Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/cFPJOWU1crkwnOGudYGqN2L57lg.roa
File: cFPJOWU1crkwnOGudYGqN2L57lg.roa (raw, json)
Hash identifier: hx+/Fzy7zuGFFEaL/WURD5QUnGNUvf0SMS6XDJK+EZ8=
Subject key identifier: 70:53:C9:39:65:35:72:B9:30:9C:E1:AE:75:81:AA:37:62:F9:EE:58
Certificate issuer: /CN=79069738c48f16f0144519b7f881ad0b6d3c930e
Certificate serial: 018A34A713BCA11D7F7217761AA88BD1E3C7
Authority key identifier: 79:06:97:38:C4:8F:16:F0:14:45:19:B7:F8:81:AD:0B:6D:3C:93:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQaXOMSPFvAURRm3-IGtC208kw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/cFPJOWU1crkwnOGudYGqN2L57lg.roa
Signing time: Sun 27 Aug 2023 01:41:19 +0000
ROA not before: Sun 27 Aug 2023 01:41:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50530
IP address blocks: 185.4.220.0/22 maxlen: 24
109.110.160.0/19 maxlen: 24
185.205.220.0/22 maxlen: 24
185.222.184.0/22 maxlen: 24
2a00:1ce0::/32 maxlen: 32
2a0b:ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:34:a7:13:bc:a1:1d:7f:72:17:76:1a:a8:8b:d1:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79069738c48f16f0144519b7f881ad0b6d3c930e
Validity
Not Before: Aug 27 01:41:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7053c939653572b9309ce1ae7581aa3762f9ee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:59:41:b4:53:ed:79:8f:30:c8:37:fe:15:
20:6a:8a:23:d5:6e:72:48:9a:07:fb:fb:69:14:29:
e6:0a:f1:c0:f8:27:ab:5e:75:42:c9:f7:31:04:cc:
ec:6f:d1:35:e5:a0:8d:66:d1:c4:cf:f0:c5:30:67:
9d:44:20:0c:09:a6:66:f1:2f:b6:de:bf:ad:f2:1d:
94:b9:2c:9c:53:3e:68:b6:22:26:dc:6d:e2:db:b1:
7e:96:ff:d4:93:b8:7a:53:d9:d9:84:f0:c9:5f:3e:
25:10:fc:d5:f5:87:bd:60:ea:17:26:b7:e5:d0:66:
2c:43:95:08:3b:4f:8c:74:f2:f9:b8:d2:86:9d:21:
f9:c7:5b:34:9f:0f:3c:a9:5e:10:90:76:97:35:5a:
33:77:d5:0f:c6:a5:42:b3:7e:1b:e4:c3:36:b1:39:
21:cf:94:7e:9d:77:ef:45:fa:b6:d6:8d:2f:bd:dd:
07:88:05:1e:ce:11:24:63:01:d3:68:ad:37:f4:4a:
55:58:a8:e2:fb:b6:fa:91:a8:cb:e8:db:c4:bd:7f:
8d:50:82:42:c4:2b:9a:a3:3b:78:81:c3:03:ca:79:
35:ee:42:88:26:2c:96:02:dd:dc:1b:f2:33:ad:32:
98:5d:e5:54:54:51:05:09:60:96:d2:2f:1a:40:7b:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:C9:39:65:35:72:B9:30:9C:E1:AE:75:81:AA:37:62:F9:EE:58
X509v3 Authority Key Identifier:
keyid:79:06:97:38:C4:8F:16:F0:14:45:19:B7:F8:81:AD:0B:6D:3C:93:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQaXOMSPFvAURRm3-IGtC208kw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/cFPJOWU1crkwnOGudYGqN2L57lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c32283-cd96-41cd-934c-4075f2e9bf06/1/eQaXOMSPFvAURRm3-IGtC208kw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/19
185.4.220.0/22
185.205.220.0/22
185.222.184.0/22
IPv6:
2a00:1ce0::/32
2a0b:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
86:a4:3c:96:e1:d9:a9:68:78:fa:40:f4:cf:0a:db:a1:1b:bb:
4f:51:3f:65:9d:9a:8d:c6:42:22:10:a2:1a:7f:d2:d6:98:b2:
82:54:28:f1:57:f0:d3:b7:f0:0f:40:d7:ce:5c:21:91:df:6c:
0d:40:fa:d3:17:4b:eb:79:08:b1:32:08:04:e3:95:39:8d:32:
fc:70:55:39:9a:2a:dc:b6:12:62:1c:49:ef:93:05:8d:91:d6:
9b:91:4e:bc:cb:3c:00:4b:2f:14:b8:50:ba:82:d8:78:dd:58:
14:85:79:83:d2:31:39:ea:22:a1:06:a7:9b:31:30:26:03:1e:
63:25:69:e7:6c:4b:9c:24:1f:4b:8b:ab:1f:ad:36:23:f8:37:
5a:0a:ad:2e:e6:06:83:2d:0c:6b:54:ee:0b:a3:ce:c6:45:24:
ad:40:f3:04:a1:24:b7:2d:2d:85:db:33:ce:b3:e5:4d:dd:c7:
b2:d0:cc:7a:17:56:5d:79:1a:9b:ac:7b:c1:42:eb:f0:f3:91:
92:fa:a0:f8:8d:5a:06:ab:f6:85:c8:53:ff:59:72:b0:0b:20:
7f:33:37:82:3e:e8:1e:e8:aa:33:37:8e:80:9a:75:b6:3a:26:
8a:3d:bf:c8:6f:cc:e1:e1:54:04:ac:5d:8c:c6:75:dc:a2:12:
8a:e2:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:20 2024 by rpki-client on console-ams.rpki-client.org