Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/a8a734-d52b-4b70-b827-dc4e27d775ac/1/p2oHTA4d4UBF3JvQGS4yp79pK1g.roa
File: p2oHTA4d4UBF3JvQGS4yp79pK1g.roa (raw, json)
Hash identifier: ycCaQI5RDSvutsNnmZFTwVc5pr+w94d44+X4WgUXJPk=
Subject key identifier: A7:6A:07:4C:0E:1D:E1:40:45:DC:9B:D0:19:2E:32:A7:BF:69:2B:58
Certificate issuer: /CN=3cd748ce43ba4fa5a303b44c75a7a8e362841580
Certificate serial: 13B827A4
Authority key identifier: 3C:D7:48:CE:43:BA:4F:A5:A3:03:B4:4C:75:A7:A8:E3:62:84:15:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNdIzkO6T6WjA7RMdaeo42KEFYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/a8a734-d52b-4b70-b827-dc4e27d775ac/1/p2oHTA4d4UBF3JvQGS4yp79pK1g.roa
Signing time: Sat 01 Jan 2022 05:53:15 +0000
ROA not before: Sat 01 Jan 2022 05:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28716
IP address blocks: 77.95.138.0/24 maxlen: 24
77.95.136.0/21 maxlen: 24
77.95.136.0/24 maxlen: 24
80.94.116.0/24 maxlen: 24
80.94.112.0/20 maxlen: 24
80.94.113.0/24 maxlen: 24
80.94.122.0/24 maxlen: 24
217.19.144.0/20 maxlen: 24
78.159.216.0/21 maxlen: 24
45.89.180.0/22 maxlen: 24
78.159.192.0/21 maxlen: 24
78.159.192.0/22 maxlen: 24
46.243.32.0/21 maxlen: 24
2001:1bd0::/32 maxlen: 32
2001:1bd0:f007::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330835876 (0x13b827a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd748ce43ba4fa5a303b44c75a7a8e362841580
Validity
Not Before: Jan 1 05:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a76a074c0e1de14045dc9bd0192e32a7bf692b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:d0:75:00:12:21:cf:09:ce:1b:9a:4a:c4:
41:ba:a4:2e:46:8d:9c:e1:f5:0a:7d:a1:25:86:ba:
85:d5:8c:5e:41:cc:3e:ee:8c:b2:b2:b3:14:df:8b:
c3:b0:18:41:58:00:71:57:cc:48:c0:b6:94:c1:a4:
0d:e4:fd:db:d4:bf:7c:53:2e:2a:d2:26:e5:39:26:
b2:0c:d8:c1:74:22:db:44:ea:90:c1:ba:1d:50:a6:
ab:3d:01:31:e4:51:6d:52:4c:55:42:f9:9d:fb:fd:
0e:bb:c9:9d:03:1c:0d:92:32:59:9e:0a:ba:a1:2b:
20:47:33:4c:96:46:88:dc:ee:94:32:9a:ba:d6:fb:
06:dc:9a:4c:24:53:1e:70:3d:fe:2f:ac:b0:63:dd:
ab:d1:51:d2:5c:6e:f0:c9:d5:9e:25:02:8b:f3:89:
e4:bd:33:2c:52:49:01:22:fe:d6:30:bb:2d:25:cd:
fb:25:a1:d7:08:3c:2f:a9:a2:7d:11:ec:ef:e8:b0:
32:17:99:b9:b9:f8:fd:25:86:f1:0a:b8:10:84:9b:
c9:4b:32:64:25:04:a4:b0:0d:52:a2:b5:f2:3a:22:
1e:f2:00:7e:33:5e:36:ac:2d:2b:11:f6:ed:50:e9:
2b:33:2b:f7:18:5a:4e:87:4f:8e:13:8d:76:9d:7f:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6A:07:4C:0E:1D:E1:40:45:DC:9B:D0:19:2E:32:A7:BF:69:2B:58
X509v3 Authority Key Identifier:
keyid:3C:D7:48:CE:43:BA:4F:A5:A3:03:B4:4C:75:A7:A8:E3:62:84:15:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNdIzkO6T6WjA7RMdaeo42KEFYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/a8a734-d52b-4b70-b827-dc4e27d775ac/1/p2oHTA4d4UBF3JvQGS4yp79pK1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/a8a734-d52b-4b70-b827-dc4e27d775ac/1/PNdIzkO6T6WjA7RMdaeo42KEFYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.180.0/22
46.243.32.0/21
77.95.136.0/21
78.159.192.0/21
78.159.216.0/21
80.94.112.0/20
217.19.144.0/20
IPv6:
2001:1bd0::/32
Signature Algorithm: sha256WithRSAEncryption
61:d1:51:c1:c1:c2:5d:6b:dd:43:55:35:4e:71:ba:00:05:e7:
07:47:f3:bb:bc:4d:5c:5c:51:d7:c3:dc:e3:50:92:58:7e:4f:
c1:cf:f6:8f:da:9a:02:dd:fa:f6:d9:bd:06:fc:3a:a2:a8:09:
98:bc:0e:5a:39:ae:1f:c0:6e:d5:d9:34:b6:a1:44:7a:e7:aa:
e4:a8:ca:6a:0b:ec:b3:b0:fa:70:08:14:ad:7c:4e:69:de:80:
12:c4:09:2c:a4:8d:90:c2:6b:33:b4:bf:02:3a:8a:a1:e8:80:
c6:07:63:f3:cc:3c:74:96:97:e3:ae:93:d2:96:ae:a9:0d:38:
bb:43:ac:15:07:f3:0e:d2:4b:02:80:a3:a2:db:3b:49:06:9e:
eb:35:de:1a:e1:2a:6a:ae:e7:21:64:14:9d:1f:1d:29:15:b3:
a9:51:e6:bf:f1:f0:f9:d1:4c:86:bc:01:b0:b8:00:e7:cb:ee:
e8:6a:b3:5c:74:92:f6:a4:a6:c9:d7:c4:ed:d6:9f:ee:85:dc:
44:d4:d6:7e:a6:d8:a5:9d:47:cc:f7:7f:51:f7:30:2e:a4:37:
69:83:63:31:f9:d3:72:07:b1:a2:09:de:46:33:2c:7f:da:d9:
72:ac:6a:d4:9e:61:9c:6f:55:d4:f1:4a:1f:8a:27:5e:e3:26:
61:d5:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:16 2024 by rpki-client on console-ams.rpki-client.org