Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/hjDAeQoUKRbCFkEnNWkZ4Av2HJM.roa
File: hjDAeQoUKRbCFkEnNWkZ4Av2HJM.roa (raw, json)
Hash identifier: BHs+Iew/zMrCPWY88keCY+YRdXOiSu3ffi/xyFcs+dk=
Subject key identifier: 86:30:C0:79:0A:14:29:16:C2:16:41:27:35:69:19:E0:0B:F6:1C:93
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 018698F51C4DE8DC2DAAAEAEBE328784C669
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/hjDAeQoUKRbCFkEnNWkZ4Av2HJM.roa
Signing time: Tue 28 Feb 2023 16:57:25 +0000
ROA not before: Tue 28 Feb 2023 16:57:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39758
IP address blocks: 93.113.25.0/24 maxlen: 24
77.81.138.0/24 maxlen: 24
77.81.137.0/24 maxlen: 24
89.36.21.0/24 maxlen: 24
193.203.204.0/23 maxlen: 23
93.113.212.0/24 maxlen: 24
46.102.232.0/23 maxlen: 23
93.115.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:f5:1c:4d:e8:dc:2d:aa:ae:ae:be:32:87:84:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: Feb 28 16:57:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8630c0790a142916c2164127356919e00bf61c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c1:8d:cc:0e:5b:5d:5e:04:79:17:17:46:2c:
94:68:35:0d:06:6e:df:e1:c2:b1:3f:43:d9:39:34:
56:ba:f0:83:7e:d8:29:d7:5f:03:0c:82:46:24:d4:
1f:00:87:66:2e:3b:61:7f:bc:91:80:9d:6a:fe:df:
dc:eb:c9:e5:72:18:bb:2b:7e:71:a1:0c:a1:e8:62:
0d:d0:8d:0d:57:6a:1b:99:ed:fb:98:ba:4f:60:82:
e8:b9:a0:77:a1:95:24:fa:df:5f:01:11:df:f8:f0:
46:54:4e:2d:af:cd:5a:70:e0:cd:21:5b:02:20:3f:
36:17:d5:50:cd:12:c3:e8:38:f1:97:38:32:16:0d:
bc:ca:5f:18:d4:3e:7b:2e:11:cc:7f:6e:a9:23:50:
e2:28:bf:1e:49:c8:cf:36:04:06:78:8b:98:45:be:
82:34:fe:ec:86:83:c9:ed:13:a8:03:f8:b3:e6:63:
95:db:75:a4:3b:5a:36:67:c5:f6:dd:59:d0:a9:1c:
a2:9b:b9:e4:e9:75:da:a2:da:d5:e5:00:98:09:4b:
d3:33:76:7d:07:22:b2:3b:c8:e1:f4:a0:74:7b:92:
06:54:1a:0a:83:40:bf:d5:60:2b:8a:de:19:5b:dd:
d8:c9:65:05:11:bb:56:b4:b6:c2:83:24:89:e5:3a:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:C0:79:0A:14:29:16:C2:16:41:27:35:69:19:E0:0B:F6:1C:93
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/hjDAeQoUKRbCFkEnNWkZ4Av2HJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.232.0/23
77.81.137.0-77.81.138.255
89.36.21.0/24
93.113.25.0/24
93.113.212.0/24
93.115.248.0/22
193.203.204.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:f6:6d:c8:38:6c:5f:e0:eb:ea:34:1f:09:9f:d7:e1:d4:06:
89:d1:4a:69:04:cc:12:67:f2:10:ab:6d:b1:75:28:e5:46:31:
5f:18:43:98:3a:44:30:44:f4:20:ca:a8:a5:a8:83:70:e0:9e:
f6:56:2c:4f:e0:d1:a1:b6:78:ec:31:be:66:f1:6a:4d:17:56:
cc:ee:30:c4:45:54:1b:80:e4:7b:ea:43:f6:6b:e8:64:8f:40:
9b:89:39:a5:a6:7c:74:59:31:ab:c8:66:a1:38:87:c4:3a:dd:
55:47:18:c9:3d:ae:57:a1:6b:67:79:7c:7d:35:4f:89:32:5c:
16:7f:56:1a:d7:9b:27:c4:a0:76:e6:43:3d:a8:54:9b:35:fd:
b5:96:62:24:85:bb:bc:5c:2b:59:1b:75:4f:e7:b2:b1:8e:fc:
f9:0e:90:55:6c:ea:9a:66:5d:8b:8e:5b:77:6c:81:44:22:bd:
9f:10:ec:cf:2e:5c:4d:a3:2a:de:87:36:23:e5:b9:14:02:ef:
08:2d:03:90:6c:8b:a9:6c:eb:b0:04:4f:26:7a:2f:a7:81:b6:
3f:6d:35:04:de:be:43:02:22:52:c8:0e:ed:f7:4d:bf:3e:56:
39:03:72:a6:25:e8:74:39:22:62:e2:1c:de:24:bb:df:42:4a:
5b:3c:27:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:02 2024 by rpki-client on console-ams.rpki-client.org