Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/4J_k98dzvBQqSKCo1KALFAtmk2M.roa
File: 4J_k98dzvBQqSKCo1KALFAtmk2M.roa (raw, json)
Hash identifier: SUWWU99yEkCtLNfOUhkFXpAUAfz840x3DRQbS5sH7dE=
Subject key identifier: E0:9F:E4:F7:C7:73:BC:14:2A:48:A0:A8:D4:A0:0B:14:0B:66:93:63
Certificate issuer: /CN=79069738c48f16f0144519b7f881ad0b6d3c930e
Certificate serial: 059E4A9E
Authority key identifier: 79:06:97:38:C4:8F:16:F0:14:45:19:B7:F8:81:AD:0B:6D:3C:93:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQaXOMSPFvAURRm3-IGtC208kw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/4J_k98dzvBQqSKCo1KALFAtmk2M.roa
Signing time: Sat 01 Jan 2022 06:53:23 +0000
ROA not before: Sat 01 Jan 2022 06:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50530
IP address blocks: 185.4.220.0/22 maxlen: 24
109.110.160.0/19 maxlen: 24
193.246.160.0/23 maxlen: 24
193.246.164.0/23 maxlen: 24
185.205.220.0/22 maxlen: 24
185.222.184.0/22 maxlen: 24
2a00:1ce0::/32 maxlen: 32
2a0b:ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94259870 (0x59e4a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79069738c48f16f0144519b7f881ad0b6d3c930e
Validity
Not Before: Jan 1 06:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e09fe4f7c773bc142a48a0a8d4a00b140b669363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:4b:f9:dc:28:ac:79:fe:2c:7a:ae:69:8b:
81:f0:39:9a:7d:1a:aa:9e:d8:d4:3c:82:9c:f7:bd:
50:8d:80:be:42:cd:8d:e5:e9:7a:62:75:02:85:1f:
f8:71:35:4c:54:e8:af:d8:7e:f0:48:3c:ba:f2:d1:
02:5f:8e:75:b9:39:2e:9d:7b:b0:f3:6c:21:ac:c0:
30:c3:96:c1:94:ef:a3:fc:93:1d:b3:11:cd:df:81:
9d:db:ff:14:78:7d:48:66:26:89:36:50:27:af:c5:
55:3e:71:df:e6:99:d5:01:60:c3:11:42:bb:24:4c:
d9:c0:75:1d:98:66:b1:4a:36:89:ef:30:1a:e5:96:
df:e2:65:05:20:ec:f1:ed:c5:e8:b6:ba:54:ba:7f:
98:2c:d7:3a:c7:a8:f8:86:5b:5d:56:bc:e2:48:4d:
da:9c:cf:17:e4:6c:61:a7:c1:be:0b:ec:24:34:f2:
0e:d4:d1:eb:3b:91:8b:46:1e:0d:11:24:a4:67:51:
6b:81:30:26:49:64:65:8a:8f:cb:99:41:ee:f3:24:
5a:e4:fa:22:3d:98:60:a8:db:c2:fa:15:26:a2:c0:
2b:5e:b4:c2:51:5a:9a:52:ec:49:de:6a:17:c1:dc:
65:e2:92:fb:fa:b1:09:61:67:35:ac:f3:cd:92:54:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9F:E4:F7:C7:73:BC:14:2A:48:A0:A8:D4:A0:0B:14:0B:66:93:63
X509v3 Authority Key Identifier:
keyid:79:06:97:38:C4:8F:16:F0:14:45:19:B7:F8:81:AD:0B:6D:3C:93:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQaXOMSPFvAURRm3-IGtC208kw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/4J_k98dzvBQqSKCo1KALFAtmk2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/eQaXOMSPFvAURRm3-IGtC208kw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/19
185.4.220.0/22
185.205.220.0/22
185.222.184.0/22
193.246.160.0/23
193.246.164.0/23
IPv6:
2a00:1ce0::/32
2a0b:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
19:59:b2:8a:9e:06:63:5e:e9:f9:77:78:80:c9:65:86:0f:65:
0f:79:d3:26:53:5b:2e:28:e3:43:72:02:4f:13:16:55:f5:23:
93:1a:35:0b:9d:62:8c:e7:a3:d2:26:81:1b:b9:30:f1:fb:c4:
2c:b5:a6:66:f9:e2:51:36:1e:43:51:be:48:de:d0:a8:e1:7e:
8a:c0:7a:b2:0d:a3:4e:96:f8:b6:a4:b7:76:af:16:b3:02:ee:
16:0c:ac:85:fe:57:4e:ac:67:92:ea:e1:32:96:20:d8:3b:d0:
14:d5:b2:d6:eb:09:3c:51:50:78:ae:60:87:51:b8:ef:5f:3c:
ca:e9:b5:01:60:ba:8c:5b:ae:a0:dc:21:c4:17:83:c7:cb:fe:
46:33:f9:39:c7:92:e5:30:e1:58:9a:42:0f:b3:77:76:91:ff:
83:3b:97:e5:72:a8:e6:6f:6d:84:ab:6f:32:c2:95:60:6e:c6:
6d:fd:b5:3e:d0:38:a5:93:a4:b8:15:0e:c1:2d:c9:d4:be:37:
56:38:2e:31:45:14:3f:4d:de:75:60:e8:85:ff:46:5d:a9:c3:
f2:d9:83:9b:4b:b1:e7:e1:cc:73:ae:7f:a4:97:f5:12:7a:a5:
34:1f:0e:14:2f:97:b5:7b:76:fd:d0:d4:68:ef:70:8d:2f:f7:
47:2f:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:05 2024 by rpki-client on console-fra.rpki-client.org