Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/3d676d-5140-4373-8d46-5f95d9d11b4f/1/txIps_lPP-35XYRGMg-57ITVt7s.roa
File: txIps_lPP-35XYRGMg-57ITVt7s.roa (raw, json)
Hash identifier: s2ZJNYNTKQAzV2OR5anvS/Es8+L+rm+LYk5iqayPKIo=
Subject key identifier: B7:12:29:B3:F9:4F:3F:ED:F9:5D:84:46:32:0F:B9:EC:84:D5:B7:BB
Certificate issuer: /CN=c3fb5f848c13e6b2abb6919698a24545af03a6af
Certificate serial: 293EF58A
Authority key identifier: C3:FB:5F:84:8C:13:E6:B2:AB:B6:91:96:98:A2:45:45:AF:03:A6:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tfhIwT5rKrtpGWmKJFRa8Dpq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/3d676d-5140-4373-8d46-5f95d9d11b4f/1/txIps_lPP-35XYRGMg-57ITVt7s.roa
Signing time: Sat 01 Jan 2022 07:03:43 +0000
ROA not before: Sat 01 Jan 2022 07:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 46.245.176.0/21 maxlen: 24
89.38.36.0/23 maxlen: 24
185.187.64.0/22 maxlen: 24
91.230.172.0/22 maxlen: 24
91.90.144.0/20 maxlen: 24
195.93.242.0/23 maxlen: 24
109.70.216.0/21 maxlen: 24
86.105.222.0/23 maxlen: 24
2a00:14e0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691991946 (0x293ef58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb5f848c13e6b2abb6919698a24545af03a6af
Validity
Not Before: Jan 1 07:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b71229b3f94f3fedf95d8446320fb9ec84d5b7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:6e:c5:9f:ef:59:ec:a8:40:8d:d9:d8:a4:
f8:f6:07:19:de:bd:35:09:78:45:16:76:d6:84:13:
ee:70:56:bf:07:53:2a:3e:53:dc:21:54:0b:e8:81:
93:6a:a6:fb:14:76:d0:c7:6b:32:1f:4a:33:38:72:
e2:08:39:39:71:db:63:8f:e1:74:27:58:98:8c:53:
da:82:11:05:72:3f:7e:b2:46:34:50:fa:87:7e:d3:
3c:cb:12:68:cd:38:70:4a:df:af:c2:6b:77:b2:7a:
0c:09:f3:09:31:8c:e3:c1:b1:c1:51:0c:85:60:2b:
c3:8f:48:7d:36:46:8e:be:24:a2:6a:0c:50:7d:c6:
a1:72:e3:17:84:01:88:3a:a6:b8:f2:dc:f4:8e:ff:
4a:b8:c4:86:23:34:a4:09:3f:15:f3:29:86:9a:fd:
b7:53:43:2b:6f:7e:e0:dc:07:d7:7b:73:0f:60:25:
55:7d:f6:03:46:21:7f:9c:22:2d:05:07:56:b7:31:
44:2e:17:51:b3:98:1a:3f:96:b1:6c:cf:2a:77:ba:
7d:26:b5:1a:c3:d6:aa:7c:e6:e2:e8:d2:1e:a8:ef:
d4:65:15:a2:62:6f:2e:42:55:b5:11:6c:ab:cb:13:
86:df:16:e7:5c:88:50:05:96:c0:c7:4f:f2:6f:c3:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:12:29:B3:F9:4F:3F:ED:F9:5D:84:46:32:0F:B9:EC:84:D5:B7:BB
X509v3 Authority Key Identifier:
keyid:C3:FB:5F:84:8C:13:E6:B2:AB:B6:91:96:98:A2:45:45:AF:03:A6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tfhIwT5rKrtpGWmKJFRa8Dpq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3d676d-5140-4373-8d46-5f95d9d11b4f/1/txIps_lPP-35XYRGMg-57ITVt7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3d676d-5140-4373-8d46-5f95d9d11b4f/1/w_tfhIwT5rKrtpGWmKJFRa8Dpq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.176.0/21
86.105.222.0/23
89.38.36.0/23
91.90.144.0/20
91.230.172.0/22
109.70.216.0/21
185.187.64.0/22
195.93.242.0/23
IPv6:
2a00:14e0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:ba:f1:b9:9c:b9:24:d2:d1:d2:55:6e:19:7e:1c:b3:7c:f0:
04:50:5d:7a:e8:c6:30:42:98:9d:3f:7e:94:c0:65:ca:18:77:
10:8d:b3:35:9a:d7:bf:c3:08:b2:7b:33:96:27:04:21:7e:21:
aa:83:5f:59:51:44:93:87:2e:14:df:b9:e0:b6:20:5f:42:29:
ff:9e:ce:a6:4e:e1:33:b1:a9:f0:99:90:76:38:40:1c:03:60:
48:7e:ec:79:36:91:07:25:0e:c9:e4:30:0d:87:b5:92:b0:55:
24:0c:54:98:bd:bf:a3:71:4f:a7:00:f4:fc:42:c3:15:28:78:
52:00:b9:d6:ba:a8:9c:ad:38:23:18:fb:da:05:d0:aa:f2:02:
4d:7a:18:42:da:2d:bf:6d:74:47:5b:fc:44:47:84:aa:82:2d:
0d:4a:ee:9d:dd:52:44:fb:b1:95:7a:04:f8:35:77:e3:3c:3f:
e8:3b:cf:6a:cb:a4:a3:6f:18:13:12:68:ed:02:c5:00:41:0d:
7a:a6:c0:2c:61:1c:8a:d3:cc:36:a8:7e:6d:90:35:b8:8e:2a:
1a:66:cd:89:80:6d:dd:b5:61:89:00:b4:fa:5c:49:2e:e9:4d:
d6:37:b9:f6:6d:ca:f5:85:49:79:e8:3b:4b:02:fb:5a:5a:81:
84:be:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:18 2024 by rpki-client on console-ams.rpki-client.org