Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS133448.roa
File: AS133448.roa (raw, json)
Hash identifier: GHuWyLpLblg7xPXK4cQ7lha4OpXA8k0ey4g4LnUbSX0=
Subject key identifier: 20:80:50:87:6E:AE:EE:51:52:9C:EB:2F:76:67:28:90:53:14:11:7D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2F3E88CD366B809156D5F35E8B261E65F9DA2E60
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS133448.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 133448
IP address blocks: 5.253.85.0/24 maxlen: 24
185.90.62.0/24 maxlen: 24
185.99.134.0/24 maxlen: 24
185.121.162.0/24 maxlen: 24
185.121.163.0/24 maxlen: 24
185.121.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3e:88:cd:36:6b:80:91:56:d5:f3:5e:8b:26:1e:65:f9:da:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=208050876EAEEE51529CEB2F766728905314117D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:08:82:a5:ac:bb:01:e6:8f:99:26:c7:5e:
5b:51:13:ff:b4:e7:08:20:65:b3:6a:e9:6e:17:45:
ef:dd:c5:49:2f:b6:2d:ca:8d:58:76:12:99:03:6e:
7d:09:75:55:0e:56:7f:7e:2d:e5:01:23:a4:f4:f0:
1a:fb:69:69:6c:1d:15:9d:18:93:01:f6:6a:5f:4d:
38:66:d5:33:0e:b3:2e:49:29:38:bb:63:9c:e5:83:
2a:1a:4a:83:e5:e4:fa:5e:70:e8:dc:1a:27:77:5e:
58:6b:d0:a0:2f:50:16:5a:25:67:3f:fd:09:53:b0:
15:94:7a:5f:8d:e0:09:11:85:d2:90:7b:c8:5b:7b:
85:1b:be:d5:0c:3f:1c:86:03:9b:4b:71:26:c4:77:
9a:31:a8:cd:70:13:f3:78:df:16:c5:2c:cb:c9:36:
b2:ca:88:dc:7d:58:e4:ad:eb:a0:03:38:5d:51:71:
83:8e:1b:87:b3:11:7d:0c:ee:a6:81:14:08:6d:15:
27:33:98:23:e3:ae:54:ef:e8:b6:ea:ca:00:81:d5:
5b:5d:e3:e1:c8:86:8b:c7:02:2f:6e:71:23:53:30:
2a:ab:6f:fb:cb:fe:75:9c:60:66:16:18:15:21:e9:
6e:14:35:3a:c8:9b:33:1d:cd:a5:43:da:c8:e0:ea:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:50:87:6E:AE:EE:51:52:9C:EB:2F:76:67:28:90:53:14:11:7D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS133448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.85.0/24
185.90.62.0/24
185.99.134.0/24
185.121.162.0/23
185.121.169.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d1:dd:a4:19:a0:2e:d4:15:ed:8e:a4:7a:40:ee:b6:06:83:
f1:c1:c4:cc:1b:51:44:09:cc:f8:a4:2c:86:59:3c:af:15:ac:
39:00:f6:73:71:14:51:fb:39:e3:8a:57:c7:b6:2c:85:9f:d9:
f1:fd:be:4a:9d:f0:56:2d:9f:2b:34:e4:43:06:91:16:48:0a:
70:dd:ea:42:ea:6e:c1:9a:92:20:4f:9a:c9:fb:29:42:1a:05:
0d:ae:d0:50:2a:5c:19:c5:d2:27:ef:85:f2:c9:48:10:0e:bb:
d8:69:a4:fc:60:fc:ab:59:38:ae:26:c5:e3:bf:e3:96:46:d3:
c7:b6:be:67:e8:87:66:8c:fa:72:ec:42:a6:82:66:a6:e1:7f:
4b:05:d0:f5:06:ff:7e:9a:70:0b:60:0c:aa:3f:8e:f8:47:57:
ae:55:c6:af:4c:09:5f:61:f2:26:ea:32:b8:b9:a4:e4:99:aa:
9e:cb:7f:e9:21:f5:c1:e4:d2:db:17:4e:c8:3e:cf:93:f5:cc:
1a:a3:df:34:da:e1:a4:ce:e8:5d:d4:83:23:f0:04:31:24:d7:
de:44:5b:18:f0:27:50:6d:00:28:e0:07:89:c5:67:36:eb:f1:
46:8b:5b:a1:2f:99:6a:5c:5a:a2:bf:ae:79:89:42:ee:c4:f5:
b0:3e:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org