Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/eSRaCzTf60n6F54cSXttf-0VpW8.roa
File: eSRaCzTf60n6F54cSXttf-0VpW8.roa (raw, json)
Hash identifier: 2O+cKDjUAtzk4Dyhnp4UWY6LzlKrEmw3SChwyEALUKU=
Subject key identifier: 79:24:5A:0B:34:DF:EB:49:FA:17:9E:1C:49:7B:6D:7F:ED:15:A5:6F
Certificate issuer: /CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
Certificate serial: 01856D13BEF54F98360DA45C3EBC7344DEF4
Authority key identifier: 9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/eSRaCzTf60n6F54cSXttf-0VpW8.roa
Signing time: Sun 01 Jan 2023 11:24:48 +0000
ROA not before: Sun 01 Jan 2023 11:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.48.217.0/24 maxlen: 24
45.157.232.0/22 maxlen: 22
185.254.96.0/22 maxlen: 22
2a0c:4ac0:1200::/40 maxlen: 40
2a0c:4ac0:1100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:be:f5:4f:98:36:0d:a4:5c:3e:bc:73:44:de:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
Validity
Not Before: Jan 1 11:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79245a0b34dfeb49fa179e1c497b6d7fed15a56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:cf:c2:9c:ec:66:9f:62:5d:fe:3d:e1:3b:
c4:48:55:75:e2:ff:26:72:a7:23:ed:d9:35:22:00:
b3:a7:05:9c:6f:c0:5b:4b:d1:7c:2a:86:90:5b:a6:
44:23:d7:ae:f2:83:5b:b4:7b:ce:ba:f5:11:d3:96:
93:ac:23:a6:14:fc:9c:28:f1:bc:9e:f0:93:c9:04:
5a:3d:4b:99:e7:81:d8:f3:ad:40:64:44:13:70:7b:
b2:88:fd:67:e7:c7:a0:17:db:be:c5:54:91:66:2b:
1b:d6:b9:94:d1:1e:aa:b2:0e:94:82:fd:db:5f:0e:
25:68:1b:99:87:3e:2f:88:13:1c:7a:29:02:ac:f3:
f6:ac:db:09:94:99:3c:70:9d:63:dd:70:1b:cd:c5:
7d:69:ab:10:f6:50:61:66:9c:fb:64:94:bd:bb:e7:
7a:55:05:12:81:34:bb:f9:96:13:04:3d:08:cc:ac:
1d:34:c0:77:db:87:dc:b5:d5:5d:c7:02:b0:ab:82:
86:0a:d6:78:1c:47:5b:a2:80:0c:75:04:6d:6f:30:
85:b4:b3:f4:5c:e2:77:26:06:b8:cb:c0:89:f6:06:
f7:51:a5:b1:a3:ad:53:b5:22:ad:85:76:b5:1f:40:
ea:f7:29:28:0e:ca:c5:e4:fb:ab:61:f6:a8:ab:c8:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:24:5A:0B:34:DF:EB:49:FA:17:9E:1C:49:7B:6D:7F:ED:15:A5:6F
X509v3 Authority Key Identifier:
keyid:9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/eSRaCzTf60n6F54cSXttf-0VpW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.232.0/22
185.254.96.0/22
194.48.217.0/24
IPv6:
2a0c:4ac0:1100::-2a0c:4ac0:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:97:43:43:be:4e:3d:e6:cd:b3:26:47:df:6d:df:f2:4b:fa:
1a:01:f7:1a:8a:61:b8:b0:ab:de:d4:2e:9b:fe:8a:fc:8b:07:
09:7c:bb:7a:e1:da:3a:a9:7f:e5:e1:6a:8b:14:7c:aa:48:f8:
b8:8b:19:e2:cd:5f:d2:c4:97:e6:72:c0:36:eb:01:9e:c7:ca:
d7:58:59:35:d2:5e:aa:98:a2:2f:e2:55:a4:b8:7c:23:ef:84:
9d:bd:d0:0b:ba:55:5d:34:cc:2c:a6:df:35:a9:20:5d:1e:b1:
e7:0e:1e:81:6c:6d:3c:62:df:43:9c:76:c7:87:7e:c4:44:ef:
6d:d1:e4:69:02:f8:0a:17:9d:93:aa:8a:63:cf:3d:5b:9e:06:
54:28:6a:ff:35:65:7e:15:ba:af:c3:87:1a:bf:47:7a:9f:fc:
a8:07:78:6f:9a:56:49:24:0a:3d:f9:7b:43:b7:35:c6:18:c3:
62:59:b8:90:07:8b:09:27:1d:c8:80:91:59:dd:10:c1:01:94:
08:55:52:74:70:de:ff:d0:11:bb:a6:d7:29:ff:f4:11:a9:bd:
d0:87:4f:da:65:6b:ba:ee:a1:37:9f:80:c6:9f:89:b2:92:44:
a3:f7:a1:04:ca:68:90:5d:75:ac:ef:da:99:d8:14:67:a3:3f:
c0:f9:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:50 2024 by rpki-client on console-fra.rpki-client.org