Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a9de90-39d4-4108-b652-6e60b3a91fd7/1/aOAnQDTj7Gmx2Hmf398RZeLdn5Y.roa
File: aOAnQDTj7Gmx2Hmf398RZeLdn5Y.roa (raw, json)
Hash identifier: c6wY1ohXvSxK1IS28d9yzvOAojnUtk0BF7UFRHALrEw=
Subject key identifier: 68:E0:27:40:34:E3:EC:69:B1:D8:79:9F:DF:DF:11:65:E2:DD:9F:96
Certificate issuer: /CN=881b08f151bde0ab3890cf92374455cddc0ba8f4
Certificate serial: 0714913C
Authority key identifier: 88:1B:08:F1:51:BD:E0:AB:38:90:CF:92:37:44:55:CD:DC:0B:A8:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBsI8VG94Ks4kM-SN0RVzdwLqPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a9de90-39d4-4108-b652-6e60b3a91fd7/1/aOAnQDTj7Gmx2Hmf398RZeLdn5Y.roa
Signing time: Sat 01 Jan 2022 03:54:58 +0000
ROA not before: Sat 01 Jan 2022 03:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42707
IP address blocks: 84.39.204.0/22 maxlen: 22
77.75.48.0/22 maxlen: 22
185.229.80.0/22 maxlen: 22
91.195.64.0/22 maxlen: 22
185.231.28.0/22 maxlen: 22
193.36.164.0/22 maxlen: 22
185.247.44.0/22 maxlen: 22
194.49.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118788412 (0x714913c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881b08f151bde0ab3890cf92374455cddc0ba8f4
Validity
Not Before: Jan 1 03:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68e0274034e3ec69b1d8799fdfdf1165e2dd9f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:3e:d0:66:17:b4:cb:36:95:60:03:1f:7d:
e5:1f:0c:4c:a2:66:52:60:ba:f4:1c:37:03:f1:49:
23:7b:d4:7f:a5:2c:d4:bf:66:94:d3:6f:70:b1:6b:
4c:37:1e:df:0a:5a:88:0b:e4:75:7b:b5:8d:2f:c1:
64:26:49:f7:61:1c:75:9f:e3:8d:07:3b:28:53:3f:
9d:2a:97:f6:3b:b6:6a:c1:1b:fd:f2:5e:b4:77:24:
97:b6:9f:03:e0:db:ed:0e:78:e8:91:c8:63:84:a5:
e2:c1:a0:04:2c:7a:8c:cd:9e:a5:39:42:c2:9c:c3:
1b:c9:e0:eb:55:cc:01:8c:84:79:3d:1f:35:7e:ea:
83:e9:0b:8f:cf:c0:7a:55:7b:fb:a8:75:a0:ba:14:
4c:29:60:c9:18:ba:8b:3d:8b:9d:45:34:49:d7:4d:
3e:a1:ad:f9:d7:bc:ae:69:be:ca:5e:13:e6:95:bb:
76:f7:3a:5f:32:98:cf:9e:08:af:fa:44:43:a0:2e:
36:64:c6:ab:ed:76:09:f1:ce:c1:fc:39:c7:21:a8:
ff:25:fe:e2:20:12:32:a9:a9:de:3c:83:99:ea:61:
df:1a:97:46:c9:58:2a:3c:ec:fe:78:43:74:b6:04:
36:1b:4d:cd:72:d8:6e:c3:94:bc:ce:70:a5:05:c4:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E0:27:40:34:E3:EC:69:B1:D8:79:9F:DF:DF:11:65:E2:DD:9F:96
X509v3 Authority Key Identifier:
keyid:88:1B:08:F1:51:BD:E0:AB:38:90:CF:92:37:44:55:CD:DC:0B:A8:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBsI8VG94Ks4kM-SN0RVzdwLqPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a9de90-39d4-4108-b652-6e60b3a91fd7/1/aOAnQDTj7Gmx2Hmf398RZeLdn5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a9de90-39d4-4108-b652-6e60b3a91fd7/1/iBsI8VG94Ks4kM-SN0RVzdwLqPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.48.0/22
84.39.204.0/22
91.195.64.0/22
185.229.80.0/22
185.231.28.0/22
185.247.44.0/22
193.36.164.0/22
194.49.88.0/22
Signature Algorithm: sha256WithRSAEncryption
07:95:9b:3c:70:f1:95:cd:85:d2:40:ff:65:f6:e5:89:59:f8:
cb:f9:3e:13:e7:37:47:9e:c1:00:e0:2b:41:ea:93:65:e5:55:
c5:82:80:a8:9e:98:6d:70:ba:9f:c1:df:fa:40:56:28:2f:4d:
01:46:a0:15:03:fd:e9:83:b1:a0:95:7b:0b:0a:15:20:3f:53:
6f:cc:bb:93:2d:ba:df:95:a0:96:0b:2d:f2:2c:a1:2b:ed:45:
4e:69:10:85:5d:30:63:21:61:58:f3:68:bc:d6:21:da:73:3e:
d6:e8:f1:a3:36:51:c4:d4:6b:81:ca:4d:9d:9a:fa:65:57:f6:
3f:c4:0a:26:1f:34:bf:79:d2:63:06:80:73:66:b7:e1:04:ae:
d2:50:87:2b:cd:a7:f9:55:d8:21:79:af:2d:49:e3:68:3b:fb:
2c:63:d5:18:e4:cf:74:fc:3e:95:ca:53:59:17:d9:23:41:fd:
3e:4e:2e:f2:b6:d8:c1:93:67:b5:d3:e2:0b:09:a2:4f:86:0e:
12:3e:ca:96:19:b2:1e:a8:08:c6:c1:1f:e2:ce:24:f0:02:9e:
d0:e2:cf:68:d7:4c:5e:9a:a7:71:29:95:9c:16:d5:59:3f:df:
a2:63:f2:2c:dd:09:c3:ef:0e:e2:2d:e1:ad:b3:f0:58:da:0a:
4e:47:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:23 2024 by rpki-client on console-fra.rpki-client.org