Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/Kelhgx7wymiuqOFSRXsOuLqgy5w.roa
File: Kelhgx7wymiuqOFSRXsOuLqgy5w.roa (raw, json)
Hash identifier: pypYjm0LuhMeT98ve1HSHyGe9+LY0AEkOJ/kaNH/+Ok=
Subject key identifier: 29:E9:61:83:1E:F0:CA:68:AE:A8:E1:52:45:7B:0E:B8:BA:A0:CB:9C
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 554F
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/Kelhgx7wymiuqOFSRXsOuLqgy5w.roa
Signing time: Mon 16 May 2022 06:49:25 +0000
ROA not before: Mon 16 May 2022 06:49:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39758
IP address blocks: 93.113.25.0/24 maxlen: 24
77.81.138.0/24 maxlen: 24
77.81.137.0/24 maxlen: 24
89.36.21.0/24 maxlen: 24
89.42.110.0/23 maxlen: 23
193.203.204.0/23 maxlen: 23
93.113.212.0/24 maxlen: 24
46.102.232.0/23 maxlen: 23
93.115.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21839 (0x554f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: May 16 06:49:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29e961831ef0ca68aea8e152457b0eb8baa0cb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:45:66:18:ed:4f:6e:e6:a1:4c:76:8f:a1:
3d:23:ca:cf:e5:a8:e4:5e:43:1a:31:7c:f0:36:52:
ed:61:68:74:e4:8e:2b:f8:7c:50:a5:00:78:6b:e3:
8e:20:8b:5e:cc:b9:78:52:17:f1:4c:12:ef:96:11:
e7:1e:1e:4e:23:73:b4:89:f9:a0:95:45:57:6d:61:
99:13:a9:8c:99:c8:f0:0d:d0:29:2e:a7:5d:2a:db:
df:2f:da:72:e5:06:09:3a:16:16:82:c5:73:5e:3a:
fc:02:da:dd:6b:bf:9d:3d:d5:74:b6:79:32:63:b5:
e6:63:3f:b0:e5:03:86:c6:b4:ac:e1:05:f6:17:5c:
52:6e:a4:72:a3:f6:9f:29:73:b3:9c:64:40:d2:d0:
7a:ba:ce:0c:6b:72:56:69:68:a0:c4:fb:9e:e5:23:
eb:fd:8b:23:17:15:d2:7d:67:a6:4c:00:99:10:0e:
77:cb:51:dc:15:ac:b7:0d:e2:f3:db:c2:c8:be:98:
06:4f:9a:ff:c4:dc:7a:c3:c6:86:9c:23:ba:34:a1:
d1:18:d8:5b:63:7b:c7:26:85:66:d3:e3:4e:66:d5:
98:96:bc:fd:98:08:19:24:0b:2a:49:56:f0:78:00:
28:fe:24:ed:84:e8:2f:3b:d6:78:ed:c2:93:2c:d0:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E9:61:83:1E:F0:CA:68:AE:A8:E1:52:45:7B:0E:B8:BA:A0:CB:9C
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/Kelhgx7wymiuqOFSRXsOuLqgy5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.232.0/23
77.81.137.0-77.81.138.255
89.36.21.0/24
89.42.110.0/23
93.113.25.0/24
93.113.212.0/24
93.115.248.0/22
193.203.204.0/23
Signature Algorithm: sha256WithRSAEncryption
28:8f:86:d6:b7:56:ce:f9:cf:82:28:19:c8:f8:ac:1e:ac:c7:
4b:db:7f:8d:e8:71:97:20:19:b7:9e:7e:9d:26:44:6b:1e:c7:
f7:1e:ac:57:51:0b:f7:f2:96:c7:a0:4c:9b:fe:dd:19:19:6e:
a8:79:1c:cb:14:93:a9:ea:ed:4d:18:04:ca:36:39:e7:b6:eb:
15:06:d0:98:28:26:7b:76:94:37:2f:a2:c0:91:42:77:79:ea:
8b:98:67:a4:cd:68:b4:26:5a:6d:35:7f:60:ab:d4:1d:2a:d2:
24:36:0b:a5:35:59:65:7d:91:c4:ea:0f:ad:c2:04:6a:7e:71:
d7:b0:ac:cf:d0:0a:0b:0e:e3:a6:e1:ae:6b:1a:02:3c:24:01:
b2:41:a1:0b:a9:e2:8e:89:b0:b2:88:20:a2:e2:89:2a:50:49:
43:01:3e:08:af:11:b6:73:7c:7e:3d:e3:eb:9e:07:72:28:c5:
40:07:1c:3a:a7:9e:21:8d:96:0b:eb:fb:f9:1f:09:e8:6d:dd:
d7:c4:49:9c:51:48:2e:95:11:fe:93:f4:20:20:66:ef:e7:c5:
44:3a:44:d6:12:37:a9:33:0c:93:3a:ec:e1:e3:8c:d1:b0:7e:
f9:f0:9b:d2:7e:e8:d7:f9:d2:b2:3b:90:d2:ad:bd:5f:e5:4a:
ae:23:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:02 2024 by rpki-client on console-ams.rpki-client.org