Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/myoRv4PXSwGJxAhL1k0-OzSySo4.roa
File: myoRv4PXSwGJxAhL1k0-OzSySo4.roa (raw, json)
Hash identifier: qOjpyfwV+Ku2Z3GjAHL5Psf1FI8epugByz5/MhjyzfA=
Subject key identifier: 9B:2A:11:BF:83:D7:4B:01:89:C4:08:4B:D6:4D:3E:3B:34:B2:4A:8E
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 03608DFC
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/myoRv4PXSwGJxAhL1k0-OzSySo4.roa
Signing time: Mon 02 May 2022 19:05:51 +0000
ROA not before: Mon 02 May 2022 19:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 194.180.232.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
45.133.112.0/24 maxlen: 24
45.133.113.0/24 maxlen: 24
45.133.114.0/23 maxlen: 24
45.147.8.0/22 maxlen: 24
45.136.24.0/22 maxlen: 24
45.147.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56659452 (0x3608dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: May 2 19:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b2a11bf83d74b0189c4084bd64d3e3b34b24a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:ea:13:6a:15:26:d2:94:51:cf:55:4a:0b:
68:c4:28:20:50:90:3c:46:ab:64:52:2f:ae:d7:fe:
86:16:78:07:39:ed:62:0a:6b:32:11:86:93:cb:92:
6f:48:0c:eb:14:91:1d:b1:75:8d:e8:0c:c8:6a:a7:
5e:92:32:95:81:60:c9:84:03:54:5b:d2:4a:92:6a:
2c:a4:4a:3d:9b:87:a5:f8:28:04:ff:f0:bf:75:47:
ff:de:f1:b3:be:2c:9f:49:18:4d:61:83:fb:c7:b7:
55:39:1e:7a:b0:dd:88:38:de:be:da:19:35:62:ec:
a9:86:8e:35:75:16:d1:d2:17:04:d3:6a:a0:b0:f4:
cb:a1:2a:18:f4:b1:f4:f7:72:d7:69:af:b9:78:ec:
2d:c4:69:f5:6b:25:82:9d:e9:35:17:34:74:22:61:
11:9c:dd:0f:56:f6:2c:99:ed:e9:3f:77:dc:ca:0a:
47:2e:dd:54:a0:83:a5:69:81:e5:38:7d:71:36:76:
05:a9:e5:cd:bf:65:fb:21:d9:db:e0:1f:e1:38:5d:
a3:c5:0b:c4:05:bf:9a:8a:ba:01:ce:30:cb:05:81:
ad:0e:9d:50:f9:58:d0:4d:f5:93:dc:e0:2d:e4:ba:
cc:80:8c:97:c6:df:3d:17:aa:d5:1c:f5:4b:62:98:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:11:BF:83:D7:4B:01:89:C4:08:4B:D6:4D:3E:3B:34:B2:4A:8E
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/myoRv4PXSwGJxAhL1k0-OzSySo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
45.136.24.0/22
45.147.8.0/22
45.147.232.0/22
194.180.232.0/23
194.180.236.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:90:c4:c9:8a:41:b3:1d:55:13:e0:e6:86:d7:9c:5b:c2:f5:
18:c9:43:eb:e5:b5:26:3d:4b:fc:1e:10:81:bf:3b:40:aa:37:
b9:a2:8f:e7:96:4d:af:55:53:04:f8:37:f8:d7:b7:b8:d6:1e:
77:e6:6a:fc:48:f3:32:6d:06:78:9c:a6:03:9a:41:4a:04:b9:
8b:30:4d:6e:c0:3a:f0:74:f4:55:de:80:5b:8e:fc:9b:ee:32:
ae:2a:97:67:3b:10:20:73:81:79:3a:68:49:1c:e9:10:0b:4d:
11:8f:1c:2b:08:b2:c7:d4:7b:5b:47:5b:2b:42:fc:41:cf:1d:
a0:b3:19:f7:76:29:09:79:07:d5:ef:95:4c:11:a2:ff:38:28:
c9:ce:84:c2:3d:14:f5:d1:a1:51:4b:0c:b9:b5:58:54:5b:16:
c4:f2:be:1f:e4:5c:46:8b:60:45:d3:28:1d:57:d3:7e:51:16:
3f:6a:64:24:fc:47:1f:4d:91:46:96:ac:eb:bb:40:92:8a:73:
b9:ec:03:f4:40:a7:2b:22:e0:6c:ec:87:65:28:cb:a1:eb:31:
ee:6e:d0:5e:d1:c6:88:8e:55:2d:4f:6b:35:98:b4:a5:31:83:
97:53:36:88:ad:fe:6a:36:86:d2:f9:c4:85:79:6f:1b:f3:c4:
9f:43:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-ams.rpki-client.org