Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/17472b-bd34-4b2b-ac5c-b0d2c72458f3/1/fWtqSRN6HYCne0rAIWW2819rO7Q.roa
File: fWtqSRN6HYCne0rAIWW2819rO7Q.roa (raw, json)
Hash identifier: QiryE/H02sIS6IVBXGWjYM8fa7Q8hVnO/9qpZjbq6mY=
Subject key identifier: 7D:6B:6A:49:13:7A:1D:80:A7:7B:4A:C0:21:65:B6:F3:5F:6B:3B:B4
Certificate issuer: /CN=961a7dc731894a6bdebae0d02d32cd68a138cfc7
Certificate serial: 018571308057AB898F0D10F4947880E121C5
Authority key identifier: 96:1A:7D:C7:31:89:4A:6B:DE:BA:E0:D0:2D:32:CD:68:A1:38:CF:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhp9xzGJSmveuuDQLTLNaKE4z8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/17472b-bd34-4b2b-ac5c-b0d2c72458f3/1/fWtqSRN6HYCne0rAIWW2819rO7Q.roa
Signing time: Mon 02 Jan 2023 06:34:42 +0000
ROA not before: Mon 02 Jan 2023 06:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57752
IP address blocks: 185.17.56.0/24 maxlen: 24
185.17.56.0/22 maxlen: 22
185.17.57.0/24 maxlen: 24
45.130.238.0/24 maxlen: 24
45.130.237.0/24 maxlen: 24
45.130.236.0/22 maxlen: 22
45.130.236.0/24 maxlen: 24
45.130.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:80:57:ab:89:8f:0d:10:f4:94:78:80:e1:21:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961a7dc731894a6bdebae0d02d32cd68a138cfc7
Validity
Not Before: Jan 2 06:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6b6a49137a1d80a77b4ac02165b6f35f6b3bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:5b:35:a7:35:0b:37:69:81:49:8b:a5:ef:
26:01:d9:0b:73:82:fd:b0:05:63:59:10:a5:18:1b:
51:0f:48:f7:4d:06:5b:76:1a:d1:94:70:92:7c:6d:
a0:02:ba:cd:b4:de:7d:58:7d:f8:bf:c7:e6:3c:6c:
a4:0f:55:40:1e:85:25:c2:89:be:35:0d:4d:3f:b4:
ce:08:b1:c2:23:36:69:3e:e9:f8:32:c8:ec:87:ec:
e2:78:27:34:f1:a7:a7:67:a1:ab:25:70:57:c9:07:
46:97:32:77:c9:a5:79:8d:36:d6:c2:92:46:94:4d:
f9:38:5f:f4:56:4d:5d:53:b8:cc:01:35:43:53:b5:
b4:d3:89:8b:15:dc:1e:1b:35:1a:bb:1a:f2:cf:09:
6c:b4:e6:63:96:25:52:25:6c:1e:fb:84:0f:18:9e:
22:41:c4:b4:9a:bc:01:66:a1:c2:d8:e4:67:c8:13:
c2:ff:19:c2:bf:0f:d3:9e:77:00:99:cf:d2:5b:c3:
25:65:0a:80:00:2f:a1:74:f7:aa:94:61:3d:5e:d3:
cd:61:c0:f4:58:32:9e:0c:d3:8f:23:82:42:c0:d0:
35:f6:17:24:36:7e:ef:05:a0:9c:36:17:39:e0:3b:
6d:d0:a7:de:56:60:0b:3e:3e:bc:ec:ca:21:6b:45:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6B:6A:49:13:7A:1D:80:A7:7B:4A:C0:21:65:B6:F3:5F:6B:3B:B4
X509v3 Authority Key Identifier:
keyid:96:1A:7D:C7:31:89:4A:6B:DE:BA:E0:D0:2D:32:CD:68:A1:38:CF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhp9xzGJSmveuuDQLTLNaKE4z8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/17472b-bd34-4b2b-ac5c-b0d2c72458f3/1/fWtqSRN6HYCne0rAIWW2819rO7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/17472b-bd34-4b2b-ac5c-b0d2c72458f3/1/lhp9xzGJSmveuuDQLTLNaKE4z8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.236.0/22
185.17.56.0/22
Signature Algorithm: sha256WithRSAEncryption
10:38:1e:f3:84:dd:ef:b8:d8:b0:c5:19:69:28:f6:0b:b2:b7:
bf:59:de:92:da:3a:94:10:9f:57:02:24:70:3c:79:70:be:58:
40:38:f9:04:f9:3d:e3:8c:26:8a:0d:fc:ac:f7:20:f3:a4:9a:
c6:e2:2a:c9:74:6e:a8:88:12:95:af:bd:0f:9c:92:59:30:d8:
c8:41:fb:a0:16:c5:9d:7e:46:94:28:56:e4:13:6e:c7:6d:07:
96:38:2a:c8:ec:11:c9:ca:4f:a1:44:a9:06:1b:6f:f1:f3:7f:
25:1e:28:20:5c:b3:9d:02:67:10:5e:f5:1c:14:78:0f:62:27:
e4:da:0e:12:df:59:dd:89:c8:5d:a0:b4:03:f7:79:c7:b8:64:
3b:4d:9d:78:d8:80:82:ff:14:c1:81:bd:48:48:88:f8:5c:2e:
4f:47:82:90:e7:f9:b9:40:61:25:e3:aa:a7:23:fe:73:ac:f0:
f3:a7:b4:e4:a7:d3:f5:7f:fc:e3:08:39:c6:b4:40:ef:c9:82:
9b:06:c3:21:7a:f0:af:ed:98:e4:3b:3a:8e:a5:0e:c6:61:ee:
f7:3d:b2:9d:91:ce:04:30:3c:ac:83:cd:e6:b1:a5:b9:ca:ca:
60:c9:11:b5:8f:6e:71:59:54:30:7e:48:20:e4:62:bf:aa:6e:
32:17:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org