Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/fyyrvdhc-XMgjvwz8h5rPXY-TIU.roa
File: fyyrvdhc-XMgjvwz8h5rPXY-TIU.roa (raw, json)
Hash identifier: XkCP8xV3KtT9ms/H6slCL940ZdPp0+pgwP0w4Op1liY=
Subject key identifier: 7F:2C:AB:BD:D8:5C:F9:73:20:8E:FC:33:F2:1E:6B:3D:76:3E:4C:85
Certificate issuer: /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial: 0C0C1221
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/fyyrvdhc-XMgjvwz8h5rPXY-TIU.roa
Signing time: Mon 30 May 2022 09:43:14 +0000
ROA not before: Mon 30 May 2022 09:43:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45012
IP address blocks: 185.39.220.0/22 maxlen: 24
91.151.16.0/21 maxlen: 24
178.250.8.0/21 maxlen: 24
37.228.152.0/21 maxlen: 24
85.158.176.0/21 maxlen: 24
185.61.40.0/22 maxlen: 24
77.75.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202117665 (0xc0c1221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Validity
Not Before: May 30 09:43:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f2cabbdd85cf973208efc33f21e6b3d763e4c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:03:82:57:a7:65:0c:d9:24:6e:ed:bf:4a:
fd:68:ac:42:dd:89:cb:1f:14:a1:4a:14:82:d4:45:
72:b0:ea:ab:f9:12:f4:7a:f9:ea:08:9c:8b:d0:ea:
34:c0:a8:1d:11:78:61:42:79:9f:58:d0:d0:e4:55:
31:36:c4:3e:c7:7d:e9:a6:b0:8a:4b:f3:10:bc:86:
37:73:c6:2d:cd:15:9a:ca:28:f6:da:4d:47:b3:cb:
0e:b7:51:4a:99:89:37:35:ee:a1:0b:46:1e:c3:e3:
11:b3:3c:bb:20:98:7b:d9:fe:04:18:93:86:cb:3c:
7d:b7:64:88:5c:ba:c9:f5:d2:41:79:fd:7a:f8:bf:
ff:47:90:09:a6:c7:02:72:71:a1:66:35:17:ad:03:
da:a9:f6:d4:7f:af:3b:38:af:02:40:0c:54:61:8f:
4d:b8:27:3a:03:55:15:48:48:bd:46:f0:3f:8e:e4:
fd:57:9f:e5:de:83:78:c8:55:98:d9:66:e1:d4:86:
7a:c6:23:16:b3:31:3c:e3:f5:da:24:a2:f8:98:0e:
0b:3a:62:d1:52:9f:2e:f9:45:f7:0a:52:8b:e2:d9:
ef:11:62:08:71:31:81:fd:f4:1f:24:6f:cc:29:c6:
16:99:7e:a6:8a:a9:a3:f0:26:56:e9:01:e9:d6:d9:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2C:AB:BD:D8:5C:F9:73:20:8E:FC:33:F2:1E:6B:3D:76:3E:4C:85
X509v3 Authority Key Identifier:
keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/fyyrvdhc-XMgjvwz8h5rPXY-TIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.152.0/21
77.75.248.0/21
85.158.176.0/21
91.151.16.0/21
178.250.8.0/21
185.39.220.0/22
185.61.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:1e:5f:bb:23:69:8b:38:df:62:3c:e9:ea:31:02:f3:f4:99:
70:47:68:d8:e9:a6:9a:a2:35:1a:8b:8f:f4:2d:45:2f:f9:55:
d7:60:73:67:37:6c:30:03:73:52:c9:3d:ad:de:47:27:25:5f:
e7:93:1e:a8:e4:02:a2:d1:12:74:8d:c1:f7:69:95:01:2a:03:
02:a1:74:07:3a:6a:16:30:ee:86:ba:00:d5:2d:57:6f:aa:ff:
f8:96:f0:58:55:29:3f:03:41:bf:ec:e2:17:c4:7e:63:78:88:
02:c7:c9:43:65:68:2b:f6:47:22:bc:2f:36:d6:d7:ed:ee:3e:
7f:2c:b6:bf:a0:b9:fb:f5:7f:d9:6d:74:1a:1b:0e:02:da:52:
10:32:78:99:9c:42:0e:5c:bf:b2:2f:b8:06:a1:25:f0:ae:ad:
a5:e5:85:d6:10:a6:4b:b1:54:18:06:0b:a5:08:ab:06:b6:df:
85:8c:1e:09:a1:81:57:5b:7a:a6:c9:09:ca:48:12:b0:4a:a2:
48:70:44:f3:1f:99:ad:65:00:1e:ed:94:c5:63:4a:b4:6f:87:
53:a9:eb:4e:27:9f:dc:1f:59:fe:44:6f:f2:1f:17:e6:00:20:
6b:81:82:d8:7b:f6:1e:5a:41:21:b0:12:41:33:15:2e:7e:2d:
5d:a1:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:13 2024 by rpki-client on console-fra.rpki-client.org