Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/44d8e7-f3aa-4336-a3cb-62edaad0056e/1/Ik50ra8tWtNJZ9RrHFDJgoJDrt4.roa
File: Ik50ra8tWtNJZ9RrHFDJgoJDrt4.roa (raw, json)
Hash identifier: s/RrkDGVcve2YgiqqAwNeIn4uHLJJQYV7/ATW6YuOjw=
Subject key identifier: 22:4E:74:AD:AF:2D:5A:D3:49:67:D4:6B:1C:50:C9:82:82:43:AE:DE
Certificate issuer: /CN=d679205be2c8a326ab824aa233cb4eb253acc370
Certificate serial: 0D2FCEFF
Authority key identifier: D6:79:20:5B:E2:C8:A3:26:AB:82:4A:A2:33:CB:4E:B2:53:AC:C3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nkgW-LIoyargkqiM8tOslOsw3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/44d8e7-f3aa-4336-a3cb-62edaad0056e/1/Ik50ra8tWtNJZ9RrHFDJgoJDrt4.roa
Signing time: Sat 01 Jan 2022 11:04:47 +0000
ROA not before: Sat 01 Jan 2022 11:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204981
IP address blocks: 185.222.63.0/24 maxlen: 24
185.222.62.0/24 maxlen: 24
185.222.61.0/24 maxlen: 24
185.222.60.0/22 maxlen: 22
185.222.60.0/24 maxlen: 24
2a09:e640:0:1::/64 maxlen: 64
2a09:e640::/29 maxlen: 29
2a09:e640::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221236991 (0xd2fceff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d679205be2c8a326ab824aa233cb4eb253acc370
Validity
Not Before: Jan 1 11:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=224e74adaf2d5ad34967d46b1c50c9828243aede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:67:62:24:c1:04:50:80:94:db:90:b3:f7:
05:77:93:d0:08:57:ff:8b:b3:1f:a0:72:f4:d4:1c:
2f:d5:87:35:fb:78:02:b5:bc:32:dd:d0:11:7a:fd:
30:11:bf:ed:41:69:f3:fc:cc:32:e2:1b:0f:0e:ef:
81:d7:c0:44:4f:6f:ef:27:fc:23:4c:81:62:8e:aa:
54:12:16:39:a2:70:9e:a2:cd:31:6d:9c:af:d2:11:
04:e0:18:58:36:dc:28:52:e1:51:92:67:a3:95:8d:
dd:68:16:cf:35:a4:74:10:9c:2b:e3:fb:a8:e2:27:
fd:08:00:ab:7c:c2:aa:d0:f5:d4:e2:07:1d:e1:7a:
7f:aa:3c:b6:ef:8e:1a:fe:f9:f4:d3:f5:7e:19:76:
b7:ed:0b:11:f7:10:17:a7:9f:9a:1e:0f:8e:6d:aa:
4d:66:7f:44:74:24:36:ff:df:40:03:eb:56:14:62:
40:4f:74:77:76:c1:99:79:c9:31:61:b7:ae:3e:0a:
08:9a:14:31:eb:a1:23:7b:43:b7:d6:52:26:3d:c3:
4c:1f:07:b7:f8:2d:85:c1:05:93:42:e2:87:1b:74:
3d:b9:cf:53:07:28:ab:6e:51:ff:fc:19:e3:c6:4e:
2f:02:e8:c5:69:33:b6:a3:ed:3c:be:c0:3c:ed:d7:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4E:74:AD:AF:2D:5A:D3:49:67:D4:6B:1C:50:C9:82:82:43:AE:DE
X509v3 Authority Key Identifier:
keyid:D6:79:20:5B:E2:C8:A3:26:AB:82:4A:A2:33:CB:4E:B2:53:AC:C3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nkgW-LIoyargkqiM8tOslOsw3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/44d8e7-f3aa-4336-a3cb-62edaad0056e/1/Ik50ra8tWtNJZ9RrHFDJgoJDrt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/44d8e7-f3aa-4336-a3cb-62edaad0056e/1/1nkgW-LIoyargkqiM8tOslOsw3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.60.0/22
IPv6:
2a09:e640::/29
Signature Algorithm: sha256WithRSAEncryption
61:ab:91:f2:59:71:17:74:50:49:27:25:2e:86:86:8d:a1:36:
5d:d2:9f:8f:2c:71:f1:b4:de:17:28:4a:c4:16:98:90:95:89:
4a:ce:1b:78:7f:33:38:c7:32:39:24:ec:c6:24:4d:e4:d2:da:
b8:cf:43:3d:53:4f:ad:2c:a3:99:12:b5:44:0e:12:e7:17:08:
4c:fb:89:ad:d8:29:b9:2b:be:49:7b:1b:65:3e:e6:73:ed:bc:
30:26:6e:d6:36:31:f0:e1:48:60:87:e6:14:9e:b7:c5:61:73:
a3:00:64:e2:a1:04:40:ea:27:5f:15:a4:db:df:75:be:2d:13:
4b:c2:78:b4:ee:a4:2c:fc:6a:4c:3f:6c:d4:68:3c:f8:c5:e4:
5e:1e:4f:e2:82:83:18:ac:eb:31:ee:e5:39:95:78:f1:0d:67:
ad:06:29:40:1f:e8:f1:c3:93:ef:f3:fa:a8:20:18:68:fa:51:
53:cf:ee:34:0d:4a:3c:73:96:13:fb:16:5a:44:26:02:63:f8:
59:dc:db:f3:9b:8a:4d:18:65:20:8c:81:68:11:66:4b:e3:94:
a7:e1:dc:4d:49:98:c8:fc:ee:09:8a:7b:36:e1:28:c4:b8:e6:
72:5b:26:06:96:ef:e2:c9:4a:66:77:c6:0b:8a:e9:74:95:8f:
cb:69:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:52 2024 by rpki-client on console-fra.rpki-client.org