Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/9nJEuvJ5qXVOI9Kes3m0AmRl6Po.roa
File: 9nJEuvJ5qXVOI9Kes3m0AmRl6Po.roa (raw, json)
Hash identifier: EtrP9fDo5qhRi4cKwWt2Vk7Rw4Ewg9QSGkIdWljUuC8=
Subject key identifier: F6:72:44:BA:F2:79:A9:75:4E:23:D2:9E:B3:79:B4:02:64:65:E8:FA
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 0367940B
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/9nJEuvJ5qXVOI9Kes3m0AmRl6Po.roa
Signing time: Wed 04 May 2022 23:54:28 +0000
ROA not before: Wed 04 May 2022 23:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 194.180.232.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
45.133.112.0/22 maxlen: 24
45.147.8.0/22 maxlen: 24
45.136.24.0/22 maxlen: 24
45.147.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57119755 (0x367940b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: May 4 23:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f67244baf279a9754e23d29eb379b4026465e8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:fa:21:b8:bf:9d:8c:17:ad:62:19:4d:e8:
c9:c3:d1:d1:b2:df:a9:41:25:94:dc:7d:32:7e:ae:
14:9a:83:1c:82:22:8a:08:ab:14:e7:63:65:ff:10:
e5:45:e1:dc:df:a8:95:e6:0b:df:2c:be:b7:1e:ce:
61:8a:58:cf:81:a4:ee:f9:8d:4f:6b:9e:6e:17:89:
2b:0f:d7:22:7b:ec:bd:d2:0d:75:24:99:5d:3c:16:
bd:f5:eb:98:f8:f3:0c:0e:18:45:6a:1a:4f:03:a4:
02:bd:1d:0d:22:4c:b8:16:2b:19:7b:46:c5:24:a1:
c1:66:c0:13:fe:c2:61:44:e4:a7:c7:b3:2e:3e:64:
df:a6:65:61:f8:bc:e6:e3:ba:ea:2c:c9:23:be:f6:
3b:f6:45:9d:90:a4:3a:60:7e:04:04:5b:67:da:ef:
bf:a8:d9:c9:b8:ed:18:99:0c:87:40:86:b4:43:f4:
2d:06:80:a4:5f:2c:3d:fa:32:8c:e7:b7:a6:0b:ed:
f2:45:73:1d:d0:64:4e:e1:4a:e9:79:7b:59:b6:56:
ee:d2:b2:fc:64:2c:61:89:ea:54:da:8a:43:9f:bb:
48:37:09:54:5b:15:b6:b9:e3:60:6a:1a:13:4c:c7:
95:57:fe:70:f4:80:63:e0:43:07:cf:7e:dc:03:dd:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:44:BA:F2:79:A9:75:4E:23:D2:9E:B3:79:B4:02:64:65:E8:FA
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/9nJEuvJ5qXVOI9Kes3m0AmRl6Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
45.136.24.0/22
45.147.8.0/22
45.147.232.0/22
194.180.232.0/23
194.180.236.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:1d:68:c7:23:96:df:7c:e6:b7:9f:4a:cc:7d:22:2c:05:0f:
97:d8:9a:b2:2d:fb:01:44:30:11:8d:55:61:a6:d0:71:75:8d:
6d:eb:14:4b:51:0f:7c:66:8a:89:2a:9d:33:90:60:2b:95:59:
7f:43:2b:93:18:73:8b:3e:92:ab:c7:5f:fb:4c:4d:8c:8a:5b:
b5:19:4b:6b:eb:06:36:1c:90:06:48:ac:59:ca:7a:fd:ce:ef:
9f:09:ce:74:9f:93:c6:5a:1e:4e:77:41:4e:43:37:58:b2:30:
5f:a5:aa:5b:23:eb:e9:b3:e0:0c:59:67:4d:22:ce:e0:9c:a8:
d5:b0:89:6c:32:d0:46:3e:c0:79:40:2c:23:3a:09:c6:58:e2:
b7:28:55:8c:d6:f9:06:56:3c:5e:19:ba:56:7b:a4:ae:1c:21:
b3:77:c2:4c:17:1c:13:0b:1b:0d:de:86:79:1a:bf:c0:ee:06:
e1:69:47:cd:c6:aa:a2:df:14:90:3d:99:a3:ac:15:00:fd:8f:
97:04:b6:e4:e5:e3:ab:36:6d:61:8b:8d:0c:41:9d:7b:c3:d7:
23:31:64:2c:74:29:c2:e3:80:73:e7:2b:35:37:7b:41:79:54:
05:c2:fa:29:07:60:c7:32:e8:6f:e6:f8:11:63:95:13:16:d1:
15:95:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:58 2023 by rpki-client on console-fra.rpki-client.org