Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/neexVhf0x4uMM2Ki37q46Mrw8to.roa
File: neexVhf0x4uMM2Ki37q46Mrw8to.roa (raw, json)
Hash identifier: 3waI127SXY69/Pe5LkuNukD4+HVxpMrCXYzLidG5qWg=
Subject key identifier: 9D:E7:B1:56:17:F4:C7:8B:8C:33:62:A2:DF:BA:B8:E8:CA:F0:F2:DA
Certificate issuer: /CN=225e7ba910679ece289a4678aadff0f9d2c1d1a1
Certificate serial: 01856E2F8B60F7E9CA37BA3C2FA267ACB62E
Authority key identifier: 22:5E:7B:A9:10:67:9E:CE:28:9A:46:78:AA:DF:F0:F9:D2:C1:D1:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Il57qRBnns4omkZ4qt_w-dLB0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/neexVhf0x4uMM2Ki37q46Mrw8to.roa
Signing time: Sun 01 Jan 2023 16:34:47 +0000
ROA not before: Sun 01 Jan 2023 16:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39201
IP address blocks: 45.128.71.0/24 maxlen: 24
45.128.69.0/24 maxlen: 24
45.128.70.0/24 maxlen: 24
185.152.183.0/24 maxlen: 24
185.152.180.0/24 maxlen: 24
185.152.181.0/24 maxlen: 24
185.152.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:8b:60:f7:e9:ca:37:ba:3c:2f:a2:67:ac:b6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225e7ba910679ece289a4678aadff0f9d2c1d1a1
Validity
Not Before: Jan 1 16:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9de7b15617f4c78b8c3362a2dfbab8e8caf0f2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:8d:43:88:23:35:d2:8c:f9:bb:6d:45:82:
c1:6d:aa:b2:22:5b:45:84:d8:a9:35:af:35:84:de:
14:9a:eb:47:80:49:0c:90:ff:84:93:d2:6b:b1:25:
e4:45:4c:f3:d3:78:79:a7:02:6d:89:8d:71:e8:60:
24:7a:8c:cd:c5:95:db:cb:e2:8c:13:5e:a8:78:ac:
4e:6c:0b:e8:68:56:86:43:28:62:ad:79:bb:c9:87:
a6:1d:34:62:64:61:4c:b1:2d:06:3d:52:6e:d4:d4:
3d:db:6c:b3:82:51:f9:ab:19:21:07:ef:c5:0e:70:
e4:fb:8a:7c:e1:85:27:5b:cf:9c:20:58:5b:f5:6f:
c9:23:ca:d6:34:8e:26:b6:68:4c:b2:55:a6:bf:1b:
92:88:41:6e:31:6c:d3:9c:2a:8c:d2:71:de:bb:3e:
e8:39:11:11:a7:7d:e5:7e:ae:b8:7e:78:7c:cf:eb:
d0:ea:1f:b0:df:70:28:32:0f:97:30:0c:d7:fd:83:
53:88:ba:ff:86:b1:b1:d3:c8:fd:ac:d0:34:61:fa:
9f:b5:1a:bb:d1:2d:d0:d7:27:f6:c6:c4:db:14:1e:
6e:12:44:ce:90:65:de:96:d2:32:9b:d0:98:c0:15:
67:18:9d:87:52:88:00:b8:45:50:52:0a:7e:b7:98:
d5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:B1:56:17:F4:C7:8B:8C:33:62:A2:DF:BA:B8:E8:CA:F0:F2:DA
X509v3 Authority Key Identifier:
keyid:22:5E:7B:A9:10:67:9E:CE:28:9A:46:78:AA:DF:F0:F9:D2:C1:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Il57qRBnns4omkZ4qt_w-dLB0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/neexVhf0x4uMM2Ki37q46Mrw8to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/Il57qRBnns4omkZ4qt_w-dLB0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.69.0-45.128.71.255
185.152.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:f6:7d:05:de:93:45:12:60:17:32:60:b4:2c:35:11:ed:82:
27:e3:3e:f2:64:3c:e0:1c:75:e2:09:c2:d5:8d:33:0f:a3:7b:
af:fc:27:48:de:82:21:35:fa:2b:14:75:70:62:d5:a8:10:38:
08:02:1c:58:30:9b:b2:1c:c0:04:cd:8c:ae:89:ca:09:4e:92:
f7:93:58:87:fb:c4:d2:7d:d1:4e:ca:e0:64:1b:f7:db:b1:97:
d0:84:f3:e9:43:4d:83:93:df:b8:69:5a:f4:1c:13:57:8c:e2:
00:0e:45:43:68:55:e0:d6:43:a7:ce:66:5d:f9:97:26:64:cb:
78:22:85:fd:93:8e:8d:29:76:ea:ad:e4:0c:4b:da:fb:98:e3:
86:42:aa:47:47:95:3b:92:2f:94:ba:6d:f3:60:5f:91:b6:26:
7e:75:57:13:8d:ef:c3:9e:78:f7:2d:46:12:99:04:f1:4f:35:
2a:11:66:36:19:ff:ea:dd:6f:39:60:f4:77:f7:4b:d1:76:af:
c9:a5:6e:59:f6:76:a6:a5:bd:22:d2:48:a7:c9:d2:9a:89:85:
ec:d2:21:5e:f3:a0:2d:14:00:11:4b:b8:20:f6:db:c0:f5:16:
db:40:fa:05:91:bb:c0:8e:c3:2e:23:7c:d0:c4:59:90:c9:74:
b2:5e:1b:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:28 2024 by rpki-client on console-fra.rpki-client.org