Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/r13Fzb5CsEmWQqStxqNlYTjmPPg.roa
File: r13Fzb5CsEmWQqStxqNlYTjmPPg.roa (raw, json)
Hash identifier: aCryq0vbE3X6Ejh7xSEV+zN4HNGzskXf1CckFrnG9i0=
Subject key identifier: AF:5D:C5:CD:BE:42:B0:49:96:42:A4:AD:C6:A3:65:61:38:E6:3C:F8
Certificate issuer: /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial: 0C54E79C
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/r13Fzb5CsEmWQqStxqNlYTjmPPg.roa
Signing time: Wed 29 Jun 2022 07:43:02 +0000
ROA not before: Wed 29 Jun 2022 07:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45012
IP address blocks: 185.39.220.0/22 maxlen: 24
91.151.16.0/21 maxlen: 24
178.250.8.0/21 maxlen: 24
37.228.152.0/21 maxlen: 24
85.158.176.0/21 maxlen: 24
185.61.40.0/22 maxlen: 24
77.75.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206890908 (0xc54e79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Validity
Not Before: Jun 29 07:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af5dc5cdbe42b0499642a4adc6a3656138e63cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:99:6b:a0:53:f9:a0:75:58:66:95:dd:a6:
8f:fe:86:72:6c:fc:06:7b:0c:58:e6:90:86:73:82:
73:22:bd:3b:78:d0:6e:fc:63:10:80:1b:bc:52:b4:
e3:58:e7:23:88:c2:c4:30:e4:7c:ce:49:0b:d3:67:
73:a2:ef:d3:d6:6b:f8:33:b3:46:ef:4c:25:5d:2b:
4d:df:cc:a0:aa:7a:e6:a0:dc:c1:47:28:ff:a9:aa:
7c:f6:f7:00:8f:05:68:31:20:cd:51:57:11:c2:ec:
e7:1d:7f:ee:38:30:3a:28:d2:9e:c9:aa:07:55:d0:
9a:cf:cf:ae:77:30:a5:bb:44:51:bf:81:e5:d5:e5:
b1:9c:45:48:d9:5e:87:fb:e9:55:6b:2c:8b:02:4d:
3d:d3:da:e3:dd:bf:cd:b8:78:31:9a:ae:cc:6e:22:
20:06:07:3a:14:b7:83:cc:3f:42:af:08:b0:15:6c:
47:1d:74:02:52:ec:6c:2d:9d:63:45:88:87:5b:3a:
2a:8e:a5:1c:b5:4e:91:fa:2a:6c:82:5c:fe:77:69:
a2:24:fc:3d:34:33:a6:37:03:86:60:d7:29:cc:22:
e3:73:db:c8:e7:f7:5a:a5:61:18:3f:9e:3e:29:b0:
23:07:52:d9:d7:9a:d3:92:46:4f:4d:84:e5:70:65:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:C5:CD:BE:42:B0:49:96:42:A4:AD:C6:A3:65:61:38:E6:3C:F8
X509v3 Authority Key Identifier:
keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/r13Fzb5CsEmWQqStxqNlYTjmPPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.152.0/21
77.75.248.0/21
85.158.176.0/21
91.151.16.0/21
178.250.8.0/21
185.39.220.0/22
185.61.40.0/22
Signature Algorithm: sha256WithRSAEncryption
98:3a:46:7d:74:c6:ac:0f:2a:9f:41:a5:d9:2a:54:4d:1f:bb:
0f:aa:2c:4c:ee:8e:84:ab:87:88:50:fc:78:99:8c:2f:97:4a:
fc:ff:c3:4a:61:e2:7e:3d:0f:c7:6b:de:da:26:c2:50:74:81:
fd:ee:3d:a2:f4:8a:f8:13:55:c3:34:f6:76:ba:a6:6b:79:25:
96:98:82:06:8d:27:6e:3b:d8:f5:fd:4b:83:92:71:26:38:c8:
8e:2d:2b:b4:9e:f4:18:20:96:55:a2:bb:c7:68:ea:52:38:86:
61:2b:79:17:f3:7b:b7:84:a6:98:19:ad:6e:c6:3c:97:5b:01:
82:74:83:d2:0b:37:c5:20:6e:1b:d0:8b:ff:72:a6:d1:e8:35:
46:c6:9d:c5:e1:13:14:9f:14:68:f1:b3:96:04:e7:d3:f3:6e:
ef:4e:ba:06:10:4f:bb:bd:31:c3:fe:51:66:50:ef:91:1f:35:
1d:a1:0c:3c:c0:fa:3c:99:ff:ec:ed:83:6e:1f:26:89:50:68:
f0:73:cd:11:8c:2f:e3:66:6a:7b:b2:63:80:63:cb:cd:0c:59:
95:69:02:1c:d6:a3:60:4c:63:a4:f6:d4:ca:19:51:dd:e3:45:
ad:0b:fb:87:24:ce:41:bd:30:d8:1d:c8:3f:a6:92:1a:1b:69:
47:f7:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:18 2024 by rpki-client on console-ams.rpki-client.org