Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Z02Bdr0IkVU5P7JTgjSEJKGzv6Q.roa
File: Z02Bdr0IkVU5P7JTgjSEJKGzv6Q.roa (raw, json)
Hash identifier: dehewPYfDe1ZXfTS+Mu0MzmqwOP6RofSJ3n1Ofj0vdw=
Subject key identifier: 67:4D:81:76:BD:08:91:55:39:3F:B2:53:82:34:84:24:A1:B3:BF:A4
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 09309F92
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Z02Bdr0IkVU5P7JTgjSEJKGzv6Q.roa
Signing time: Mon 31 Jan 2022 10:44:13 +0000
ROA not before: Mon 31 Jan 2022 10:44:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 2.58.84.0/22 maxlen: 24
85.209.16.0/22 maxlen: 24
45.8.172.0/22 maxlen: 22
45.66.148.0/22 maxlen: 24
45.13.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154181522 (0x9309f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 31 10:44:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=674d8176bd089155393fb25382348424a1b3bfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:38:cb:73:b3:19:1a:28:43:3a:ad:5c:1a:
83:12:c8:01:7c:e5:7f:8c:79:f1:e2:2f:d2:e6:b1:
9f:d1:01:fe:52:97:0b:8b:88:cc:e3:a5:18:d5:60:
88:2e:8e:6a:22:44:24:df:ff:b7:7a:db:d5:65:b8:
e2:fa:c1:ce:05:13:f7:b0:c1:59:ea:da:f9:85:6b:
7a:e1:ef:d5:8c:30:21:7a:43:31:d5:59:7a:c0:67:
78:d5:f8:82:62:fc:48:9e:b8:4f:55:da:e0:61:4e:
c5:a1:66:fe:e0:af:e9:b0:a0:ea:80:5f:e9:47:b2:
fc:60:e1:4c:7b:79:08:9c:1e:ca:53:60:f1:93:27:
c7:fd:23:fc:6c:ca:63:96:e7:94:7f:0c:cc:93:7d:
89:58:3d:58:9e:71:d0:56:78:95:ad:6c:59:2d:36:
33:5a:e4:7e:55:0d:57:5f:99:54:39:73:2f:2d:5b:
15:23:9f:34:21:d0:d9:be:28:6e:cf:6e:b9:88:17:
c4:74:db:34:9f:30:5c:50:51:b4:97:6b:68:d7:76:
eb:45:72:fc:2f:ed:f1:50:ec:c5:1f:43:3f:67:76:
0c:16:d7:83:ae:e5:cb:7b:7b:95:15:c6:23:dc:de:
39:ef:1a:63:b1:84:e6:f3:82:af:c2:48:c1:c5:2c:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4D:81:76:BD:08:91:55:39:3F:B2:53:82:34:84:24:A1:B3:BF:A4
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Z02Bdr0IkVU5P7JTgjSEJKGzv6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/22
45.8.172.0/22
45.13.149.0/24
45.66.148.0/22
85.209.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:0a:18:72:42:42:b6:98:b6:cf:73:95:5b:d9:23:92:c5:e8:
55:70:c3:2a:66:3c:66:b8:82:5c:11:0c:da:e6:5b:d2:97:6a:
2d:71:01:3a:1d:f5:56:3a:56:87:e8:b1:c6:07:71:2e:8f:b8:
dd:fd:7d:a4:ab:3e:80:05:4a:3f:a8:ff:d6:d8:ad:fd:7b:5a:
58:c8:3e:78:cf:96:9f:d9:a8:0d:06:da:79:b7:d6:54:f7:39:
cd:ee:9b:3c:d1:ca:11:fe:a7:ff:b7:d9:67:19:09:c2:33:48:
23:70:cc:01:cd:d4:78:f5:c5:c3:ad:cc:c5:67:1c:ec:17:b4:
13:0e:b9:11:71:1d:53:d6:9a:dd:5e:73:e4:66:28:e9:05:96:
11:21:71:0e:b9:42:46:cd:2a:f1:3b:48:cd:f5:48:65:a0:aa:
1d:2d:8e:6a:bd:33:f0:9d:56:8d:25:11:2b:d6:62:20:b1:b6:
4f:1f:89:73:0a:25:da:ad:dc:b0:64:e1:4a:b2:bc:a0:7d:9c:
87:09:de:98:6e:36:71:b9:b7:85:05:dc:57:fa:51:bc:79:ef:
c1:68:f6:7a:4b:c4:6e:60:85:11:e2:aa:64:8a:67:8d:e1:1a:
5e:71:cc:4f:b1:cb:b8:94:ef:4b:13:46:c5:16:ea:c1:f1:c6:
22:74:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:07 2025 by rpki-client