Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/bocarNL3SXQu4ftISkCPEbf7twE.roa
File: bocarNL3SXQu4ftISkCPEbf7twE.roa (raw, json)
Hash identifier: sA/KMELt0EsWG/+8f7BIZuHQkxspbsso/L1tokp38aI=
Subject key identifier: 6E:87:1A:AC:D2:F7:49:74:2E:E1:FB:48:4A:40:8F:11:B7:FB:B7:01
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 018338267D4406BF2D194AC3727189678C2A
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/bocarNL3SXQu4ftISkCPEbf7twE.roa
Signing time: Tue 13 Sep 2022 18:39:50 +0000
ROA not before: Tue 13 Sep 2022 18:39:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.16.0/24 maxlen: 24
85.209.16.0/23 maxlen: 23
85.209.18.0/23 maxlen: 23
45.66.148.0/22 maxlen: 24
45.13.150.0/23 maxlen: 24
212.102.114.0/24 maxlen: 24
77.83.253.0/24 maxlen: 24
77.83.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:26:7d:44:06:bf:2d:19:4a:c3:72:71:89:67:8c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Sep 13 18:39:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e871aacd2f749742ee1fb484a408f11b7fbb701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:ee:b6:1c:60:a4:23:0a:03:c6:af:3e:14:
8d:00:d0:51:4b:3b:24:69:6c:59:42:01:35:2a:3c:
cb:85:8a:43:d1:8f:6c:0b:fe:1b:7a:2e:67:b8:0a:
4a:25:c3:80:f6:3a:80:e1:13:8b:0f:23:22:7f:8a:
fb:e0:21:fb:12:f1:4d:6d:21:93:ed:9d:64:66:bb:
e9:cf:89:9c:8e:96:0e:11:30:98:0f:1e:b5:17:5e:
0f:33:87:96:6e:64:6b:2c:b2:86:76:1f:68:31:50:
58:6d:d2:64:77:d3:8c:e1:be:b2:c5:64:29:0d:ff:
15:4b:a8:f3:52:58:44:70:39:de:80:f8:19:53:4c:
57:4a:8b:34:f3:b6:c1:0c:fd:2e:f7:1e:4e:25:9d:
06:52:b0:25:87:fd:25:b1:97:69:4b:9a:f2:51:b5:
9a:d3:94:56:81:8c:bb:51:e7:d9:36:20:88:08:f0:
91:6d:16:30:0d:9a:5a:a5:9d:e8:66:f8:7b:b8:82:
8c:b2:a4:c0:82:23:ff:3b:24:96:00:63:ba:76:50:
5a:c0:17:bd:34:91:a8:8a:8a:4c:eb:f6:6c:0a:28:
2a:3d:df:f4:3d:92:23:43:e7:f6:54:3b:78:c6:57:
d4:e6:f2:fa:13:4f:79:f9:16:21:fe:2c:7f:2a:f3:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:1A:AC:D2:F7:49:74:2E:E1:FB:48:4A:40:8F:11:B7:FB:B7:01
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/bocarNL3SXQu4ftISkCPEbf7twE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/23
45.66.148.0/22
77.83.252.0/22
85.209.16.0/22
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ab:85:4b:9a:65:52:51:53:d1:f1:0e:c5:4e:4b:c6:ee:4c:
b8:5f:ae:65:33:29:d7:bc:bb:33:d8:8f:24:e2:6b:8d:07:48:
6b:d4:1b:f2:e6:1c:70:49:c4:d0:c6:5f:08:f2:e3:d0:c3:64:
67:4f:7e:06:7c:bf:87:ee:7d:40:91:49:11:6f:2f:c9:34:88:
79:0c:f4:bd:da:bc:83:50:ce:0a:ca:f0:40:cf:6f:53:17:ff:
ce:19:c8:f4:61:2b:e0:03:af:35:e4:b9:1d:b3:38:f2:01:44:
0a:2d:c7:43:71:81:24:dc:bb:3f:ee:c7:27:2b:bc:19:c7:29:
58:87:2d:6e:fc:51:28:d1:6e:5e:cb:18:53:ac:74:ab:66:a3:
4e:66:19:cb:72:54:e6:81:88:44:4e:8e:d2:44:16:f2:02:e6:
78:c6:c7:f7:16:31:d3:e3:6b:42:89:96:68:40:7d:2e:f2:06:
ce:44:39:1e:8c:ff:43:44:f7:15:1d:d3:10:a4:74:cc:a4:23:
d8:dd:9d:7d:f7:04:7e:bf:3a:70:5c:a0:e3:f5:5e:f8:da:f5:
2f:55:53:3c:2d:ec:9a:26:f9:25:ca:c5:1d:23:0c:df:7f:cc:
e6:de:c1:4b:f5:48:52:ff:a1:bd:bd:20:cd:86:47:ca:7a:30:
6a:69:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org