Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/VsO_wSk1ZgwnKiPNKfkib0DX0Ng.roa
File: VsO_wSk1ZgwnKiPNKfkib0DX0Ng.roa (raw, json)
Hash identifier: 04WhOwmARJUzRPioi+bqgW4VQ45DohjlX76r7DaDGBs=
Subject key identifier: 56:C3:BF:C1:29:35:66:0C:27:2A:23:CD:29:F9:22:6F:40:D7:D0:D8
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 018431DD85AEC8E271CE7F673F6C51CB039D
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/VsO_wSk1ZgwnKiPNKfkib0DX0Ng.roa
Signing time: Tue 01 Nov 2022 06:25:11 +0000
ROA not before: Tue 01 Nov 2022 06:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.16.0/24 maxlen: 24
85.209.16.0/23 maxlen: 23
2.58.84.0/23 maxlen: 24
2.58.86.0/23 maxlen: 24
85.209.18.0/23 maxlen: 23
45.66.148.0/22 maxlen: 24
45.13.150.0/23 maxlen: 24
212.102.114.0/24 maxlen: 24
77.83.253.0/24 maxlen: 24
77.83.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:31:dd:85:ae:c8:e2:71:ce:7f:67:3f:6c:51:cb:03:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Nov 1 06:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56c3bfc12935660c272a23cd29f9226f40d7d0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:a1:72:58:f3:f0:fb:d5:85:57:75:07:66:
15:f1:25:95:ff:0f:0d:e6:16:92:a1:70:5b:66:59:
cc:91:66:f6:dc:29:ce:28:d6:e5:17:e7:52:d5:75:
38:ae:28:da:30:2f:19:41:12:9d:06:de:b5:cb:18:
7c:d2:f9:7e:a5:28:8b:04:1d:22:08:7e:c0:79:4a:
f6:d9:3f:05:48:7b:ed:05:ef:6f:71:0f:56:ab:80:
51:33:01:c8:3b:84:8d:39:59:8c:3b:49:ec:85:67:
7e:7b:b9:15:20:44:32:2d:c2:79:e0:08:83:7e:5e:
99:33:69:9f:b3:f4:10:c0:6f:e5:fc:92:71:05:51:
95:ee:85:74:de:c5:95:ab:62:8f:e5:18:6c:32:27:
2b:6c:84:0c:14:43:09:af:e1:02:59:e0:92:0c:99:
5b:7b:b7:67:3e:3a:26:24:0a:be:5c:cf:97:31:a1:
93:c1:c2:bd:eb:2b:71:6e:27:e9:07:67:92:a9:e3:
25:c4:bd:9c:40:5b:2f:0b:92:79:59:71:e6:79:af:
26:aa:9a:57:a6:af:df:2b:17:d1:94:18:4c:44:8e:
b1:7b:1e:95:72:98:22:0e:62:7f:a5:e1:04:33:62:
ca:51:7c:71:de:4d:48:e0:27:74:39:2c:98:7b:90:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:BF:C1:29:35:66:0C:27:2A:23:CD:29:F9:22:6F:40:D7:D0:D8
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/VsO_wSk1ZgwnKiPNKfkib0DX0Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/22
45.13.150.0/23
45.66.148.0/22
77.83.252.0/22
85.209.16.0/22
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
52:57:5d:80:aa:23:9e:0a:f2:17:7b:4a:4b:57:6e:d5:11:2b:
7d:72:66:0f:64:48:c2:c3:fb:90:09:c5:0e:45:f5:c0:0a:ff:
93:cd:3c:fa:48:08:ad:38:f4:4d:c5:63:e2:94:42:50:77:ec:
57:0b:6e:e5:13:69:64:8a:d3:8c:df:8e:e7:b8:70:c7:1f:d8:
c8:f3:88:b0:00:7b:05:d1:93:08:9e:33:2d:d5:ef:18:ff:8f:
89:ca:0b:32:43:ad:cf:2c:f8:e3:b8:77:c2:4a:b8:53:94:f3:
40:7f:80:db:02:5b:0e:dd:9e:dd:19:79:87:d7:54:ab:87:c9:
ec:95:6b:0a:09:e8:15:bc:4b:2c:6d:a6:32:26:96:5e:36:2b:
5a:46:2a:55:f0:2b:27:81:6a:32:8b:9c:17:8c:d2:0f:ac:58:
f9:c5:f3:29:c9:98:ba:df:e7:8d:86:9d:aa:c4:57:4f:1e:ca:
f5:09:d2:a6:a3:4d:9f:9e:02:af:4b:16:4c:0a:08:04:35:f8:
5a:df:3e:46:82:12:65:06:05:9b:f5:c6:17:75:be:90:4b:6d:
df:3a:28:6f:47:41:e3:bb:32:31:b5:87:9b:3e:f0:f2:c6:d7:
fe:e5:91:b9:5a:8f:fc:cc:6b:d8:36:c7:b5:1d:43:c1:bb:f4:
88:1d:76:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org