Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/roBetB_62wgAgyjlXz7DRtCPHxU.roa
File: roBetB_62wgAgyjlXz7DRtCPHxU.roa (raw, json)
Hash identifier: nHFr7Y8IT4JdBxavKrdxt976ITdRAi1FDiLH508NuY4=
Subject key identifier: AE:80:5E:B4:1F:FA:DB:08:00:83:28:E5:5F:3E:C3:46:D0:8F:1F:15
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 05870611
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/roBetB_62wgAgyjlXz7DRtCPHxU.roa
Signing time: Fri 03 Jun 2022 17:58:22 +0000
ROA not before: Fri 03 Jun 2022 17:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.212.0/22 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92734993 (0x5870611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jun 3 17:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae805eb41ffadb08008328e55f3ec346d08f1f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:4b:aa:b2:be:75:8e:dc:97:0a:a6:f2:ac:
29:9e:5f:75:de:64:84:94:fd:2b:90:99:7a:73:dc:
99:6e:64:e3:c0:ae:a9:1b:40:a3:b4:17:bf:f4:2b:
98:bc:ab:3d:eb:e8:70:90:64:3a:c9:62:68:a3:17:
d7:e4:80:88:96:35:ec:09:a0:20:45:15:09:79:d8:
89:c8:35:bf:96:0d:22:3b:8c:3c:21:af:f9:aa:85:
12:f0:82:77:24:86:f4:82:4d:92:7b:da:96:4a:29:
c2:31:65:96:ed:e8:94:07:5c:49:03:a7:b6:62:a2:
b9:30:53:52:ec:9e:22:92:0a:d0:00:cd:e9:6c:da:
95:ce:c9:82:d4:93:57:f3:b8:cd:38:cb:82:a9:2a:
54:a5:4b:c4:a4:b1:0d:2e:70:a3:12:23:85:a9:78:
a2:6f:d4:11:28:3a:63:2e:11:28:fe:9b:bc:2d:72:
b9:0d:52:ef:b0:26:36:01:2b:70:fa:be:35:75:57:
73:36:d3:ce:9e:ab:76:31:00:81:e5:c6:e6:c2:d9:
b5:e0:f6:38:4e:d6:2e:57:2a:78:73:f9:f8:7b:38:
ef:86:3d:7f:a8:d7:70:67:b7:28:06:d2:76:c8:6c:
0a:75:5e:8c:b2:d9:68:82:6e:bd:45:46:f0:b9:c8:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:5E:B4:1F:FA:DB:08:00:83:28:E5:5F:3E:C3:46:D0:8F:1F:15
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/roBetB_62wgAgyjlXz7DRtCPHxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
45.95.212.0/22
85.209.228.0/24
85.209.230.0/24
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
94:f8:b9:cc:5f:7e:3f:62:80:94:e9:af:94:eb:ee:6c:50:36:
71:61:a8:4d:5f:fa:45:1d:4a:98:64:2d:62:54:cd:cb:53:16:
79:d3:a8:6c:74:28:c9:5f:3c:74:9c:4e:cb:50:14:45:8e:bc:
e3:ed:d9:b2:a4:7b:17:5c:19:b8:cf:de:f3:0a:d5:7e:59:ec:
29:48:93:24:d3:46:b3:9f:db:40:cd:5a:0b:e5:ed:9a:86:61:
47:89:17:85:38:ad:0b:36:f0:2b:df:f4:65:f5:4f:d6:32:17:
83:1c:98:98:e2:6c:74:85:9e:40:d5:20:72:15:47:4c:c5:42:
04:ea:c0:fb:38:bb:c2:ee:6d:b4:64:81:4f:31:37:cd:4a:56:
79:6c:cd:af:3d:ed:c9:7e:0f:88:25:4a:af:1d:c5:21:45:32:
d8:52:0b:5f:3b:f6:34:ac:ea:a6:8a:48:cc:51:6e:9e:61:74:
de:16:97:d6:fc:22:28:0e:99:50:e6:95:5e:c4:af:11:10:68:
6b:03:eb:e1:1c:08:bf:e7:e5:57:fa:08:1f:10:f3:30:c4:b3:
64:39:21:54:e1:c6:da:6a:2a:d3:0c:41:b4:8f:bd:7c:6b:fd:
dc:4b:49:7e:d0:7e:21:e0:ff:ce:9b:e6:42:5b:55:94:f7:3f:
4e:17:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:38 2025 by rpki-client