Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/B4VZUfm-LxiRNY7xnjqCNLQLdRE.roa
File: B4VZUfm-LxiRNY7xnjqCNLQLdRE.roa (raw, json)
Hash identifier: kNCSNEU0658ldUGsQKOUgCITyaEuXTlBl/b7GbgMi/I=
Subject key identifier: 07:85:59:51:F9:BE:2F:18:91:35:8E:F1:9E:3A:82:34:B4:0B:75:11
Certificate issuer: /CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
Certificate serial: 0186A31E2CB38E71E9727FB9EA12BBC4B50C
Authority key identifier: 9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/B4VZUfm-LxiRNY7xnjqCNLQLdRE.roa
Signing time: Thu 02 Mar 2023 16:18:29 +0000
ROA not before: Thu 02 Mar 2023 16:18:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.48.217.0/24 maxlen: 24
45.157.232.0/22 maxlen: 24
185.254.96.0/22 maxlen: 24
2a0c:4ac0:1100::/40 maxlen: 40
2a0c:4ac0:1200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:1e:2c:b3:8e:71:e9:72:7f:b9:ea:12:bb:c4:b5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
Validity
Not Before: Mar 2 16:18:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07855951f9be2f1891358ef19e3a8234b40b7511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:0a:a0:4e:9a:40:95:69:07:61:a6:e0:6f:
47:80:9e:ff:42:49:17:40:d5:c9:2b:80:03:8e:69:
8d:95:14:48:f5:df:b0:b2:7b:14:5e:a6:ac:0b:c1:
56:6d:6b:93:71:74:32:13:e2:68:dd:27:88:a6:91:
48:92:de:61:99:08:34:ce:fd:ef:cb:db:36:d4:92:
ba:8e:5c:b0:b0:1e:92:e4:31:6e:da:9b:95:6f:19:
c6:15:ee:66:b5:64:1b:88:1a:f2:da:74:7a:ea:41:
97:84:53:94:97:5f:25:74:e0:ca:40:3e:b1:1a:99:
aa:64:47:bf:71:93:17:31:3e:28:9f:da:15:db:15:
5a:52:17:41:31:fd:b2:ad:42:49:f9:3c:ce:df:7a:
d7:53:c2:ad:fb:dc:33:c6:70:3c:50:8c:bc:d3:a6:
11:da:de:f0:6a:bf:69:e5:33:57:d1:71:06:b2:93:
9b:be:75:1c:4f:e2:73:ed:08:fa:91:5e:54:1f:ae:
a5:79:d3:8f:03:12:ab:47:62:03:b4:4f:a9:be:40:
e0:62:a5:30:67:3d:09:3a:67:dc:81:82:31:1c:e0:
3f:d2:0a:96:e9:97:6e:fb:61:58:11:81:4e:e9:0d:
15:28:a5:e1:b6:40:29:92:07:76:55:0a:e7:d9:7d:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:59:51:F9:BE:2F:18:91:35:8E:F1:9E:3A:82:34:B4:0B:75:11
X509v3 Authority Key Identifier:
keyid:9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/B4VZUfm-LxiRNY7xnjqCNLQLdRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.232.0/22
185.254.96.0/22
194.48.217.0/24
IPv6:
2a0c:4ac0:1100::-2a0c:4ac0:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
27:df:99:41:70:6e:90:4c:db:05:48:ed:0c:66:46:7c:76:83:
be:eb:70:35:56:ae:c2:98:a2:ca:f0:7c:b4:a8:b9:d3:f5:38:
af:1d:d7:79:75:e0:8f:92:18:0d:c5:16:a3:3a:de:ad:38:dd:
96:5f:2b:80:d7:08:d0:40:2c:42:59:f6:65:93:39:78:ad:35:
a8:44:a7:bf:05:3a:5f:70:4f:79:de:04:c0:b0:dd:24:02:94:
e2:db:4e:fa:41:ce:a9:f7:70:06:90:89:0a:67:bb:0c:a7:df:
b2:25:57:70:c6:0e:0a:d8:25:ad:55:67:3c:af:a4:8e:ff:90:
cf:db:0a:9e:9b:ac:49:93:89:53:43:b0:80:63:55:f2:fd:cc:
9d:4d:a1:44:59:72:bb:6c:8b:f4:39:97:ab:4d:4d:c8:b4:94:
ee:01:e5:50:c4:fd:ec:9b:dc:37:48:50:f7:74:60:b1:d4:d3:
1f:95:58:d3:72:5e:66:fe:52:75:f0:db:e9:13:0a:f4:b8:9c:
c7:5c:6f:f6:2b:d7:6f:ec:b2:76:7e:ab:a4:c3:29:49:2e:fb:
a0:d1:dd:e3:19:a1:50:5d:6b:08:1f:65:f9:e8:31:c2:5b:b7:
00:f7:ff:78:35:06:2b:30:ac:77:4d:d7:80:42:b9:c1:d2:41:
85:d4:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:44 2024 by rpki-client on console-ams.rpki-client.org