Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/3JPc9bMf87mxYhTNxpFF7hhS7Hs.roa
File: 3JPc9bMf87mxYhTNxpFF7hhS7Hs.roa (raw, json)
Hash identifier: geo0KvNEQvwEPKyuG24nKLIxrX5iNmEPnhBjJme6vrU=
Subject key identifier: DC:93:DC:F5:B3:1F:F3:B9:B1:62:14:CD:C6:91:45:EE:18:52:EC:7B
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0A1B17C5
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/3JPc9bMf87mxYhTNxpFF7hhS7Hs.roa
Signing time: Tue 03 May 2022 15:34:06 +0000
ROA not before: Tue 03 May 2022 15:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.16.0/23 maxlen: 23
85.209.18.0/23 maxlen: 23
45.13.150.0/23 maxlen: 24
212.102.114.0/24 maxlen: 24
77.83.253.0/24 maxlen: 24
77.83.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169547717 (0xa1b17c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: May 3 15:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc93dcf5b31ff3b9b16214cdc69145ee1852ec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:8c:17:a9:af:28:ba:ef:50:1c:cd:43:03:
85:74:f1:9b:6c:eb:8c:cd:9c:1b:41:82:e2:d9:34:
bf:23:a6:3f:cc:78:bd:19:d8:0c:8c:28:2f:24:ae:
a3:a9:c8:0f:70:1c:66:6e:3b:73:f5:d1:41:2e:f8:
62:43:1a:30:67:f5:cb:a2:17:1f:a1:b6:8a:76:13:
d6:ac:39:f1:b1:ed:ca:89:80:ab:b1:85:92:5b:61:
79:b0:91:97:33:f8:8c:c0:c5:fd:95:cc:01:39:db:
52:5e:a2:30:0d:ec:8e:09:1e:c9:22:df:09:0c:e2:
47:69:1e:b5:a7:dc:2e:f3:cc:ed:97:1a:f5:d6:ba:
c6:61:4b:c6:78:00:99:72:d2:af:43:a2:e7:89:60:
87:98:0b:bf:34:21:09:c9:4a:3a:af:a8:bf:66:05:
0a:ae:7c:5c:c0:b1:e4:3b:33:37:36:de:b9:a1:36:
4f:be:02:39:b5:d6:80:7e:bc:68:73:2e:1a:7d:0f:
01:de:77:9f:8a:16:04:6f:67:73:c1:29:93:80:66:
aa:2d:0b:bb:3d:44:c0:ab:0b:e1:2b:68:f4:02:87:
d7:21:52:8c:e4:a7:85:1b:cb:61:9b:d7:72:91:58:
a9:be:50:ad:bd:da:19:c9:6d:b6:f1:37:f6:e3:e5:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:DC:F5:B3:1F:F3:B9:B1:62:14:CD:C6:91:45:EE:18:52:EC:7B
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/3JPc9bMf87mxYhTNxpFF7hhS7Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/23
77.83.252.0/22
85.209.16.0/22
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2d:02:e7:98:c6:da:15:26:58:ef:0b:cd:ae:84:69:7c:81:
eb:df:00:bf:c2:ee:f2:48:ee:ea:39:4c:3b:00:b3:d1:19:02:
50:a8:89:1d:40:ba:bb:15:ca:e5:2f:53:cf:c3:b6:11:5c:2b:
7e:66:62:5c:e6:1f:ad:54:f2:09:d4:b0:94:f1:ba:51:d0:55:
1d:b4:0f:00:d9:ae:91:69:ff:5a:a2:ad:56:70:f6:a0:7f:e7:
03:cd:68:20:53:63:8f:e9:3b:78:38:91:72:cc:df:1b:2c:02:
19:52:73:28:09:79:cb:19:e5:c5:db:5d:e2:42:e6:73:8b:76:
14:7d:ef:d6:a7:35:e9:a6:ca:50:9b:f9:75:99:4e:92:d9:a5:
c0:b6:3c:dc:53:46:c9:d1:73:8b:9f:72:fd:6b:0c:05:73:e2:
b3:7d:22:de:c5:19:68:09:f3:b6:2e:bb:6f:a9:2b:23:e6:6b:
56:80:16:f4:3e:fd:36:15:b4:2d:b4:e5:62:00:19:cb:29:c3:
b5:36:63:37:ed:07:70:a5:8c:97:48:96:28:db:fa:2a:ca:58:
8d:6d:1a:80:c4:84:59:0c:22:7d:16:e1:61:2f:a6:77:c1:fe:
aa:dc:97:4a:fa:71:73:6e:c5:3e:e2:da:f3:c6:0a:9d:8d:c6:
de:30:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org