Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/Xh1XkCjGyIS8Q9iKeZ1hX--gZi8.roa
File: Xh1XkCjGyIS8Q9iKeZ1hX--gZi8.roa (raw, json)
Hash identifier: R+LQJ9a/LskyE6yWqOZxV324vtt9r0Tr1Cs411uyKzM=
Subject key identifier: 5E:1D:57:90:28:C6:C8:84:BC:43:D8:8A:79:9D:61:5F:EF:A0:66:2F
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 09E8792C
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/Xh1XkCjGyIS8Q9iKeZ1hX--gZi8.roa
Signing time: Wed 25 May 2022 07:32:13 +0000
ROA not before: Wed 25 May 2022 07:32:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212865
IP address blocks: 80.238.136.0/24 maxlen: 24
80.238.134.0/23 maxlen: 23
80.238.139.0/24 maxlen: 24
80.238.140.0/22 maxlen: 22
80.238.144.0/20 maxlen: 20
80.238.160.0/20 maxlen: 20
80.238.176.0/20 maxlen: 20
80.238.132.0/22 maxlen: 22
80.238.129.0/24 maxlen: 24
80.238.130.0/24 maxlen: 24
80.238.130.0/23 maxlen: 23
62.65.141.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.142.0/24 maxlen: 24
62.65.143.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
62.65.158.0/24 maxlen: 24
80.238.192.0/21 maxlen: 21
80.238.200.0/22 maxlen: 22
80.238.200.0/21 maxlen: 21
80.238.208.0/21 maxlen: 21
80.238.216.0/22 maxlen: 22
80.238.225.0/24 maxlen: 24
80.238.226.0/23 maxlen: 23
80.238.223.0/24 maxlen: 24
80.238.230.0/23 maxlen: 23
80.238.228.0/22 maxlen: 22
80.238.232.0/21 maxlen: 21
80.238.236.0/22 maxlen: 22
94.78.2.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166230316 (0x9e8792c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: May 25 07:32:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e1d579028c6c884bc43d88a799d615fefa0662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:aa:5c:4d:4c:71:e0:96:98:d8:20:12:fc:
bf:5f:41:71:e1:cc:64:39:e9:90:06:d1:f8:9c:09:
64:97:90:06:e8:23:7f:52:26:5c:80:f9:6f:77:4d:
56:d6:af:85:32:d6:e9:c7:0e:44:45:5f:a8:e1:b9:
7c:5c:30:bc:98:d8:2e:63:ab:58:15:cf:72:75:5d:
b0:9d:0b:25:7c:a0:51:dd:b4:67:06:75:4f:04:f7:
d8:7b:a5:3e:56:6e:2b:02:9d:57:43:ad:c6:57:4d:
41:30:ea:72:dd:a9:f1:25:2b:a9:0c:a9:87:88:c5:
2b:6d:a4:83:2b:15:31:71:97:a7:31:b0:fb:58:f5:
1f:85:20:95:59:15:0e:ae:18:91:20:d1:b5:50:ea:
20:de:73:b4:74:fc:00:54:f8:5a:be:e8:ed:a8:93:
00:6c:f7:7f:aa:4d:7d:4d:8d:d6:8d:63:c7:6e:13:
f7:17:48:fc:b1:d8:8f:c4:2a:a5:38:e5:a5:6c:4c:
80:72:f2:50:96:af:52:2d:22:05:81:77:cc:b9:17:
81:7a:ba:3b:c4:93:63:60:45:3e:42:31:79:33:c9:
b5:75:98:61:75:c6:9a:15:e1:18:d3:c8:05:eb:7e:
b6:51:e8:4f:92:de:d6:86:c6:43:cb:4d:7b:ef:f7:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:57:90:28:C6:C8:84:BC:43:D8:8A:79:9D:61:5F:EF:A0:66:2F
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/Xh1XkCjGyIS8Q9iKeZ1hX--gZi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.141.0-62.65.151.255
62.65.153.0-62.65.158.255
80.238.129.0-80.238.136.255
80.238.139.0-80.238.219.255
80.238.223.0/24
80.238.225.0-80.238.239.255
94.78.2.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:3d:09:ae:42:84:80:68:2f:1c:a4:a4:96:f2:b1:dc:04:d3:
3d:08:b4:56:8e:48:93:48:b0:b2:48:e1:85:da:42:4c:5c:f1:
7b:6d:62:f0:4f:05:de:bd:d7:91:18:e7:21:05:49:64:d0:14:
35:56:e1:bc:6e:89:c6:1c:ca:3d:2e:3b:0b:df:12:6c:a7:0a:
41:72:5c:f1:a8:e5:af:27:d7:f4:d4:d3:65:20:b9:00:fc:3c:
1c:ae:01:72:60:7a:2c:37:ac:29:be:bb:23:4d:ad:89:75:bb:
e2:c2:7b:27:eb:d9:74:bb:ee:57:ae:13:9f:6d:43:82:2d:d5:
20:04:61:af:ad:7c:00:2b:6b:77:49:44:65:dc:a6:05:d3:c4:
7c:ca:20:fa:7a:79:a2:27:70:14:02:62:f1:0a:84:df:ea:ca:
0b:b2:18:ed:cc:62:43:80:b7:05:3b:1f:28:e0:b6:c8:7e:12:
4d:10:4b:21:5c:72:cf:d5:99:bb:22:25:53:0a:8b:36:aa:ae:
5d:28:a5:ac:12:e9:de:b4:0e:f3:a2:a0:ec:40:10:f2:dd:a0:
34:4e:d0:b6:c7:4a:a0:43:c1:c4:24:a7:af:a6:6b:6c:45:56:
eb:31:9b:b9:d5:af:57:ff:10:61:f5:27:43:61:39:0d:a8:fd:
72:ff:c2:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:17 2023 by rpki-client on console-ams.rpki-client.org