Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/O2-yYpN_9r0myH3JD5T19-W9ANk.roa
File: O2-yYpN_9r0myH3JD5T19-W9ANk.roa (raw, json)
Hash identifier: IHhIaE9cEL25pLfn7HVXAdngE/GbjUogWetp5MF9gko=
Subject key identifier: 3B:6F:B2:62:93:7F:F6:BD:26:C8:7D:C9:0F:94:F5:F7:E5:BD:00:D9
Certificate issuer: /CN=73f33c451e745fa8938fceeed59283dea7b2701c
Certificate serial: 1C784E2F
Authority key identifier: 73:F3:3C:45:1E:74:5F:A8:93:8F:CE:EE:D5:92:83:DE:A7:B2:70:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_M8RR50X6iTj87u1ZKD3qeycBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/O2-yYpN_9r0myH3JD5T19-W9ANk.roa
Signing time: Tue 07 Jun 2022 11:16:02 +0000
ROA not before: Tue 07 Jun 2022 11:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 5.11.48.0/21 maxlen: 24
109.75.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
95.130.248.0/21 maxlen: 24
185.32.116.0/22 maxlen: 24
185.143.164.0/22 maxlen: 24
185.65.88.0/22 maxlen: 24
141.101.32.0/21 maxlen: 24
2a04:ff40::/29 maxlen: 48
2a00:12c0::/29 maxlen: 48
2a04:4cc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477646383 (0x1c784e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f33c451e745fa8938fceeed59283dea7b2701c
Validity
Not Before: Jun 7 11:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b6fb262937ff6bd26c87dc90f94f5f7e5bd00d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:4e:31:08:e7:3f:52:b6:37:bb:3d:cd:69:
9e:85:57:74:84:1e:4d:cd:c5:10:b8:b8:78:ae:2c:
43:93:93:1c:08:b6:58:6b:9c:22:ba:2b:7e:3b:91:
64:e7:4e:99:24:9e:2b:4d:b0:e6:75:13:46:28:2e:
12:13:16:85:ff:5c:b0:ee:a6:29:f8:56:2b:bf:83:
a6:5f:25:fe:ae:4d:27:38:5a:17:ce:d8:54:f4:6b:
87:ae:c3:dc:5d:1b:94:89:5d:10:60:f3:fb:95:66:
de:18:9d:6f:ee:b0:48:c3:40:ee:e4:e4:b1:b9:a2:
5e:36:11:b8:d7:90:fa:4a:a1:1f:6c:08:51:2b:9d:
99:63:09:3b:30:58:5e:8d:d2:3e:c6:8d:12:09:69:
67:3c:6f:51:16:db:f8:a1:ad:d4:d4:92:91:bd:e9:
91:da:34:a1:9b:40:af:89:74:42:e0:21:d7:9f:56:
85:22:2e:4e:b9:7c:df:1c:4d:2b:35:67:5d:fb:12:
78:a7:de:2d:6e:e7:48:18:dc:2b:ed:b4:e4:6f:f2:
f2:b4:c3:be:b7:61:bc:d0:5c:92:88:ff:36:41:b4:
1a:b2:25:df:c5:58:4f:45:05:20:8d:a2:d0:0f:fd:
cb:14:83:b5:54:4f:3e:50:cd:c8:ed:79:04:63:6b:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6F:B2:62:93:7F:F6:BD:26:C8:7D:C9:0F:94:F5:F7:E5:BD:00:D9
X509v3 Authority Key Identifier:
keyid:73:F3:3C:45:1E:74:5F:A8:93:8F:CE:EE:D5:92:83:DE:A7:B2:70:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_M8RR50X6iTj87u1ZKD3qeycBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/O2-yYpN_9r0myH3JD5T19-W9ANk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/c_M8RR50X6iTj87u1ZKD3qeycBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
93.190.64.0/21
95.130.248.0/21
109.75.176.0/20
141.101.32.0/21
185.32.116.0/22
185.65.88.0/22
185.143.164.0/22
IPv6:
2a00:12c0::/29
2a04:4cc0::/29
2a04:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
96:b9:bd:4c:bc:28:4f:89:cb:31:cf:0d:2c:3a:a9:1d:87:72:
03:df:bb:a7:eb:9f:c4:a7:b7:85:32:26:ff:d0:b0:2f:79:1b:
06:36:93:87:b6:10:78:0b:f9:5a:1f:e1:49:d3:da:a5:77:89:
89:6f:0a:ef:60:57:65:94:38:ea:99:fb:88:c8:ae:2a:e2:fe:
65:9c:e3:51:34:76:08:ab:15:95:e6:b5:86:ee:4e:d1:eb:02:
42:a2:d3:57:0d:6f:c3:bc:22:14:ec:07:4b:ee:90:c5:dc:a8:
48:b4:3c:e1:e1:b3:7f:d8:9d:b5:45:2b:e6:3a:ad:30:ea:3b:
3c:69:a8:4d:58:7f:4d:a2:6e:ff:b4:f5:49:a1:0b:5f:72:58:
4d:35:cd:3f:06:9a:4e:8f:6f:0b:66:32:31:10:de:4b:cb:3e:
75:36:5f:6b:a6:17:76:c4:a5:22:63:78:d8:46:23:e3:a6:2d:
cb:35:47:08:c2:a5:0f:12:b1:f3:ce:0a:e8:af:5e:af:76:b7:
d7:3c:33:7c:9b:66:98:12:10:a4:78:29:74:3f:c1:95:4a:c8:
d3:0a:f2:f2:0d:84:2d:4f:2c:b5:da:ec:e3:41:fa:60:62:5b:
21:cd:ab:93:4c:59:b3:9c:8e:6b:ea:fe:55:83:e0:96:00:bf:
c4:04:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:09 2024 by rpki-client on console-ams.rpki-client.org