Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/tPrybgruXO9JklD1o58ffUD0wYY.roa
File: tPrybgruXO9JklD1o58ffUD0wYY.roa (raw, json)
Hash identifier: im9GabiDeCvLfKT7xjv9yWie4ilsluyjqQ1I9Yft3jo=
Subject key identifier: B4:FA:F2:6E:0A:EE:5C:EF:49:92:50:F5:A3:9F:1F:7D:40:F4:C1:86
Certificate issuer: /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial: 01856CEF2D7AD5D6FF445BB6C1CA7B6310DF
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/tPrybgruXO9JklD1o58ffUD0wYY.roa
Signing time: Sun 01 Jan 2023 10:44:52 +0000
ROA not before: Sun 01 Jan 2023 10:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34432
IP address blocks: 185.39.220.0/22 maxlen: 24
91.151.16.0/21 maxlen: 24
178.250.8.0/21 maxlen: 24
37.228.152.0/21 maxlen: 24
85.158.176.0/21 maxlen: 24
185.61.40.0/22 maxlen: 24
77.75.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:2d:7a:d5:d6:ff:44:5b:b6:c1:ca:7b:63:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Validity
Not Before: Jan 1 10:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4faf26e0aee5cef499250f5a39f1f7d40f4c186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:8c:36:a5:94:3e:5b:a3:57:0b:42:32:42:
97:55:41:66:bf:0c:fb:45:8f:ea:87:58:57:7f:9a:
09:ff:02:61:ca:cb:ae:01:35:fb:6d:55:d9:26:2e:
06:7c:92:45:85:49:6c:84:6c:ab:d8:a6:34:66:e5:
3d:58:3d:48:9a:2b:57:f3:b0:94:61:db:fa:e2:58:
b6:5b:43:6d:13:23:74:c7:eb:63:39:03:21:1b:46:
8c:4d:09:3f:8f:ee:61:ea:12:c7:c8:9e:61:b7:5c:
66:b9:1d:d4:da:35:1d:f1:dd:2d:11:62:f9:7e:f0:
5e:c6:73:ae:85:05:c0:64:69:46:00:4f:27:ae:a2:
3e:59:a3:d3:ac:d9:56:37:ff:3c:3d:39:25:56:ef:
6a:59:52:6b:0d:d2:8a:6b:be:70:5d:32:8c:48:ba:
43:b9:ca:b4:6e:5e:19:a2:12:a0:9b:c5:de:89:d7:
7e:13:7e:71:09:67:38:77:bf:59:af:43:8e:06:40:
61:48:b8:cd:e7:ee:8a:6f:59:a8:e8:97:75:1f:7a:
ff:a2:63:2e:c5:83:a5:af:9c:5f:3d:88:36:c0:2e:
55:2a:5d:ec:84:02:9c:49:a7:25:4e:fb:fb:f0:58:
d9:ce:17:ea:db:91:31:51:31:a5:76:b0:36:38:e4:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:F2:6E:0A:EE:5C:EF:49:92:50:F5:A3:9F:1F:7D:40:F4:C1:86
X509v3 Authority Key Identifier:
keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/tPrybgruXO9JklD1o58ffUD0wYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.152.0/21
77.75.248.0/21
85.158.176.0/21
91.151.16.0/21
178.250.8.0/21
185.39.220.0/22
185.61.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:fe:db:b1:69:a7:f9:42:78:fd:a7:db:99:f2:e1:0d:97:1a:
c4:4b:54:6c:7c:b9:6a:a9:be:2f:f9:b0:e0:2f:ee:46:f4:df:
b8:7f:5c:9c:16:db:86:29:64:7f:3d:9c:8c:2a:a8:14:1f:9f:
49:ea:87:c8:6f:77:d6:4e:2b:a5:b1:11:5f:5f:f5:27:cb:2c:
31:a6:e3:72:23:cc:aa:46:b1:36:e4:0d:91:05:70:e5:62:f0:
39:39:7e:d7:83:d3:9c:c0:3d:37:71:e7:26:2a:80:a4:50:1e:
36:8c:05:20:80:dc:53:5a:ac:12:d5:97:3f:3d:28:f6:ab:37:
22:b6:80:92:3f:04:c6:f7:54:c8:6d:a0:fe:d3:63:14:0f:67:
fa:ff:21:0b:17:ba:92:6c:b1:05:ae:be:35:f6:79:20:a4:c0:
1a:63:2a:19:22:36:0c:49:a3:0d:1d:63:92:1c:58:6b:ad:d4:
5c:a6:37:c1:17:e3:e2:63:d7:b5:18:c9:3d:0b:17:73:be:47:
1c:a6:e2:16:9f:57:fc:83:c8:92:4d:d7:e9:ee:10:d5:16:d7:
e0:fa:24:9d:6c:72:22:02:66:91:f1:8f:c5:b0:bb:35:2a:e4:
29:2c:96:94:61:ef:20:1f:54:17:13:52:95:c5:27:c2:8f:69:
37:ef:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:18 2024 by rpki-client on console-ams.rpki-client.org