Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/8r6bnRu6eqoLCK192BpqeRBz448.roa
File: 8r6bnRu6eqoLCK192BpqeRBz448.roa (raw, json)
Hash identifier: GoJI1pjHhFLIjMBqx8KKujGASXXyrGeEVRVWpeMavQ0=
Subject key identifier: F2:BE:9B:9D:1B:BA:7A:AA:0B:08:AD:7D:D8:1A:6A:79:10:73:E3:8F
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 088CE305
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/8r6bnRu6eqoLCK192BpqeRBz448.roa
Signing time: Sat 01 Jan 2022 14:58:46 +0000
ROA not before: Sat 01 Jan 2022 14:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212865
IP address blocks: 80.238.136.0/24 maxlen: 24
80.238.139.0/24 maxlen: 24
80.238.140.0/22 maxlen: 22
80.238.144.0/20 maxlen: 20
80.238.160.0/20 maxlen: 20
80.238.176.0/20 maxlen: 20
80.238.132.0/22 maxlen: 22
80.238.129.0/24 maxlen: 24
80.238.130.0/23 maxlen: 23
62.65.141.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.142.0/24 maxlen: 24
62.65.143.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
62.65.158.0/24 maxlen: 24
80.238.192.0/21 maxlen: 21
80.238.200.0/21 maxlen: 21
80.238.208.0/21 maxlen: 21
80.238.216.0/22 maxlen: 22
80.238.225.0/24 maxlen: 24
80.238.226.0/23 maxlen: 23
80.238.223.0/24 maxlen: 24
80.238.228.0/22 maxlen: 22
80.238.232.0/21 maxlen: 21
94.78.2.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143450885 (0x88ce305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Jan 1 14:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2be9b9d1bba7aaa0b08ad7dd81a6a791073e38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:eb:24:ea:13:fc:f2:1d:d9:69:e3:bf:fd:
39:d9:db:d4:bf:b4:ba:3c:3f:ea:86:3b:e2:e7:5a:
97:88:5b:08:0b:b4:cc:d2:d5:6c:c5:c0:ee:e6:ac:
bb:46:a5:14:89:89:0a:b7:78:29:d5:34:b6:8c:50:
d1:12:5a:a3:37:1a:5d:cf:51:b5:ad:d7:ab:47:4a:
2b:3b:df:d6:01:6f:8e:c7:73:d6:fc:64:47:05:ee:
8e:aa:85:b5:89:49:b1:a7:bb:89:c1:a1:81:90:5f:
20:82:a4:19:f6:67:a3:2a:09:07:eb:1f:05:c9:95:
12:91:95:bb:49:6d:d2:9d:19:b9:00:10:8a:e7:a4:
6f:d0:ef:cb:eb:97:6c:aa:61:9b:5a:e1:41:72:9b:
42:67:51:2a:4e:14:0b:2b:63:1b:77:76:7f:df:18:
b1:1d:83:65:9e:46:4e:7b:bb:0b:7b:71:bb:1b:7c:
34:cb:cc:8e:36:55:88:99:69:ab:75:21:cf:17:a3:
d2:94:a0:10:77:2e:d2:54:83:ff:f3:25:b4:7e:8b:
dd:b9:38:c4:f0:4c:77:0e:99:29:96:f3:2c:ab:7b:
c1:99:96:af:0d:89:e9:4d:18:03:0b:2a:e6:42:a0:
01:bd:40:b6:53:e8:ac:b1:60:d8:99:05:ec:e6:56:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BE:9B:9D:1B:BA:7A:AA:0B:08:AD:7D:D8:1A:6A:79:10:73:E3:8F
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/8r6bnRu6eqoLCK192BpqeRBz448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.141.0-62.65.151.255
62.65.153.0-62.65.158.255
80.238.129.0-80.238.136.255
80.238.139.0-80.238.219.255
80.238.223.0/24
80.238.225.0-80.238.239.255
94.78.2.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:15:5f:13:86:b5:3a:ea:29:33:7b:2f:24:83:77:02:10:6d:
c7:d6:04:60:9d:9a:59:b2:a1:bc:46:6e:a8:94:86:5b:8e:24:
95:49:27:62:68:73:83:bc:5b:99:7a:45:04:09:21:80:6f:99:
61:50:4d:76:7e:b6:ba:20:8b:26:56:30:44:2b:45:43:77:26:
7b:35:5b:82:3e:b0:19:f0:7f:68:b0:35:45:ff:0f:8d:46:21:
c9:67:95:52:f2:5f:39:b1:28:06:3f:29:0a:e6:60:f6:3c:7b:
02:f8:7e:55:b9:6c:5b:15:c0:d7:64:e1:b5:00:10:75:71:46:
e3:dc:98:9e:c6:84:12:21:a3:95:36:54:f2:09:03:b7:cf:e8:
01:ce:ab:f4:d5:17:74:90:de:9f:39:4f:0e:a4:3e:a2:7b:d6:
65:12:ef:56:d9:a0:cd:62:4b:96:7d:be:2b:77:a6:a9:94:2a:
83:f4:a9:c4:0d:40:d1:ea:15:22:b8:bf:14:40:8f:8d:9a:d2:
10:7d:7c:2a:45:33:b2:d1:33:12:a2:d0:fb:af:8d:c6:9f:01:
8b:61:db:80:80:0f:e7:11:97:45:cc:22:e2:34:b2:b7:37:7f:
dd:cc:ff:de:ef:3b:26:e3:94:9d:aa:2b:46:cc:2b:91:31:68:
d1:81:74:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:17 2023 by rpki-client on console-ams.rpki-client.org