Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Tq1dUqR38FiQ-NjQpJnBkHaMWzg.roa
File: Tq1dUqR38FiQ-NjQpJnBkHaMWzg.roa (raw, json)
Hash identifier: l5+sBnPyBJNP1xW/WdwAz//meVw91FgFnEUbiiLDtf4=
Subject key identifier: 4E:AD:5D:52:A4:77:F0:58:90:F8:D8:D0:A4:99:C1:90:76:8C:5B:38
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 01885883AEFA8E57F6D726AE2D4E93DE7F9A
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Tq1dUqR38FiQ-NjQpJnBkHaMWzg.roa
Signing time: Fri 26 May 2023 14:43:24 +0000
ROA not before: Fri 26 May 2023 14:43:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51059
IP address blocks: 185.2.206.0/24 maxlen: 24
185.2.204.0/24 maxlen: 24
185.2.205.0/24 maxlen: 24
185.2.207.0/24 maxlen: 24
37.230.48.0/20 maxlen: 20
5.83.192.0/19 maxlen: 19
109.107.32.0/19 maxlen: 19
37.1.224.0/21 maxlen: 21
2a02:1348::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:83:ae:fa:8e:57:f6:d7:26:ae:2d:4e:93:de:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: May 26 14:43:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ead5d52a477f05890f8d8d0a499c190768c5b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:cb:a9:da:95:4b:93:0b:85:5d:1b:28:fa:
8e:2d:78:71:4d:2c:cd:f1:85:a3:1f:13:3d:af:f7:
a0:94:69:a6:16:1c:92:84:99:6a:23:a4:65:7e:f3:
ce:4b:36:eb:16:6b:e8:0e:f7:39:01:50:40:ed:7e:
2f:6c:10:83:ab:f2:f6:ca:74:ec:e1:ef:44:ce:73:
37:cc:28:2a:b5:8c:f5:5a:66:a6:94:af:62:c9:ba:
01:88:f6:09:d3:a0:9d:a4:2b:08:8d:60:35:47:f2:
fa:db:9f:80:9b:5b:75:da:82:51:f8:ac:b3:12:41:
f4:be:e4:39:9b:62:1b:fb:a5:4b:92:6e:79:d5:69:
89:d7:df:ce:1c:e7:63:98:90:82:d7:d0:0f:f3:6c:
0d:43:02:b3:e1:54:19:66:0e:71:77:51:9c:07:e7:
2b:33:d1:99:07:b2:94:5e:e6:c1:e7:b3:40:f5:09:
33:3d:46:08:db:21:a9:f3:8d:1f:8d:31:01:74:6a:
ac:0e:1a:18:8b:46:22:c0:2d:9e:6a:5c:d2:af:7e:
82:8d:50:d2:9a:4e:a3:b4:f7:5e:f5:ea:37:76:c4:
5e:94:3b:2b:2d:f3:8a:77:b6:d2:9b:03:39:4c:cb:
64:be:a5:57:a2:2f:c5:76:5a:a2:49:fa:1f:cb:2d:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:5D:52:A4:77:F0:58:90:F8:D8:D0:A4:99:C1:90:76:8C:5B:38
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Tq1dUqR38FiQ-NjQpJnBkHaMWzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/19
37.1.224.0/21
37.230.48.0/20
109.107.32.0/19
185.2.204.0/22
IPv6:
2a02:1348::/32
Signature Algorithm: sha256WithRSAEncryption
79:93:df:2c:dd:75:3f:7f:3c:67:c4:47:b0:a1:de:ba:04:7a:
50:e1:a7:6e:7a:b7:e4:3e:89:5d:e8:44:43:1c:24:ce:de:45:
59:46:22:ef:2e:af:77:11:1f:70:c2:7c:67:71:64:f2:03:32:
c0:69:7e:74:ff:15:39:aa:0e:3d:64:7c:f9:22:5d:0f:e5:60:
f0:25:11:f8:29:2c:4e:61:1b:7d:56:90:35:9b:4c:16:c8:42:
9c:cd:65:8a:0d:40:d9:1b:e2:d6:67:63:cc:75:ca:b4:7c:f9:
80:31:e4:3d:e2:e1:5f:1a:c6:d3:dd:f3:b0:84:dc:1c:f2:19:
ef:e4:33:0f:c8:d1:ff:b4:d4:9e:f0:07:fe:87:83:f2:d5:20:
08:25:8a:1b:b8:ae:71:bf:cb:17:be:c1:b5:14:31:b5:d1:0e:
f9:e5:63:24:a0:03:25:34:50:22:b1:88:0c:ee:c5:ea:0f:c0:
8d:5c:48:42:11:20:e1:1c:8a:49:d6:bc:50:36:9d:29:eb:cc:
a4:ed:57:e8:c1:37:c1:ea:bb:9b:85:06:00:b9:52:23:78:96:
ac:bb:8b:ca:50:e8:97:60:ae:61:a2:de:1f:d1:11:b2:f4:36:
ef:fc:95:66:66:70:54:7e:61:d7:e7:08:0e:2e:18:da:95:1f:
33:4c:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org