Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/wU2VPEJIRYTVJHkvoJzD61zoNwY.roa
File: wU2VPEJIRYTVJHkvoJzD61zoNwY.roa (raw, json)
Hash identifier: 0MKXkk103l0bYP0Do0k5soTvEMFCtUbhu7+IZQS5Ewg=
Subject key identifier: C1:4D:95:3C:42:48:45:84:D5:24:79:2F:A0:9C:C3:EB:5C:E8:37:06
Certificate issuer: /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial: 01856CCAD00B2AB93A73CDEB01133464B6FE
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/wU2VPEJIRYTVJHkvoJzD61zoNwY.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25393
IP address blocks: 195.234.112.0/22 maxlen: 24
78.27.224.0/19 maxlen: 24
77.87.192.0/21 maxlen: 24
195.39.197.0/24 maxlen: 24
89.184.68.0/22 maxlen: 24
89.184.72.0/21 maxlen: 24
89.184.88.0/21 maxlen: 24
195.177.116.0/22 maxlen: 24
2a02:2278:215::/48 maxlen: 48
2a02:2278:210::/48 maxlen: 48
2a02:2278:209::/48 maxlen: 48
2a02:2278:204::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
2a02:2279::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d0:0b:2a:b9:3a:73:cd:eb:01:13:34:64:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c14d953c42484584d524792fa09cc3eb5ce83706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:43:13:3e:a2:b5:8d:58:9b:5e:d0:7a:4c:
40:26:59:3a:e4:42:b1:31:ac:d2:5a:a6:7b:37:08:
3f:38:ca:97:a3:19:77:31:da:30:26:1d:b2:df:8a:
32:1d:fb:06:9f:71:dd:be:5d:88:5d:94:73:69:7e:
91:6b:cf:6a:0b:02:a8:87:bc:26:b0:53:7e:64:6a:
24:ff:37:10:a2:16:fa:b5:97:57:1d:ea:2c:03:06:
71:1d:64:62:af:75:00:43:68:b6:f9:7d:4f:00:00:
63:e6:95:a0:90:d3:fc:84:98:d8:67:7e:ac:d6:a5:
fd:52:d9:d4:91:45:8a:4d:c0:9c:80:c3:79:73:a0:
94:ad:40:1e:66:b9:32:a2:2c:11:71:7f:38:e5:36:
2d:41:79:c8:37:18:f5:d3:a0:79:88:ad:9f:30:0a:
91:0c:e2:c4:9f:90:8a:a0:76:b3:fb:6b:bd:f5:7b:
00:cb:01:c9:b4:18:87:12:58:ea:63:e0:a0:d9:08:
c4:67:84:5c:c1:68:6e:d2:29:23:e9:ba:cb:f7:98:
73:09:f0:a2:cd:26:3e:b7:19:d5:d5:a9:67:c4:87:
a4:b4:d4:b5:68:24:1b:48:fa:1f:35:d1:d1:11:c7:
7c:85:84:04:fc:c1:eb:8a:38:44:5e:9e:52:68:a5:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:95:3C:42:48:45:84:D5:24:79:2F:A0:9C:C3:EB:5C:E8:37:06
X509v3 Authority Key Identifier:
keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/wU2VPEJIRYTVJHkvoJzD61zoNwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.192.0/21
78.27.224.0/19
89.184.68.0-89.184.79.255
89.184.88.0/21
195.39.197.0/24
195.177.116.0/22
195.234.112.0/22
IPv6:
2a02:2278:204::/48
2a02:2278:208::/47
2a02:2278:210::/48
2a02:2278:215::/48
2a02:2279::/32
Signature Algorithm: sha256WithRSAEncryption
d1:2f:00:d8:49:67:9d:83:75:7f:91:a4:ef:a0:80:82:48:b7:
de:fb:bc:fc:46:b0:3f:72:bb:82:c3:22:9f:7d:60:55:d5:1a:
0a:2f:72:19:5f:13:e9:7e:19:d0:06:7f:a4:f7:ac:af:3c:e5:
ee:63:d3:ad:29:31:7c:9a:d1:68:94:39:df:d5:65:34:b1:0f:
f6:35:39:0c:3b:d1:33:1e:f2:b7:cc:fa:7b:b9:34:ad:b2:da:
5c:f8:27:4b:bd:01:dc:41:ed:e9:fa:78:0e:5b:c6:c6:b4:93:
02:4a:f8:7b:7c:02:7d:6a:b0:94:40:5c:fe:5f:8c:a4:ed:6e:
64:42:36:0e:7e:f3:8c:5f:01:bd:ef:cc:18:cd:c6:b2:93:5a:
66:39:7a:42:c3:88:23:a2:ed:ed:df:4a:11:56:d2:b8:99:44:
32:9f:df:3f:dc:86:8c:63:8c:c7:06:c9:a9:a5:e4:f8:90:fd:
56:db:86:3e:c3:fe:ba:36:a9:f2:98:4e:42:8d:ca:89:f8:79:
f0:4f:9e:00:85:ef:42:3d:7d:9c:20:7d:75:cc:a0:25:31:de:
16:a4:94:bf:51:71:c4:10:08:50:94:75:3b:2c:0c:a9:e6:7e:
67:8f:42:01:11:ec:59:95:3a:90:11:ec:46:fb:f2:f9:e9:48:
0a:b3:d7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org