Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/V7chmXLbP00ivAk5ZucQxXeA9kg.roa
File: V7chmXLbP00ivAk5ZucQxXeA9kg.roa (raw, json)
Hash identifier: 8E1WHPvTk3WLH/19yMM3rXNCsfdW8ot2u0l6kuJSNXA=
Subject key identifier: 57:B7:21:99:72:DB:3F:4D:22:BC:09:39:66:E7:10:C5:77:80:F6:48
Certificate issuer: /CN=a0db124ef35c222167894a5a5e93704a811c34ac
Certificate serial: 18740DE9
Authority key identifier: A0:DB:12:4E:F3:5C:22:21:67:89:4A:5A:5E:93:70:4A:81:1C:34:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNsSTvNcIiFniUpaXpNwSoEcNKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/V7chmXLbP00ivAk5ZucQxXeA9kg.roa
Signing time: Tue 07 Jun 2022 12:55:02 +0000
ROA not before: Tue 07 Jun 2022 12:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20926
IP address blocks: 185.47.240.0/24 maxlen: 24
79.98.16.0/21 maxlen: 24
84.239.64.0/18 maxlen: 24
80.74.64.0/20 maxlen: 24
185.10.176.0/22 maxlen: 24
141.101.56.0/22 maxlen: 24
2a00:6901::/32 maxlen: 48
2a00:6900::/44 maxlen: 48
2a00:6900:f0::/48 maxlen: 48
2a03:5d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410258921 (0x18740de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0db124ef35c222167894a5a5e93704a811c34ac
Validity
Not Before: Jun 7 12:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57b7219972db3f4d22bc093966e710c57780f648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:79:57:71:82:62:39:5e:65:6d:d4:a8:7f:
33:62:fd:d3:5b:ae:6f:e8:36:17:59:10:ef:78:9c:
90:a6:22:fe:f0:4b:64:8c:da:02:9a:75:82:a7:a7:
b6:82:51:7a:1c:59:93:7a:8e:15:bf:1f:be:24:44:
10:ca:e3:da:a1:61:26:c8:15:5e:f9:36:e6:47:53:
9f:d6:cc:f4:93:ef:ba:98:4a:47:e6:f3:52:f4:fe:
80:e2:fe:80:0d:3e:07:e9:99:fd:b4:fa:4c:7d:49:
11:ee:94:15:2b:88:23:09:fc:4d:7f:b0:a6:70:45:
b2:27:15:c3:8f:c7:85:b3:bb:41:d5:47:0b:a8:a8:
18:ce:56:27:13:0d:6b:3f:3c:08:87:6d:1a:81:3b:
37:bf:ae:fe:f7:d9:4d:6e:bc:a4:ff:9f:92:04:15:
cd:43:36:d2:b9:5e:89:d7:18:25:ff:3a:80:59:69:
aa:9a:40:5a:14:66:29:f6:04:52:28:9c:b5:a0:9f:
d2:6a:54:29:db:f5:00:a2:44:ea:f0:8c:b7:ba:25:
b5:7e:f7:4b:fd:07:37:e7:51:9f:df:22:fb:75:53:
0e:0b:39:2d:4b:f7:54:8b:75:99:f3:45:a6:6e:15:
50:25:14:a0:ec:0a:03:8e:ae:e0:ef:fb:6f:20:10:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:21:99:72:DB:3F:4D:22:BC:09:39:66:E7:10:C5:77:80:F6:48
X509v3 Authority Key Identifier:
keyid:A0:DB:12:4E:F3:5C:22:21:67:89:4A:5A:5E:93:70:4A:81:1C:34:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNsSTvNcIiFniUpaXpNwSoEcNKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/V7chmXLbP00ivAk5ZucQxXeA9kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/oNsSTvNcIiFniUpaXpNwSoEcNKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.16.0/21
80.74.64.0/20
84.239.64.0/18
141.101.56.0/22
185.10.176.0/22
185.47.240.0/24
IPv6:
2a00:6900::/44
2a00:6900:f0::/48
2a00:6901::/32
2a03:5d40::/32
Signature Algorithm: sha256WithRSAEncryption
3e:11:43:81:92:ae:4a:94:06:09:c8:1c:31:6e:7f:e3:34:c9:
65:d3:8c:67:06:97:77:24:96:17:3d:e5:24:66:e0:e1:d3:b1:
76:08:86:ea:49:79:ff:42:98:98:5b:e7:80:3a:5a:a0:73:ca:
6c:13:97:a0:00:5c:27:e3:db:1d:14:f2:36:c2:cd:40:ec:8a:
35:ed:45:9a:9c:da:29:e4:f1:7f:09:54:10:e0:52:2e:76:9e:
01:92:32:18:49:86:50:21:35:94:7e:a5:e8:90:28:66:aa:69:
65:5d:5c:31:f8:c7:24:19:81:82:91:55:3f:94:9a:ed:50:71:
ab:c9:52:4e:e3:85:90:0e:12:0c:83:ac:1c:83:01:93:18:ad:
a6:3c:85:a1:a5:57:81:03:51:25:9a:98:53:4b:bd:7f:24:71:
cb:66:65:8c:99:03:d5:54:46:56:0a:b5:08:f3:66:a3:b5:a8:
e0:1e:8d:23:c6:bb:49:24:8d:a7:44:4a:78:d7:17:71:ff:51:
b2:67:f8:5b:48:93:9c:7e:0b:de:10:85:f0:cc:0f:aa:73:09:
7c:10:6d:9a:68:57:0d:74:88:c3:cb:76:b9:ac:7b:b2:37:e7:
e5:b9:d0:04:cd:74:83:c9:8d:b1:37:66:38:15:e1:d0:04:2e:
4d:a0:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:47 2024 by rpki-client on console-ams.rpki-client.org