Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/9ccdfc-98b9-4a89-8bff-06ac63567b9b/1/tGaenQyvM3IGZ4C8gVerYGDl7G4.roa
File: tGaenQyvM3IGZ4C8gVerYGDl7G4.roa (raw, json)
Hash identifier: fLGl+WAj14QAi7TNwHnkpB9uujhLctnK4p+C28R5AT0=
Subject key identifier: B4:66:9E:9D:0C:AF:33:72:06:67:80:BC:81:57:AB:60:60:E5:EC:6E
Certificate issuer: /CN=86425207f1159a1aa3025bfb35bcad4f0428e781
Certificate serial: 072B3970
Authority key identifier: 86:42:52:07:F1:15:9A:1A:A3:02:5B:FB:35:BC:AD:4F:04:28:E7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkJSB_EVmhqjAlv7NbytTwQo54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/9ccdfc-98b9-4a89-8bff-06ac63567b9b/1/tGaenQyvM3IGZ4C8gVerYGDl7G4.roa
Signing time: Sat 01 Jan 2022 06:04:12 +0000
ROA not before: Sat 01 Jan 2022 06:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208006
IP address blocks: 130.185.123.0/24 maxlen: 24
130.185.122.0/24 maxlen: 24
130.185.120.0/24 maxlen: 24
185.235.40.0/22 maxlen: 24
185.215.235.0/24 maxlen: 24
185.215.234.0/24 maxlen: 24
185.215.234.0/23 maxlen: 24
194.5.192.0/23 maxlen: 24
194.5.206.0/23 maxlen: 24
2a0d:4ac0::/48 maxlen: 48
2a0d:4ac0:3::/48 maxlen: 48
2a0d:4ac0:1::/48 maxlen: 48
2a0d:4ac0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120273264 (0x72b3970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86425207f1159a1aa3025bfb35bcad4f0428e781
Validity
Not Before: Jan 1 06:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4669e9d0caf3372066780bc8157ab6060e5ec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:1a:6e:00:ae:6f:4c:40:95:79:bc:3c:31:
4e:38:ba:13:ae:81:4a:2e:f6:29:b1:97:fd:fa:05:
5a:fe:b7:15:a6:03:02:22:0d:d4:cf:5b:a1:c2:cb:
7a:6e:db:dd:df:f3:dd:d9:5d:56:6a:09:3d:72:bb:
7e:0e:42:53:aa:ac:82:88:88:f1:93:1e:4e:00:a3:
4e:64:fe:13:6e:6e:14:05:fc:22:50:95:5d:6f:41:
8f:b2:40:94:ed:94:73:43:6c:86:c8:79:b7:c3:d9:
0f:d4:e6:3d:e7:ae:cb:b3:da:2c:51:0d:93:a5:48:
6c:6c:01:08:4e:96:b6:4b:bf:06:e2:af:c9:28:c7:
f3:20:ba:30:d7:30:9e:fe:f2:36:43:e7:48:a3:c4:
e8:16:68:94:e3:d6:45:44:79:50:0e:56:17:e8:83:
4e:0a:aa:9e:bb:77:1b:fa:2f:ee:44:1f:27:d4:20:
73:85:5e:41:dd:01:d5:4a:6a:49:13:3e:21:96:fa:
73:1b:0b:a4:8d:ac:98:af:d9:ae:84:ca:3e:a3:c6:
99:70:c0:c6:f6:78:ba:09:51:29:da:cc:c0:e7:18:
f5:da:46:db:5a:4d:09:31:62:e7:15:79:2c:62:56:
4f:70:fc:fc:4f:da:2c:ae:2d:b2:36:82:8d:28:ba:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:66:9E:9D:0C:AF:33:72:06:67:80:BC:81:57:AB:60:60:E5:EC:6E
X509v3 Authority Key Identifier:
keyid:86:42:52:07:F1:15:9A:1A:A3:02:5B:FB:35:BC:AD:4F:04:28:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkJSB_EVmhqjAlv7NbytTwQo54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/9ccdfc-98b9-4a89-8bff-06ac63567b9b/1/tGaenQyvM3IGZ4C8gVerYGDl7G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/9ccdfc-98b9-4a89-8bff-06ac63567b9b/1/hkJSB_EVmhqjAlv7NbytTwQo54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.120.0/24
130.185.122.0/23
185.215.234.0/23
185.235.40.0/22
194.5.192.0/23
194.5.206.0/23
IPv6:
2a0d:4ac0::/46
Signature Algorithm: sha256WithRSAEncryption
13:30:1d:dd:19:51:93:98:8e:0d:18:b1:34:7c:7c:86:cb:05:
de:e8:c6:2f:7e:c1:23:ac:52:ce:ea:01:2b:78:fc:32:e7:05:
b6:ca:9f:da:bf:41:ca:09:82:22:2c:18:8d:c0:09:c0:8a:f6:
96:f5:13:72:97:8e:4d:99:83:8f:d5:6c:e1:10:0e:be:fe:9a:
c5:59:f0:d8:fb:6d:15:3e:72:32:28:89:2f:95:5b:7a:76:2e:
4c:ae:4e:ce:c7:f2:f4:74:06:c7:21:0e:ad:9e:5f:d0:2d:a3:
d8:fc:5a:8e:8a:95:b6:b7:97:e8:2a:3a:e9:fb:2a:3f:19:13:
0b:25:1b:4c:db:65:82:1b:f5:f6:58:d8:4d:a7:7e:69:83:99:
b6:37:fe:ff:4b:db:72:13:84:36:b2:d6:a9:c0:b9:85:a2:35:
29:94:03:93:da:1f:a8:23:f9:c9:42:7f:12:eb:78:7c:9a:4b:
d4:2c:b4:ff:18:13:66:b7:26:5b:f7:a1:79:30:ae:28:f5:7d:
97:ac:d3:5f:08:10:04:85:3e:6b:09:d3:6d:2e:98:b9:1c:2e:
90:b0:7c:1a:b9:6f:42:52:c6:59:42:a5:07:f2:b8:99:97:a0:
f5:16:c4:67:9b:7a:5e:e3:0d:e1:12:eb:61:9b:68:f9:67:56:
e6:79:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:49 2023 by rpki-client on console-ams.rpki-client.org