Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/1-RgA89TyJbVG6C2J8AtdXA3yYHk.roa
File: 1-RgA89TyJbVG6C2J8AtdXA3yYHk.roa (raw, json)
Hash identifier: ZTvSjtNPDubEizA/COYypOJwaRBaEZovn+E0tLxK3i4=
Subject key identifier: F9:18:00:F3:D4:F2:25:B5:46:E8:2D:89:F0:0B:5D:5C:0D:F2:60:79
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: F28691
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/1-RgA89TyJbVG6C2J8AtdXA3yYHk.roa
Signing time: Mon 03 Jan 2022 08:29:23 +0000
ROA not before: Mon 03 Jan 2022 08:29:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5464
IP address blocks: 195.184.92.0/23 maxlen: 23
109.95.240.0/21 maxlen: 21
194.0.229.0/24 maxlen: 24
2001:67c:33c::/48 maxlen: 48
2a00:1df0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15894161 (0xf28691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Jan 3 08:29:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f91800f3d4f225b546e82d89f00b5d5c0df26079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:51:68:c3:b4:91:94:39:8d:77:73:1c:f1:
d8:52:54:ad:8a:2c:8c:13:1a:48:f8:d7:1e:f8:50:
cd:5e:32:05:3c:d9:82:56:b3:a7:4f:ee:75:ba:8f:
93:65:7c:3b:53:29:14:4b:00:9d:b1:bf:40:f1:d0:
c3:c1:54:70:01:a9:53:8b:06:27:ca:a5:70:e2:b5:
0d:de:07:92:00:f7:f9:b2:83:01:03:eb:4f:59:22:
be:c3:1a:bb:3a:c2:e4:f7:a1:4f:c5:1c:5b:ab:bd:
cf:e7:fe:3a:28:09:f6:9a:1f:4c:1c:0f:59:62:70:
1e:0b:68:2d:b7:f9:5c:c8:39:ac:fc:3b:8a:59:dd:
51:c2:28:f6:c5:4d:e3:c8:31:1f:52:a0:ea:10:e1:
d9:39:8a:4e:79:23:e5:8e:d6:e1:a7:b9:36:db:f1:
e8:0b:8e:44:0c:c6:92:82:1b:4d:ee:48:9c:15:10:
6f:63:4c:65:fb:01:53:21:78:02:5a:fc:aa:c7:af:
e7:97:06:b6:e0:bc:0d:65:c9:6e:a9:b7:a1:6b:a1:
08:71:83:3d:18:70:9f:a5:85:1d:21:fb:a4:49:57:
9b:7a:84:df:e4:41:c0:7c:79:b2:d3:cd:ee:6e:09:
05:85:79:55:ae:3b:db:20:5f:f4:fe:01:26:07:1a:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:00:F3:D4:F2:25:B5:46:E8:2D:89:F0:0B:5D:5C:0D:F2:60:79
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/1-RgA89TyJbVG6C2J8AtdXA3yYHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.240.0/21
194.0.229.0/24
195.184.92.0/23
IPv6:
2001:67c:33c::/48
2a00:1df0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:ab:46:73:ec:2d:67:bf:a5:43:db:f4:27:2d:92:c6:9e:dc:
3c:e3:22:91:ea:bb:fd:d2:5a:b2:da:4d:3f:d4:e9:97:55:45:
41:57:7b:95:07:6e:90:9d:0d:2c:5f:f2:6b:ef:a5:a5:53:34:
61:df:80:4d:28:1e:16:30:b0:1f:1c:59:bf:cd:17:1b:14:a5:
db:09:e1:13:ac:02:00:60:e2:ff:77:04:84:58:db:75:1a:12:
ee:6b:2b:41:a0:8e:87:79:de:6b:a7:1f:90:ac:2b:9c:c9:47:
e8:5e:3d:93:88:4e:1a:4a:46:54:e0:8b:12:c4:a7:49:b2:65:
2f:11:38:b3:2c:4b:f8:c3:82:a6:0e:64:36:c4:7d:48:f0:83:
7a:c1:85:c5:f0:0a:37:58:07:cd:b2:af:e4:ab:2f:11:6c:03:
af:59:fe:a8:f8:43:5e:06:d2:d4:5c:ce:0b:aa:b8:ce:09:95:
e2:25:9a:a8:e4:42:b0:42:2e:87:63:d4:98:b3:fa:74:98:2b:
c9:28:86:60:06:17:ac:d4:ab:0c:3a:51:d8:d9:c6:61:ab:b2:
79:93:32:11:bf:45:86:cc:10:ef:d3:be:1f:d2:fd:14:ea:9d:
3c:6a:ff:50:74:ef:37:10:41:51:0c:58:43:f7:b5:e7:02:00:
8c:cd:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org