Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/mdQWWQU6ncmspz4glP9MwpOP6wY.roa
File: mdQWWQU6ncmspz4glP9MwpOP6wY.roa (raw, json)
Hash identifier: LXaO6tNZSbY2WPycWGjql3JISfpdfWBnN3ltQplIp0M=
Subject key identifier: 99:D4:16:59:05:3A:9D:C9:AC:A7:3E:20:94:FF:4C:C2:93:8F:EB:06
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 09E4C4D9
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/mdQWWQU6ncmspz4glP9MwpOP6wY.roa
Signing time: Tue 24 May 2022 13:00:13 +0000
ROA not before: Tue 24 May 2022 13:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212865
IP address blocks: 80.238.136.0/24 maxlen: 24
80.238.134.0/23 maxlen: 23
80.238.139.0/24 maxlen: 24
80.238.140.0/22 maxlen: 22
80.238.144.0/20 maxlen: 20
80.238.160.0/20 maxlen: 20
80.238.176.0/20 maxlen: 20
80.238.129.0/24 maxlen: 24
80.238.130.0/24 maxlen: 24
62.65.141.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.142.0/24 maxlen: 24
62.65.143.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
62.65.158.0/24 maxlen: 24
80.238.192.0/21 maxlen: 21
80.238.200.0/22 maxlen: 22
80.238.208.0/21 maxlen: 21
80.238.216.0/22 maxlen: 22
80.238.225.0/24 maxlen: 24
80.238.223.0/24 maxlen: 24
80.238.230.0/23 maxlen: 23
80.238.236.0/22 maxlen: 22
94.78.2.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165987545 (0x9e4c4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: May 24 13:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99d41659053a9dc9aca73e2094ff4cc2938feb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:6a:a1:86:93:80:9a:b4:02:0b:f2:e5:4f:
fa:f6:43:ce:f2:3d:54:73:db:f7:e6:78:56:db:bf:
59:70:e5:f7:7e:50:46:04:a4:26:8c:18:5b:09:a8:
f3:59:02:b9:14:85:9f:9b:c5:18:d7:b4:70:ff:1d:
c8:f0:52:3b:16:e0:b5:c7:c8:6c:15:f2:bc:c5:fb:
38:a0:f9:f9:8d:da:b6:b3:a8:60:fa:4a:e0:00:f7:
39:09:0f:5a:3c:ed:f2:ea:da:5d:2e:31:9e:98:0f:
ac:94:ae:65:a3:f2:61:0c:06:d1:15:38:e3:32:4b:
f2:56:72:e2:45:2a:8d:a3:f1:e0:28:aa:30:17:e3:
ff:ef:8a:93:6d:72:0c:81:4e:70:bb:e2:6c:a4:19:
74:67:c8:26:dc:87:5f:9b:14:2e:82:db:d2:dc:c9:
e5:29:ce:81:f7:7b:a5:a1:8e:11:24:68:04:00:02:
ff:41:80:c5:34:61:95:3a:54:30:13:20:63:e6:fa:
58:94:57:b4:f0:ec:9d:dd:d2:e8:b6:14:27:85:29:
70:c6:27:25:88:30:b4:f4:cb:fd:63:bd:e1:7d:f6:
dc:78:be:e4:05:ad:8d:b4:7f:97:4f:b6:c5:5f:00:
ce:6f:6e:03:b8:fe:ce:08:f5:bc:38:58:e1:0e:26:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D4:16:59:05:3A:9D:C9:AC:A7:3E:20:94:FF:4C:C2:93:8F:EB:06
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/mdQWWQU6ncmspz4glP9MwpOP6wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.141.0-62.65.151.255
62.65.153.0-62.65.158.255
80.238.129.0-80.238.130.255
80.238.134.0-80.238.136.255
80.238.139.0-80.238.203.255
80.238.208.0-80.238.219.255
80.238.223.0/24
80.238.225.0/24
80.238.230.0/23
80.238.236.0/22
94.78.2.0/23
Signature Algorithm: sha256WithRSAEncryption
34:3f:e3:65:ae:bd:ed:f7:83:d4:5a:a0:2a:a4:46:fa:63:35:
93:a0:a3:a8:6f:65:18:48:9e:84:80:7a:37:3f:67:90:cf:a2:
f1:3a:fe:f3:ea:ee:ce:c0:9d:6f:d1:ce:c4:28:51:4c:fe:2d:
ad:42:05:2b:e1:ca:b0:1c:6a:e2:93:f7:a5:57:0b:ce:6a:41:
fd:cd:0e:4a:f5:29:d7:3e:bf:16:74:b2:21:7a:4c:4a:62:c3:
9c:6f:97:df:84:a2:cb:e1:1b:34:0a:5e:66:6f:1a:19:f7:1c:
3b:49:ad:d2:22:12:92:93:24:d7:a4:17:62:20:36:64:c6:62:
9b:19:51:c7:a2:a7:d3:5d:9b:20:7f:0a:38:25:53:9e:4a:8f:
de:2d:4d:10:01:94:4c:ab:c0:c6:08:1f:6d:43:c4:e7:e1:fe:
2f:c4:2b:f9:ed:10:83:a7:4a:cf:ea:a5:55:7e:18:99:ff:2b:
ae:98:65:29:4c:55:99:96:34:df:ce:47:77:46:bd:d9:62:cd:
81:66:33:e9:d4:e1:c5:fc:57:a4:6d:3e:1a:de:64:6d:23:6d:
99:f7:5f:33:33:6a:be:fd:c5:2c:2e:c9:b0:4a:c6:e6:82:86:
9f:2a:5d:66:26:d8:18:be:48:37:9e:2c:1b:63:bb:aa:5b:44:
54:f8:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:55 2024 by rpki-client on console-ams.rpki-client.org