Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/nAq1Ro5THwyNRCt9y584PwrX0Sw.roa
File: nAq1Ro5THwyNRCt9y584PwrX0Sw.roa (raw, json)
Hash identifier: TdPoBcW8dtiFbhho9rVBgfLH9WyMieBysoi6B6JsLRE=
Subject key identifier: 9C:0A:B5:46:8E:53:1F:0C:8D:44:2B:7D:CB:9F:38:3F:0A:D7:D1:2C
Certificate issuer: /CN=a6b85a06afde354535a1d82b985be27832d3df95
Certificate serial: 0ADE4238
Authority key identifier: A6:B8:5A:06:AF:DE:35:45:35:A1:D8:2B:98:5B:E2:78:32:D3:DF:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prhaBq_eNUU1odgrmFvieDLT35U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/nAq1Ro5THwyNRCt9y584PwrX0Sw.roa
Signing time: Sat 01 Jan 2022 06:57:15 +0000
ROA not before: Sat 01 Jan 2022 06:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1257
IP address blocks: 83.248.0.0/13 maxlen: 13
85.194.0.0/18 maxlen: 18
193.150.192.0/18 maxlen: 18
80.216.0.0/15 maxlen: 15
178.218.152.0/22 maxlen: 22
213.200.128.0/18 maxlen: 18
151.177.0.0/16 maxlen: 16
213.89.0.0/16 maxlen: 16
2a04:ae00::/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182338104 (0xade4238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b85a06afde354535a1d82b985be27832d3df95
Validity
Not Before: Jan 1 06:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c0ab5468e531f0c8d442b7dcb9f383f0ad7d12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:2a:eb:90:f8:d6:8a:0c:5c:1c:b5:3d:47:
f3:74:da:60:35:00:c2:c2:d5:0b:da:5a:53:5a:89:
ca:5a:8b:92:df:0b:77:9f:4e:59:01:58:6a:95:fa:
b0:5d:83:5f:17:1e:8d:80:fc:ee:c9:c2:87:73:51:
da:3b:96:68:b6:00:21:87:af:8c:b7:d2:f3:36:a9:
e7:ea:c6:61:85:99:2a:e3:36:2f:f3:3a:d7:38:4e:
12:b6:94:3e:b6:19:9e:d4:8d:2e:0a:6a:97:7b:50:
a5:b7:8f:14:57:68:e6:50:29:23:21:b0:f2:2c:aa:
b5:45:29:38:84:60:74:73:cc:f3:1a:43:0a:a7:8b:
35:50:48:6d:34:44:25:eb:29:0e:b2:6e:49:03:52:
cb:c8:4e:e5:95:a2:35:39:f9:f3:a8:e0:e1:19:f8:
59:09:71:b9:db:b3:a1:dc:31:d2:50:47:b2:e4:55:
12:91:30:89:8e:33:9b:7b:41:84:48:f6:b4:0b:79:
a9:fe:79:02:87:31:92:91:cb:d2:76:cf:96:48:68:
d1:19:fb:0d:d2:5e:99:ba:11:68:78:09:6c:13:a2:
05:be:ea:65:01:e8:7e:a2:6a:b3:46:41:f7:c1:e6:
ea:69:f4:cb:2b:74:75:d6:41:33:bd:92:89:0b:fb:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0A:B5:46:8E:53:1F:0C:8D:44:2B:7D:CB:9F:38:3F:0A:D7:D1:2C
X509v3 Authority Key Identifier:
keyid:A6:B8:5A:06:AF:DE:35:45:35:A1:D8:2B:98:5B:E2:78:32:D3:DF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prhaBq_eNUU1odgrmFvieDLT35U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/nAq1Ro5THwyNRCt9y584PwrX0Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/prhaBq_eNUU1odgrmFvieDLT35U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.216.0.0/15
83.248.0.0/13
85.194.0.0/18
151.177.0.0/16
178.218.152.0/22
193.150.192.0/18
213.89.0.0/16
213.200.128.0/18
IPv6:
2a04:ae00::/26
Signature Algorithm: sha256WithRSAEncryption
34:d1:fc:ff:a8:19:5d:ce:0f:79:e6:59:2d:51:d0:1f:2b:19:
e2:28:dc:91:30:79:d0:be:86:28:03:2c:4a:ad:dd:24:dd:9f:
03:15:37:63:e2:21:ce:ff:49:4d:93:d8:74:45:cb:fc:eb:3e:
0c:31:b9:36:da:a1:b3:3e:42:c4:95:57:fd:49:c2:b3:3c:ec:
44:fc:2a:56:fd:88:13:4d:2a:46:ea:d2:7c:bb:0c:80:bf:af:
02:b5:78:06:ef:be:9b:b3:b7:6c:34:d4:e1:2b:bb:53:dd:7b:
f8:28:e0:2d:fe:c9:c4:4b:ab:eb:b7:15:28:ae:05:19:5c:14:
f3:39:59:6b:4d:93:04:43:11:e2:b4:27:c9:7f:8d:ed:02:c7:
1d:e5:a5:b0:2e:f3:f4:66:21:b5:4b:a2:24:a7:ac:e4:cd:66:
f6:8a:bc:0d:9f:40:a5:f5:6e:af:57:1b:0f:bb:c3:59:1b:af:
af:75:44:d6:32:d1:ea:43:f8:49:ae:11:a3:c6:bb:cb:9d:b0:
67:3b:78:22:cb:ab:b9:92:f0:f5:7c:f4:63:7f:e3:23:11:67:
69:1a:14:04:e5:35:2e:eb:00:77:de:a1:4c:bf:90:a1:8a:cd:
ea:5a:6d:be:c9:d6:11:bd:61:04:e9:dd:e0:98:c3:3a:ed:87:
86:15:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:57 2024 by rpki-client on console-ams.rpki-client.org