Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/MaAtTnuA6dQVwqvebwvj8-v1YkI.roa
File: MaAtTnuA6dQVwqvebwvj8-v1YkI.roa (raw, json)
Hash identifier: LMn3KOpANb/JaDEVTwfuaLz+QXkTl3YUfRC++rUwqbo=
Subject key identifier: 31:A0:2D:4E:7B:80:E9:D4:15:C2:AB:DE:6F:0B:E3:F3:EB:F5:62:42
Certificate issuer: /CN=adbeebf03a93f28fde987822c04a904e7e367959
Certificate serial: B05CF0
Authority key identifier: AD:BE:EB:F0:3A:93:F2:8F:DE:98:78:22:C0:4A:90:4E:7E:36:79:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb7r8DqT8o_emHgiwEqQTn42eVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/MaAtTnuA6dQVwqvebwvj8-v1YkI.roa
Signing time: Sat 01 Jan 2022 05:55:37 +0000
ROA not before: Sat 01 Jan 2022 05:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209581
IP address blocks: 83.136.178.0/24 maxlen: 24
83.136.177.0/24 maxlen: 24
83.136.179.0/24 maxlen: 24
83.136.176.0/24 maxlen: 24
83.229.38.0/24 maxlen: 24
83.229.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11558128 (0xb05cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbeebf03a93f28fde987822c04a904e7e367959
Validity
Not Before: Jan 1 05:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31a02d4e7b80e9d415c2abde6f0be3f3ebf56242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:9a:03:c5:74:a8:b8:a1:9c:a4:ea:66:86:
4a:91:c6:e4:81:47:91:a1:30:04:39:4a:45:2d:9b:
be:c4:e8:9e:72:70:29:4f:d6:54:c7:6d:d1:03:f2:
21:76:55:4b:fd:c3:2b:2e:8e:34:fe:de:79:d0:dd:
ae:bb:16:af:dc:95:0a:62:63:ce:19:45:f0:0b:15:
07:4a:f1:1e:67:7c:0c:3b:4c:17:f8:03:b2:34:a7:
4a:0f:13:23:fd:05:e9:5c:90:ee:d4:22:16:e9:94:
6b:5a:02:e6:ef:be:2b:21:c1:95:5f:67:d9:03:29:
5e:e2:1e:9a:1d:59:47:68:f9:1c:0e:93:22:55:90:
bb:5a:fc:47:21:08:77:a4:9a:dd:62:fd:aa:0c:27:
52:47:e5:15:2d:ff:3c:73:8c:d4:81:fd:b8:12:1e:
75:5f:03:5a:92:e0:07:0f:c8:65:8d:13:34:61:1b:
27:6f:1e:6f:80:69:b7:17:00:a4:6f:4d:8f:ae:38:
f8:f9:93:2b:a3:7e:5d:21:94:d5:64:f8:f9:84:34:
3b:4e:b2:a6:c5:27:cd:42:7d:3f:30:8b:27:93:39:
c7:ce:16:ca:80:e2:ef:e8:c0:ab:60:e5:0f:f1:ff:
17:48:14:3a:7c:b3:12:95:b2:17:36:30:ce:6b:02:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:2D:4E:7B:80:E9:D4:15:C2:AB:DE:6F:0B:E3:F3:EB:F5:62:42
X509v3 Authority Key Identifier:
keyid:AD:BE:EB:F0:3A:93:F2:8F:DE:98:78:22:C0:4A:90:4E:7E:36:79:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb7r8DqT8o_emHgiwEqQTn42eVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/MaAtTnuA6dQVwqvebwvj8-v1YkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/rb7r8DqT8o_emHgiwEqQTn42eVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.176.0/22
83.229.33.0/24
83.229.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9e:ba:6f:45:ce:57:90:83:68:fe:e8:9c:52:2f:1b:bc:aa:
ca:cd:c8:6d:9d:df:18:cb:72:5a:33:9e:6d:5c:24:0a:09:f5:
6e:6b:74:1d:61:e9:f6:f1:5c:6b:46:2d:3d:9f:c8:47:8c:45:
14:7d:96:88:27:5b:96:a6:0e:1a:70:6a:68:90:95:28:3e:af:
ba:98:d0:a0:8e:5b:ff:90:72:9c:0b:db:f5:9c:97:db:70:dc:
db:38:8e:78:e4:6b:e0:ca:12:50:1a:e6:78:b6:74:f8:8b:f4:
8b:87:64:bc:e7:ac:0d:2d:98:63:44:79:27:09:af:da:11:d5:
25:19:ee:bf:91:99:7d:28:a6:2e:6c:05:36:2e:13:61:51:2f:
de:7d:b1:a0:71:d7:43:65:90:97:5f:aa:58:25:38:00:fd:de:
11:e9:ed:d6:84:0f:8a:5b:a4:d8:48:0a:c2:06:c6:68:54:d3:
2a:88:b8:44:28:52:cc:22:68:8c:22:44:2a:59:a6:94:e5:40:
74:f2:bc:f2:40:98:0e:c9:f2:0c:1d:f5:21:17:69:65:3e:7c:
76:e2:4d:46:42:60:a3:4e:62:8c:68:e4:d0:86:78:9c:9c:dc:
34:05:6d:97:6a:c1:c7:98:75:21:a2:8a:42:de:bf:a9:4e:7d:
f6:c4:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org