Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/wQFvZR--zvnQ81FW2EU7vphGGDI.roa
File: wQFvZR--zvnQ81FW2EU7vphGGDI.roa (raw, json)
Hash identifier: gtc63WsYQByYyWJW3lnHz/Jwyx5zHS+otOK4oRW/j2k=
Subject key identifier: C1:01:6F:65:1F:BE:CE:F9:D0:F3:51:56:D8:45:3B:BE:98:46:18:32
Certificate issuer: /CN=225e7ba910679ece289a4678aadff0f9d2c1d1a1
Certificate serial: 01869D6555BDFBAE34CD56158CEBF0FBABA4
Authority key identifier: 22:5E:7B:A9:10:67:9E:CE:28:9A:46:78:AA:DF:F0:F9:D2:C1:D1:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Il57qRBnns4omkZ4qt_w-dLB0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/wQFvZR--zvnQ81FW2EU7vphGGDI.roa
Signing time: Wed 01 Mar 2023 13:38:29 +0000
ROA not before: Wed 01 Mar 2023 13:38:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39201
IP address blocks: 45.128.71.0/24 maxlen: 24
45.128.69.0/24 maxlen: 24
45.128.70.0/24 maxlen: 24
185.152.183.0/24 maxlen: 24
185.152.180.0/24 maxlen: 24
185.152.181.0/24 maxlen: 24
185.152.182.0/24 maxlen: 24
2a0b:e5c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:65:55:bd:fb:ae:34:cd:56:15:8c:eb:f0:fb:ab:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225e7ba910679ece289a4678aadff0f9d2c1d1a1
Validity
Not Before: Mar 1 13:38:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1016f651fbecef9d0f35156d8453bbe98461832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:9c:76:75:c1:7f:dd:97:b1:8e:b0:d2:69:
62:ea:b7:77:2c:20:d3:07:81:11:9d:de:15:e0:4e:
0f:65:64:fa:16:b5:27:97:b9:84:a1:10:a7:fe:bd:
d0:4e:61:68:cb:a7:27:7d:e2:a5:95:14:62:42:a1:
b2:59:cd:92:6b:8b:19:eb:e3:13:fc:5c:e6:4f:85:
60:b3:8f:a1:cb:9c:84:2f:3d:d7:3a:d3:5e:1a:d8:
d1:95:2d:bf:16:2d:e6:55:51:f6:39:fd:7b:eb:73:
dc:45:a8:bd:fc:36:42:9f:00:d2:b3:a9:45:82:11:
f5:f7:d1:46:33:c9:3d:a5:46:ac:6b:c3:92:b8:92:
f5:be:df:53:24:6e:8e:c8:26:d3:3b:56:8d:0c:2f:
cf:3d:e6:6b:b1:06:55:f1:16:9f:2b:73:b4:fc:19:
ac:a2:d6:cf:b9:11:70:a8:ca:07:d2:6d:f0:5d:07:
47:2d:0c:c1:1d:df:52:d7:ec:bf:09:49:48:f5:4a:
60:59:9d:f5:8d:8b:e2:64:93:81:31:54:59:26:2c:
a1:5a:02:68:fb:6b:de:ca:ac:af:b0:21:2c:08:5f:
21:51:99:d6:cb:2a:00:36:e2:b2:85:13:67:9f:62:
be:96:81:c0:8e:30:ba:e4:5b:b4:0a:34:2f:74:fe:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:01:6F:65:1F:BE:CE:F9:D0:F3:51:56:D8:45:3B:BE:98:46:18:32
X509v3 Authority Key Identifier:
keyid:22:5E:7B:A9:10:67:9E:CE:28:9A:46:78:AA:DF:F0:F9:D2:C1:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Il57qRBnns4omkZ4qt_w-dLB0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/wQFvZR--zvnQ81FW2EU7vphGGDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/231914-032a-41ef-8975-9533a8491425/1/Il57qRBnns4omkZ4qt_w-dLB0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.69.0-45.128.71.255
185.152.180.0/22
IPv6:
2a0b:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:aa:b4:aa:d1:9a:13:b9:06:a8:a4:6c:1d:b1:81:2b:4a:48:
a8:a3:3d:33:86:af:1c:28:2c:78:16:cb:36:cf:d8:ae:a0:25:
47:40:2e:3d:b2:75:31:f0:5a:0b:a4:b1:1c:51:b9:c4:c0:a4:
fa:73:5f:8f:d2:46:dc:2d:4d:0e:58:10:1c:3d:0d:18:66:03:
e9:6e:c8:a1:6b:6c:2b:1f:97:d8:16:33:c5:de:a2:67:54:c2:
37:4b:ac:29:8d:8c:13:b2:e7:24:2c:56:38:f1:23:44:d2:d6:
e7:b3:98:15:a0:17:df:aa:75:a6:e2:99:ca:0f:77:08:5b:7d:
a3:4c:47:bf:9b:a6:8b:80:e0:bf:d6:43:db:c6:36:ce:1f:90:
51:70:0f:29:ca:21:15:10:78:56:b8:f0:bc:a7:23:98:3c:36:
75:6f:81:3f:00:80:50:dd:b0:5f:5f:46:69:3c:3a:2e:83:a4:
ef:aa:72:4f:68:b2:96:a2:6b:59:03:c1:07:4c:c7:a4:ae:5c:
55:dd:e0:93:3f:f7:60:c5:9d:3a:b0:e0:ac:f6:cd:da:d5:b1:
01:f7:71:53:57:2d:db:16:2a:34:df:dd:a2:f2:89:59:91:7a:
07:ba:c2:de:32:cd:68:ad:43:3d:7b:19:1f:25:17:83:71:43:
9a:84:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 11:30:58 2023 by rpki-client on console-fra.rpki-client.org