Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/44d8e7-f3aa-4336-a3cb-62edaad0056e/1/bREeKjUdhKbUEvUuAW0_ikfcDBQ.roa
File: bREeKjUdhKbUEvUuAW0_ikfcDBQ.roa (raw, json)
Hash identifier: gskKemkUwBkCIfJV6rqdu4yw6nlU4kMOEmD5gJdAVok=
Subject key identifier: 6D:11:1E:2A:35:1D:84:A6:D4:12:F5:2E:01:6D:3F:8A:47:DC:0C:14
Certificate issuer: /CN=d679205be2c8a326ab824aa233cb4eb253acc370
Certificate serial: 01856F39087C38619EE2916ABFE13B595A71
Authority key identifier: D6:79:20:5B:E2:C8:A3:26:AB:82:4A:A2:33:CB:4E:B2:53:AC:C3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nkgW-LIoyargkqiM8tOslOsw3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/44d8e7-f3aa-4336-a3cb-62edaad0056e/1/bREeKjUdhKbUEvUuAW0_ikfcDBQ.roa
Signing time: Sun 01 Jan 2023 21:24:46 +0000
ROA not before: Sun 01 Jan 2023 21:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204981
IP address blocks: 185.222.63.0/24 maxlen: 24
185.222.62.0/24 maxlen: 24
185.222.61.0/24 maxlen: 24
185.222.60.0/22 maxlen: 22
185.222.60.0/24 maxlen: 24
2a09:e640:0:1::/64 maxlen: 64
2a09:e640::/29 maxlen: 29
2a09:e640::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:08:7c:38:61:9e:e2:91:6a:bf:e1:3b:59:5a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d679205be2c8a326ab824aa233cb4eb253acc370
Validity
Not Before: Jan 1 21:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d111e2a351d84a6d412f52e016d3f8a47dc0c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:ae:4d:62:e7:71:4a:04:46:90:ba:ea:ce:
d0:10:96:ec:90:78:f8:5e:9d:25:ef:20:58:de:bb:
53:7b:28:ac:87:55:12:c4:66:8e:3a:d3:be:a9:72:
ac:20:ba:0e:ee:93:51:11:a4:13:f8:9f:99:cd:02:
f8:37:0f:e4:f3:ad:d1:95:af:80:6e:a3:68:99:fc:
30:22:ed:ad:64:76:39:f9:f6:47:0b:b9:d2:c9:1a:
b7:8a:69:0a:d0:6a:1c:81:3f:74:70:de:8d:a8:78:
68:61:4c:22:ff:b8:46:5f:82:7f:76:fd:0a:c7:d0:
22:d9:f8:e7:67:59:f8:b3:67:57:d4:42:d7:14:b1:
88:de:f5:85:ee:aa:32:65:c4:d1:49:fb:16:b1:14:
03:c1:b8:0e:6a:b7:c3:e4:9f:4e:e4:71:4f:74:82:
01:81:ba:17:0f:88:81:79:45:df:52:68:01:76:8b:
71:db:10:80:af:d8:da:42:17:4c:2b:e6:58:0a:01:
2c:27:c0:c8:8b:d7:e1:7e:0d:ec:16:15:c2:d2:a8:
6d:ce:fa:4b:76:02:91:69:fe:cd:95:d7:4b:49:37:
7d:8f:eb:11:05:78:b4:d5:dd:38:65:03:40:79:00:
df:6a:f8:8c:43:b8:35:86:48:1a:76:cf:ca:1a:a7:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:1E:2A:35:1D:84:A6:D4:12:F5:2E:01:6D:3F:8A:47:DC:0C:14
X509v3 Authority Key Identifier:
keyid:D6:79:20:5B:E2:C8:A3:26:AB:82:4A:A2:33:CB:4E:B2:53:AC:C3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nkgW-LIoyargkqiM8tOslOsw3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/44d8e7-f3aa-4336-a3cb-62edaad0056e/1/bREeKjUdhKbUEvUuAW0_ikfcDBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/44d8e7-f3aa-4336-a3cb-62edaad0056e/1/1nkgW-LIoyargkqiM8tOslOsw3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.60.0/22
IPv6:
2a09:e640::/29
Signature Algorithm: sha256WithRSAEncryption
80:83:f8:06:ce:f5:8f:e3:eb:50:ac:83:21:ff:9a:20:f9:d5:
eb:9a:8c:8f:de:26:09:6d:4e:84:75:50:4e:ba:89:3b:3e:d9:
1b:61:1a:2d:cf:4b:f6:77:9c:24:1e:b1:4a:ef:db:6e:34:d6:
04:82:89:8d:9a:c0:7f:23:df:d3:f7:65:21:c6:da:5b:a2:b6:
9d:5a:b6:bd:64:08:8c:b8:aa:98:52:4e:94:3d:b7:92:7f:a4:
45:80:55:10:bb:16:58:b1:f3:3a:a4:59:bd:5e:97:d5:7c:5d:
65:c1:ce:9a:43:df:28:55:45:b3:73:78:f6:64:13:31:c3:f8:
55:be:9f:8a:aa:27:cf:c0:00:cc:42:eb:fa:12:17:7f:17:23:
cb:d9:7d:37:db:01:9a:d0:01:b8:d1:38:89:65:44:c3:9e:a8:
08:cd:7c:18:0f:8b:47:b2:7b:a7:79:25:09:c8:3e:db:be:02:
9a:cf:13:85:d3:72:45:b8:fd:79:5a:0d:45:7f:aa:90:8d:d2:
7f:95:d8:24:ac:eb:fd:7a:f4:e1:5c:ae:6e:33:2f:df:e1:4b:
48:00:34:c9:b5:72:d0:9d:b3:ba:3c:45:03:f0:c9:18:47:93:
ed:5f:29:b1:52:3c:70:d0:17:09:94:76:21:49:05:75:0d:4d:
cd:ce:35:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:52 2024 by rpki-client on console-fra.rpki-client.org