Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/lj7iv58czyNGCAVkkncM2TA_ozI.roa
File: lj7iv58czyNGCAVkkncM2TA_ozI.roa (raw, json)
Hash identifier: K66bGEMhFXQbjdFbNcg33KAkzq0fFFhjIYOSS3GmLx8=
Subject key identifier: 96:3E:E2:BF:9F:1C:CF:23:46:08:05:64:92:77:0C:D9:30:3F:A3:32
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01835C8AE8A6F6D9D043603478FDDB9EE8CA
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/lj7iv58czyNGCAVkkncM2TA_ozI.roa
Signing time: Tue 20 Sep 2022 20:15:50 +0000
ROA not before: Tue 20 Sep 2022 20:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.16.0/22 maxlen: 24
45.8.172.0/22 maxlen: 22
45.66.148.0/22 maxlen: 24
45.13.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5c:8a:e8:a6:f6:d9:d0:43:60:34:78:fd:db:9e:e8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Sep 20 20:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=963ee2bf9f1ccf234608056492770cd9303fa332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:1a:38:fb:97:b8:85:c5:00:9c:78:6c:e3:
dd:95:7c:ef:1e:3a:38:b5:b6:ba:e5:d1:f1:40:bb:
c8:d9:5c:38:42:49:b6:c1:9c:63:7f:44:06:20:7f:
27:f4:e0:ab:6e:9e:33:ba:9e:55:25:67:01:58:b2:
c1:99:07:08:e3:bc:03:bc:67:df:df:66:06:c1:60:
02:a9:6d:d3:15:b8:7f:b3:1c:ce:94:4b:77:74:d3:
29:66:00:a8:a1:d8:c2:d1:8c:06:ab:cc:19:8e:d3:
d2:2b:b5:f6:c6:dc:bd:1a:5f:7a:1a:c0:6b:e5:5d:
e7:5a:88:6e:39:09:f1:fd:41:ac:c8:6e:68:38:9b:
6c:8c:ad:bf:06:ef:dd:66:f5:15:61:1e:d5:51:78:
3b:96:5a:48:c9:9a:74:40:bd:87:e3:ae:7c:86:9b:
5b:87:ed:a6:9e:e0:ed:78:8b:e4:39:dc:c1:d2:b8:
8a:50:14:f7:7a:4e:84:8d:15:22:93:c4:3b:c3:dd:
e4:fe:95:82:62:bd:75:0f:47:21:31:cd:bb:31:b4:
bc:66:0c:0c:26:be:59:61:90:b6:74:7d:43:c2:9d:
bb:ae:92:8a:d8:3c:bc:04:eb:59:96:e8:67:83:1c:
43:b8:e9:52:42:66:84:fd:1f:9c:95:e6:b6:cb:cb:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:E2:BF:9F:1C:CF:23:46:08:05:64:92:77:0C:D9:30:3F:A3:32
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/lj7iv58czyNGCAVkkncM2TA_ozI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.172.0/22
45.13.149.0/24
45.66.148.0/22
85.209.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:2e:9f:e7:db:7b:2b:c3:fe:1b:b7:4e:17:e6:6f:0d:23:be:
c2:19:3a:6c:75:85:97:e0:1b:b3:ec:52:62:f6:3f:ef:b2:af:
44:ed:35:13:e9:75:5c:8c:d6:ea:d4:83:05:2a:87:c9:e7:d5:
45:cf:09:66:cd:63:69:e9:01:ff:b3:18:bb:a3:06:aa:8b:f8:
67:7f:13:36:30:46:c0:62:0d:56:43:0e:94:f5:c3:dc:c3:d5:
62:e5:41:f1:8b:62:9c:9f:ca:72:f7:e8:c3:de:b6:c3:8b:ec:
7d:6f:bc:dc:01:10:b5:24:3e:cc:d6:cc:6a:5e:35:db:46:b3:
8f:85:5f:ad:1a:aa:fe:18:51:2f:15:6c:c4:ed:61:47:2e:1f:
53:b7:43:fb:ed:34:0e:b0:1b:0f:27:e5:05:19:35:58:70:2f:
48:3d:93:b2:49:e5:9f:79:07:8c:7e:86:48:7d:d8:4a:ef:31:
d6:90:85:7f:4a:ae:1b:e7:83:81:98:a8:ea:96:27:10:8f:a0:
6f:ec:4a:19:03:2c:cf:f4:cb:9b:f4:30:fc:49:7f:15:3e:74:
eb:cc:50:68:f4:ca:fd:90:78:b5:32:f4:d1:81:22:e3:cf:76:
f0:6c:3a:05:6e:7b:9f:aa:81:5e:a7:92:a2:b6:57:9f:dd:2e:
f4:11:6a:59
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYNciuim9tnQQ2A0eP3bnujKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjIwOTIwMjAxNTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjNlZTJiZjlmMWNjZjIzNDYwODA1NjQ5Mjc3MGNkOTMwM2ZhMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLUaOPuXuIXFAJx4bOPdlXzvHjo4
tba65dHxQLvI2Vw4Qkm2wZxjf0QGIH8n9OCrbp4zup5VJWcBWLLBmQcI47wDvGff
32YGwWACqW3TFbh/sxzOlEt3dNMpZgCoodjC0YwGq8wZjtPSK7X2xty9Gl96GsBr
5V3nWohuOQnx/UGsyG5oOJtsjK2/Bu/dZvUVYR7VUXg7llpIyZp0QL2H4658hptb
h+2mnuDteIvkOdzB0riKUBT3ek6EjRUik8Q7w93k/pWCYr11D0chMc27MbS8ZgwM
Jr5ZYZC2dH1Dwp27rpKK2Dy8BOtZluhngxxDuOlSQmaE/R+clea2y8uu7QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJY+4r+fHM8jRggFZJJ3DNkwP6MyMB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvbGo3aXY1OGN6eU5HQ0FWa2tuY00yVEFfb3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLQisAwQA
LQ2VAwQCLUKUAwQCVdEQMA0GCSqGSIb3DQEBCwUAA4IBAQA7Lp/n23srw/4bt04X
5m8NI77CGTpsdYWX4Buz7FJi9j/vsq9E7TUT6XVcjNbq1IMFKofJ59VFzwlmzWNp
6QH/sxi7owaqi/hnfxM2MEbAYg1WQw6U9cPcw9Vi5UHxi2Kcn8py9+jD3rbDi+x9
b7zcARC1JD7M1sxqXjXbRrOPhV+tGqr+GFEvFWzE7WFHLh9Tt0P77TQOsBsPJ+UF
GTVYcC9IPZOySeWfeQeMfoZIfdhK7zHWkIV/Sq4b54OBmKjqlicQj6Bv7EoZAyzP
9Mub9DD8SX8VPnTrzFBo9Mr9kHi1MvTRgSLjz3bwbDoFbnufqoFep5Kitlef3S70
EWpZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org