Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0ae0fc-1ae5-452a-a910-ea1bae2cb855/1/V6ij_mA6gwjEDbk7rXS141M76Co.roa
File: V6ij_mA6gwjEDbk7rXS141M76Co.roa (raw, json)
Hash identifier: rniIbeXi4Ygi2Z2cG5XYlk2MBGJ5rgBaMNglaGTh/Y8=
Subject key identifier: 57:A8:A3:FE:60:3A:83:08:C4:0D:B9:3B:AD:74:B5:E3:53:3B:E8:2A
Certificate issuer: /CN=ce394fc7497f42ac8834f31d6035b91d1f6dbc93
Certificate serial: 0153B0E2
Authority key identifier: CE:39:4F:C7:49:7F:42:AC:88:34:F3:1D:60:35:B9:1D:1F:6D:BC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjlPx0l_QqyINPMdYDW5HR9tvJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0ae0fc-1ae5-452a-a910-ea1bae2cb855/1/V6ij_mA6gwjEDbk7rXS141M76Co.roa
Signing time: Sat 01 Jan 2022 16:11:29 +0000
ROA not before: Sat 01 Jan 2022 16:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60453
IP address blocks: 213.170.208.0/22 maxlen: 22
89.42.108.0/23 maxlen: 23
185.128.96.0/22 maxlen: 22
89.43.79.0/24 maxlen: 24
185.197.149.0/24 maxlen: 24
89.33.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22261986 (0x153b0e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce394fc7497f42ac8834f31d6035b91d1f6dbc93
Validity
Not Before: Jan 1 16:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57a8a3fe603a8308c40db93bad74b5e3533be82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:3b:c4:ae:91:bf:4b:68:2a:c4:04:a0:64:
d4:9e:18:cb:9a:50:89:2e:2a:f9:4f:5e:cd:d7:4e:
10:43:2b:cf:50:d0:41:82:16:09:d1:84:f4:2f:98:
9f:cc:be:53:7d:dc:b8:62:7f:46:79:51:64:cd:1c:
86:0a:79:84:6b:82:c6:ca:2e:3a:77:14:37:0d:f9:
cc:ce:43:54:dc:e2:79:be:70:c0:5c:46:4f:14:f7:
1d:84:04:d7:eb:ce:47:26:c5:f5:f4:81:72:29:01:
9a:36:08:12:ae:42:47:85:e3:1f:02:c7:90:bc:9a:
40:f7:26:63:2d:0b:04:41:ee:e8:6f:3d:4d:3d:48:
f2:d2:8a:53:91:36:cf:75:97:7d:bc:96:ed:b9:66:
bf:fc:18:b8:4f:8c:a0:13:cb:cd:00:d2:dc:75:dc:
7a:fd:92:52:c7:77:27:16:e3:61:96:8e:6b:15:aa:
67:57:d1:34:18:b3:83:e9:c8:c7:f4:07:c4:17:78:
84:38:da:fb:2c:66:ce:e2:0d:46:13:44:28:bb:7e:
30:ca:e7:21:f9:d5:30:3c:3f:b2:a4:be:86:df:34:
82:7e:02:5f:47:37:66:40:a3:89:4f:3c:17:e9:a0:
4e:20:a5:1b:07:0d:07:93:56:bb:dc:5e:a2:13:93:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:A3:FE:60:3A:83:08:C4:0D:B9:3B:AD:74:B5:E3:53:3B:E8:2A
X509v3 Authority Key Identifier:
keyid:CE:39:4F:C7:49:7F:42:AC:88:34:F3:1D:60:35:B9:1D:1F:6D:BC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjlPx0l_QqyINPMdYDW5HR9tvJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0ae0fc-1ae5-452a-a910-ea1bae2cb855/1/V6ij_mA6gwjEDbk7rXS141M76Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0ae0fc-1ae5-452a-a910-ea1bae2cb855/1/zjlPx0l_QqyINPMdYDW5HR9tvJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.107.0/24
89.42.108.0/23
89.43.79.0/24
185.128.96.0/22
185.197.149.0/24
213.170.208.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:89:f1:41:66:8d:59:20:5a:e0:d4:3f:b4:26:f6:39:fc:bc:
56:d8:87:75:e6:1d:d6:8c:75:e5:ed:7e:13:8d:d8:56:7c:53:
a8:a4:3a:7c:a9:56:aa:f9:4a:79:db:ae:4a:46:4b:d3:03:bb:
7d:75:77:44:2d:69:88:88:68:25:a0:2f:8c:ab:05:73:c9:1c:
68:c9:47:ca:13:a3:66:80:75:a4:01:ea:e4:04:e8:3c:40:ac:
d0:7f:d3:19:cd:ce:2e:a6:d7:f9:56:50:f7:a7:9d:0e:f1:9b:
07:b7:1d:c0:58:52:ec:82:ed:e1:c1:52:f0:bb:fb:61:38:a3:
28:95:0c:b0:ba:8b:be:50:5e:fe:5a:fe:ec:29:05:72:fe:11:
89:1c:c2:96:cd:74:60:a7:65:3b:6b:7d:4c:05:8d:3e:50:bf:
1f:6b:75:c8:ea:3b:d4:b2:f6:8e:14:ef:1e:c8:e5:56:9e:c6:
d4:fb:21:6a:fe:9d:d7:de:64:3b:88:70:2f:c9:13:0e:36:7b:
43:76:75:19:67:42:36:77:5f:5f:83:f3:a2:be:cd:8b:d0:f9:
c5:42:2a:81:0d:46:db:d4:4f:00:46:ff:c1:a0:63:8c:02:18:
b1:33:5b:93:a9:e5:62:19:e2:21:45:ee:94:b7:21:d4:5c:85:
5a:e2:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org