Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/vm-Ou5ABOa2jWR1vlSsUiWHiy7M.roa
File: vm-Ou5ABOa2jWR1vlSsUiWHiy7M.roa (raw, json)
Hash identifier: glbsIPsX2Epshr7H/LgftkCyAn6IM5J5qWGcTVHGdQY=
Subject key identifier: BE:6F:8E:BB:90:01:39:AD:A3:59:1D:6F:95:2B:14:89:61:E2:CB:B3
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 04A05FF4
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/vm-Ou5ABOa2jWR1vlSsUiWHiy7M.roa
Signing time: Thu 03 Mar 2022 15:41:26 +0000
ROA not before: Thu 03 Mar 2022 15:41:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.212.0/22 maxlen: 24
2.59.61.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.194.0/23 maxlen: 23
194.31.195.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77619188 (0x4a05ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Mar 3 15:41:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be6f8ebb900139ada3591d6f952b148961e2cbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:0e:a3:03:f5:a5:3f:bf:99:00:d5:4b:46:
4e:13:30:c5:0c:a3:28:11:a5:a0:2d:e9:43:5b:79:
36:98:0e:ca:d4:75:18:b2:0c:08:76:e9:d3:84:2e:
e2:fc:b5:53:4f:76:64:c5:83:3b:06:1b:63:01:d5:
0b:2f:c1:be:41:81:24:4f:5d:bf:ea:ef:ff:da:8a:
bd:50:16:de:e8:b8:ef:d4:93:25:2b:99:f2:45:de:
79:ee:aa:fc:50:a2:7e:57:b5:1b:d2:64:6f:b9:dc:
1a:47:20:e3:dd:c3:37:eb:86:97:65:0b:1c:34:b8:
0c:b2:2f:9e:aa:40:d0:d9:5a:9e:8b:f6:22:30:73:
67:ce:42:24:9d:bd:5c:ca:71:1b:3b:7a:b4:00:8e:
57:9a:47:75:1c:07:8b:44:fc:de:73:fc:24:3b:b4:
91:a6:0a:aa:f2:16:2b:3d:2a:f2:31:47:c2:d1:dc:
cd:6a:d9:9f:ae:fc:1b:9c:ce:06:66:91:91:47:9d:
cd:d3:3d:3d:01:24:a4:1a:37:a4:9a:19:d7:f6:d5:
ab:d8:94:46:a3:18:86:6b:39:9a:93:32:b8:58:8b:
aa:31:df:60:08:59:fc:7a:4f:16:aa:a6:6c:34:5d:
e6:e3:4f:41:97:1e:b7:5b:63:65:8b:8e:65:ea:fc:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:8E:BB:90:01:39:AD:A3:59:1D:6F:95:2B:14:89:61:E2:CB:B3
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/vm-Ou5ABOa2jWR1vlSsUiWHiy7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/23
45.95.212.0/22
85.209.228.0/24
85.209.230.0/24
194.31.194.0-194.31.197.255
Signature Algorithm: sha256WithRSAEncryption
2a:0d:38:7a:97:38:e6:59:68:c6:05:c0:11:25:0b:48:a2:ef:
3c:ec:d1:08:1f:7c:b8:d7:fb:8a:89:27:10:11:9a:e0:80:52:
72:aa:6c:2e:fb:7c:10:e5:84:f5:96:b5:be:16:c2:e9:12:b3:
12:0f:27:8c:84:13:45:4f:58:74:f2:fc:6c:ec:a1:37:c9:05:
48:cc:36:aa:d4:6f:5a:4c:53:55:5a:21:af:b5:2d:08:db:57:
01:b2:71:f5:20:a1:f9:7a:56:40:ec:0a:38:e8:ae:04:d8:6c:
e6:c7:2a:3e:61:9d:9a:18:56:53:a6:23:93:9d:d4:8a:9d:b2:
18:4f:6a:41:38:2f:78:01:85:bd:ae:bd:e0:6f:18:fd:e8:09:
ba:46:08:31:28:99:ca:0b:d3:3c:69:fa:fd:be:24:e5:48:bc:
1d:e7:22:3a:1f:65:a5:eb:5d:f2:85:03:74:bc:b0:b0:dc:0c:
e8:18:60:fe:67:93:b6:ac:7b:16:75:f1:2d:e0:4c:63:11:ed:
d8:dc:7c:6c:dc:40:1a:97:64:ba:95:df:ed:cd:5b:69:20:f2:
fc:77:21:1b:8e:d3:81:7a:fd:fc:c2:e6:38:20:c0:7e:40:53:
c4:42:98:17:9e:f7:38:c9:75:c5:a8:ae:cb:80:3a:4c:21:eb:
ce:91:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org