Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Shv6Lpa5p91_hUmMuhuwIMuyEgk.roa
File: Shv6Lpa5p91_hUmMuhuwIMuyEgk.roa (raw, json)
Hash identifier: wV+JlVb7Zo3mZ2ub5barVQnb95D4i69xhfX6vcjdUAw=
Subject key identifier: 4A:1B:FA:2E:96:B9:A7:DD:7F:85:49:8C:BA:1B:B0:20:CB:B2:12:09
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 057F051A
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Shv6Lpa5p91_hUmMuhuwIMuyEgk.roa
Signing time: Thu 02 Jun 2022 18:42:20 +0000
ROA not before: Thu 02 Jun 2022 18:42:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.228.0/22 maxlen: 24
45.95.212.0/22 maxlen: 24
45.95.212.0/23 maxlen: 24
45.95.214.0/23 maxlen: 24
2.59.60.0/22 maxlen: 24
194.31.194.0/23 maxlen: 24
194.31.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92210458 (0x57f051a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jun 2 18:42:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a1bfa2e96b9a7dd7f85498cba1bb020cbb21209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:62:4e:4c:87:15:95:38:e2:63:56:31:f2:
0b:e3:e2:6c:3e:3b:44:e6:8c:de:e5:ad:c3:35:c2:
ad:88:b2:4d:0d:46:79:f9:f6:b3:d1:86:43:9c:97:
e7:72:f0:ca:fb:a7:89:dc:12:d6:61:0f:93:c7:93:
b1:b6:2e:aa:b5:79:ce:65:f7:7d:a4:24:89:fe:4e:
fb:f6:05:fb:64:64:f4:5c:1e:e5:da:6d:44:f8:f7:
bf:1e:7c:8a:2f:d3:69:58:01:84:e0:15:4e:cc:ce:
d6:99:9f:16:4b:db:a5:88:6a:c1:be:5e:6a:77:9a:
76:27:4d:7f:f4:5f:b7:00:80:9e:b4:63:a6:53:93:
2b:26:0c:0b:41:98:11:f8:cb:46:e1:2d:f3:da:b3:
25:d7:53:e1:7b:9f:60:38:22:86:09:63:d9:d6:9d:
1f:a2:b2:37:d4:40:d3:e4:ad:56:58:01:1a:03:55:
31:57:7e:9d:80:37:27:69:61:7a:82:86:06:93:7e:
eb:a3:c5:25:e9:41:b7:27:ec:02:e1:2e:fa:c9:38:
fd:e9:68:a0:03:96:70:00:67:89:a3:de:a6:fe:67:
13:83:83:74:c2:a1:47:c6:77:5f:b8:76:74:3c:a7:
ab:ed:df:9b:19:c4:8c:34:bf:bb:f2:a6:ec:9d:c2:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:FA:2E:96:B9:A7:DD:7F:85:49:8C:BA:1B:B0:20:CB:B2:12:09
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Shv6Lpa5p91_hUmMuhuwIMuyEgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/22
45.95.212.0/22
85.209.228.0/22
194.31.194.0-194.31.197.255
Signature Algorithm: sha256WithRSAEncryption
42:ca:5a:1a:20:fe:4d:b4:92:98:26:1f:bf:de:6b:93:46:be:
ac:d0:10:16:95:9a:fc:8c:3c:bb:3b:b6:c6:88:67:82:98:67:
b7:93:7d:7e:83:99:59:7e:87:6b:39:a8:13:7b:11:8e:01:08:
8c:7c:a6:d8:5c:6b:f0:d6:4f:3c:fd:8e:1c:0b:d7:da:16:e7:
e4:78:cf:eb:1a:6b:88:38:3e:2f:1b:c9:ab:04:16:a2:5b:2d:
d0:3f:39:d2:50:03:2c:19:65:51:82:52:a8:50:9e:b3:a0:6b:
d5:59:9a:7f:a0:cd:93:43:37:e3:d7:43:c1:25:42:5c:97:5a:
57:a1:49:cf:b4:01:5d:1e:ee:d2:e3:17:84:28:22:5a:8e:f3:
af:b5:26:d1:31:da:b4:f6:63:b1:f7:11:4c:71:25:32:04:5a:
79:46:65:30:7b:37:35:be:48:24:2d:ad:35:fa:86:01:be:7b:
3a:a9:e5:ec:d7:46:92:ee:2a:18:9c:c5:63:e7:6e:0b:90:1c:
ec:37:a1:5f:e1:c6:3a:05:21:18:0c:5e:ee:17:0b:37:8c:5b:
c7:62:7c:07:b3:7e:ef:cb:ea:00:73:ca:a6:fa:3b:6e:da:81:
5b:57:93:36:c0:26:3c:65:e6:b3:21:b7:47:bd:b2:9a:4a:46:
37:3b:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:16 2025 by rpki-client