Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/EiZxI8hMoPEiuAXjLttoqbCCw98.roa
File: EiZxI8hMoPEiuAXjLttoqbCCw98.roa (raw, json)
Hash identifier: frCC4uZ2iqcomJuKFHCJSWwzUoYbfwWx25DwoBgoUlY=
Subject key identifier: 12:26:71:23:C8:4C:A0:F1:22:B8:05:E3:2E:DB:68:A9:B0:82:C3:DF
Certificate issuer: /CN=39b463372b9ddf448b3fc3eaed58441194782d06
Certificate serial: 01824A61180957A399F76D8C80684558A653
Authority key identifier: 39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/EiZxI8hMoPEiuAXjLttoqbCCw98.roa
Signing time: Fri 29 Jul 2022 14:34:13 +0000
ROA not before: Fri 29 Jul 2022 14:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 193.39.95.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
193.39.93.0/24 maxlen: 24
193.39.92.0/24 maxlen: 24
185.118.188.0/24 maxlen: 32
185.118.191.0/24 maxlen: 24
185.118.189.0/24 maxlen: 32
185.118.190.0/23 maxlen: 32
185.253.144.0/22 maxlen: 22
45.144.248.0/22 maxlen: 22
2a0c:3cc0::/32 maxlen: 32
2a03:6280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:61:18:09:57:a3:99:f7:6d:8c:80:68:45:58:a6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b463372b9ddf448b3fc3eaed58441194782d06
Validity
Not Before: Jul 29 14:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12267123c84ca0f122b805e32edb68a9b082c3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:83:dd:65:d3:9a:21:27:44:16:6c:26:e9:ca:
38:7e:a9:10:1d:d8:e2:9c:25:18:04:31:d5:1b:5b:
8d:a4:cb:39:26:2f:1d:9a:b8:9b:13:0a:6b:1d:28:
c3:2a:e6:af:c0:d7:61:37:f7:a7:51:a5:5e:93:b6:
10:b4:8f:f9:0b:1b:f3:25:57:05:3c:f1:bd:bf:d6:
d9:15:7d:d6:a7:80:39:ea:72:3f:da:9b:1a:96:c0:
b7:fe:54:33:21:27:bb:0e:c3:5e:9d:f9:c6:23:1c:
d9:22:ef:7e:d1:cb:79:97:55:43:01:d5:a5:c0:1a:
7b:03:8a:f4:a4:c4:a5:b7:8a:40:bc:21:82:5f:79:
fb:98:f0:25:05:49:e0:10:32:0d:03:57:b5:2c:cd:
68:27:fe:03:8c:28:41:39:5e:a6:1e:f6:3b:6a:f5:
58:1c:2b:f6:50:1c:40:33:a8:59:50:55:66:45:51:
1a:a1:0f:18:31:e6:3c:97:84:9f:fb:e2:69:f7:36:
39:b0:2f:a3:95:43:60:d0:fe:d0:4b:22:c8:7b:2c:
83:f8:5a:09:14:61:45:dc:61:05:3a:62:18:6c:48:
b8:9e:9b:de:73:8f:1b:54:da:ad:02:b5:3a:3d:a0:
f6:e2:9a:55:79:76:dd:0d:b2:c6:54:c0:08:32:7c:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:71:23:C8:4C:A0:F1:22:B8:05:E3:2E:DB:68:A9:B0:82:C3:DF
X509v3 Authority Key Identifier:
keyid:39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/EiZxI8hMoPEiuAXjLttoqbCCw98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/ObRjNyud30SLP8Pq7VhEEZR4LQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
185.118.188.0/22
185.253.144.0/22
193.39.92.0/22
IPv6:
2a03:6280::/29
2a0c:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
40:c5:c6:97:1a:05:67:86:9c:1f:93:2d:f7:f0:e6:99:a0:35:
28:98:88:97:d0:c7:6b:88:43:7b:83:96:40:84:c9:71:94:0a:
76:92:2f:81:a7:44:7c:48:c8:9b:c3:28:2f:91:72:80:8a:10:
fe:0a:d6:cf:66:50:9a:4d:2d:eb:ef:1b:07:1d:2a:ed:6c:75:
a5:6a:a4:ee:dd:af:bc:80:07:55:3b:7c:28:18:8e:0a:dc:25:
01:4a:fe:18:01:bf:34:96:fa:e6:e5:57:50:6b:2c:40:e6:ce:
c5:51:43:ac:66:f0:dd:5c:40:ed:44:d0:ba:c2:74:93:b0:4e:
89:55:39:4e:5a:93:8b:99:bc:06:04:44:33:5d:ba:e5:fe:20:
bf:0f:8c:03:36:f5:7d:64:83:99:e6:cc:a0:83:63:55:04:76:
b1:b3:40:88:38:48:8f:b2:4a:be:f3:aa:7f:6b:c7:49:bc:a5:
0d:83:75:92:ab:ed:d1:ed:fd:21:1d:aa:7b:0b:c1:cd:b3:81:
1f:6c:6c:1a:5e:c1:95:94:8b:ff:3b:05:1d:d6:da:b0:28:fa:
88:d9:a9:9c:02:2f:06:79:c1:98:2f:2e:c2:33:35:8c:6c:34:
8c:b9:ec:e4:9d:de:0d:2e:fd:d3:c7:c4:f2:c9:86:41:75:72:
aa:65:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:34 2024 by rpki-client on console-ams.rpki-client.org