Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Re5OLN9gN81q8XPaLwGMdVmp2so.roa
File: Re5OLN9gN81q8XPaLwGMdVmp2so.roa (raw, json)
Hash identifier: SynDcr+XwcyKERj6l9DA2cYu+BAyp86glZQRKkbefwk=
Subject key identifier: 45:EE:4E:2C:DF:60:37:CD:6A:F1:73:DA:2F:01:8C:75:59:A9:DA:CA
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 04E198F0
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Re5OLN9gN81q8XPaLwGMdVmp2so.roa
Signing time: Thu 31 Mar 2022 16:18:06 +0000
ROA not before: Thu 31 Mar 2022 16:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.228.0/22 maxlen: 24
45.95.212.0/23 maxlen: 24
45.95.214.0/23 maxlen: 24
2.59.60.0/22 maxlen: 24
194.31.194.0/23 maxlen: 24
194.31.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81893616 (0x4e198f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Mar 31 16:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45ee4e2cdf6037cd6af173da2f018c7559a9daca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:82:85:26:c8:6f:45:19:3d:11:d7:61:8d:
a7:80:b4:23:ee:67:d1:a6:73:c5:68:ee:07:83:e9:
77:a6:71:88:22:14:b0:4d:54:c3:65:14:66:0e:9a:
16:7e:13:2d:36:2c:2a:50:2e:29:6c:1d:e3:15:3e:
56:11:dd:01:52:f5:d2:d2:f5:26:b3:e5:44:a1:cb:
bc:ed:a3:e2:38:7f:5b:72:51:80:cd:22:cb:5b:d7:
e9:bf:de:ed:a1:81:15:25:e4:e5:25:bb:11:87:01:
de:60:ef:c5:64:3e:41:8a:f8:3b:dd:df:64:db:ac:
53:17:b2:14:20:2b:cd:a7:54:bb:02:cd:06:0f:43:
d0:69:9e:e2:1b:f5:9e:b2:b8:54:2a:6e:db:21:9d:
27:52:17:ec:37:fb:15:8f:a2:ea:0b:37:74:92:0e:
84:48:3d:6e:35:90:45:aa:29:34:da:c9:d6:73:2b:
54:1d:64:58:97:26:f9:4b:c5:96:96:0d:9d:74:b5:
c4:9a:68:97:c1:16:f4:e0:b6:4a:1b:39:47:a6:0c:
cd:9c:eb:02:ec:27:a3:9f:77:fc:e1:21:28:5f:65:
12:6e:4b:9a:45:1f:4f:91:55:0a:93:94:e4:42:e0:
1f:02:43:7d:50:1e:40:cf:f8:94:77:9f:e4:bd:90:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:4E:2C:DF:60:37:CD:6A:F1:73:DA:2F:01:8C:75:59:A9:DA:CA
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Re5OLN9gN81q8XPaLwGMdVmp2so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/22
45.95.212.0/22
85.209.228.0/22
194.31.194.0-194.31.197.255
Signature Algorithm: sha256WithRSAEncryption
7e:45:af:9c:10:f7:f3:1e:8d:8c:32:af:2e:ba:c2:fb:44:88:
5e:6d:7f:7f:f6:14:60:a1:95:2f:3a:60:da:29:91:c1:a7:26:
85:d9:f0:a9:41:68:5e:c8:b5:78:43:c5:03:45:34:39:2c:94:
e4:19:35:2b:99:7d:f5:e6:39:a0:ae:a8:e4:1d:b2:f8:0c:66:
ff:d1:bb:4d:2e:45:2a:2b:54:28:dc:e5:4f:a2:fe:09:be:9f:
31:fc:6d:41:ba:38:fc:d0:dd:b7:85:00:36:76:ae:5c:74:b3:
3e:58:b9:86:94:f6:85:64:57:fa:3e:fe:16:85:fa:7a:1b:bc:
37:1e:3e:78:bd:ff:65:e8:ac:06:a7:11:4f:73:74:16:8a:02:
d0:00:fb:70:2d:68:f1:d7:18:03:c1:8f:33:0e:44:85:51:c2:
98:b9:0f:be:43:bb:a7:51:7f:13:16:31:57:ce:2a:38:5f:c7:
57:e3:c9:0f:57:29:1e:4d:f9:2b:2a:62:78:76:f9:97:0c:42:
28:07:e1:a0:12:cb:23:d2:fa:78:36:5b:f7:44:4a:e0:e3:11:
f5:6e:6e:dd:b3:6c:4b:f3:35:a6:cf:07:bd:a2:53:13:70:e9:
62:5f:1e:65:1f:36:1f:6d:81:6a:26:60:61:35:d7:95:84:a4:
80:01:75:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org