e:5b:9c:d5:
b8:04:5b:a9:28:3b:9b:4d:98:40:b0:92:a0:ae:60:26:fc:0a:
73:67:8d:91:fb:f6:13:ba:3f:a8:13:8e:49:c6:08:3b:6a:54:
c1:56:e2:2c:c7:2b:5e:18:d2:05:f6:3e:f7:67:7f:14:33:8e:
ad:c3:8c:80:24:46:5f:da:d5:87:5a:d1:21:ce:4e:84:82:04:
7b:b8:d9:2d:5e:91:5a:92:cc:14:be:fd:1b:b7:af:2a:2e:d2:
8e:cd:f9:e3:6d:c2:68:b2:ff:27:ce:a3:4f:ef:ec:cc:dd:74:
6a:cf:e6:5d:a6:c9:4c:1e:f3:0b:0d:f5:5e:68:cb:78:df:f1:
b2:a8:6f:2d:94:a1:bb:4f:89:cb:f0:dd:13:16:ad:e8:a2:5b:
a8:ad:6e:3b:74:2c:16:81:d4:43:97:3e:14:d5:8c:c8:17:56:
5e:c9:76:0d:bc:c7:51:30:a3:80:43:75:ba:ef:4f:8c:69:30:
2c:ac:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org