Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/F_-wiJ5fVf06mnFZMnLyuaL0FKg.roa
File: F_-wiJ5fVf06mnFZMnLyuaL0FKg.roa (raw, json)
Hash identifier: rOWQgRYKi6wHzqPNLI7dYjMvmYtVT5fdZS0EixXXSMI=
Subject key identifier: 17:FF:B0:88:9E:5F:55:FD:3A:9A:71:59:32:72:F2:B9:A2:F4:14:A8
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 092590AF
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/F_-wiJ5fVf06mnFZMnLyuaL0FKg.roa
Signing time: Sat 01 Jan 2022 12:58:41 +0000
ROA not before: Sat 01 Jan 2022 12:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8331
IP address blocks: 86.62.64.0/18 maxlen: 18
195.54.192.0/19 maxlen: 19
80.90.240.0/20 maxlen: 20
195.91.128.0/17 maxlen: 17
2a00:14d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153456815 (0x92590af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17ffb0889e5f55fd3a9a71593272f2b9a2f414a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:8f:12:43:fb:de:f0:6f:86:fd:fa:35:e5:
dc:9d:aa:3c:62:cb:ae:d5:cf:c3:f8:f7:15:1f:46:
2a:92:25:d2:90:17:a6:07:07:d9:7c:da:1c:9b:d1:
81:63:94:78:2f:45:a7:61:36:ec:34:c9:93:21:ee:
0b:94:2e:68:fc:0d:93:e8:39:13:f2:a7:70:b9:75:
6a:37:1e:40:fc:81:b5:26:a3:0c:1b:da:f5:69:95:
82:e4:db:d6:6e:7e:e4:94:2f:04:25:69:d4:a6:13:
88:c2:2c:3a:16:2c:da:ce:64:71:3d:7a:4b:20:43:
0b:70:f5:68:3a:20:d3:b7:96:cd:62:d7:1b:fe:90:
26:a1:f3:91:59:50:3c:81:11:9d:57:28:e2:13:07:
bd:a7:45:21:d7:22:a5:5a:ec:f9:cb:00:4f:9c:98:
31:9a:4f:bb:12:9b:55:ca:d4:82:b3:e3:27:ab:44:
45:e4:f5:cf:e6:02:3b:0e:22:31:ef:ff:f5:25:47:
c0:53:44:7f:91:80:89:10:97:72:5e:25:a7:c2:fe:
05:b4:2d:c8:f3:94:95:74:9b:a8:a7:d7:6e:a6:c0:
3f:de:55:98:6a:7c:f2:d4:ea:66:7e:40:45:d6:3a:
c4:9a:07:f0:cc:ec:49:bd:23:1f:77:eb:f5:ca:29:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:B0:88:9E:5F:55:FD:3A:9A:71:59:32:72:F2:B9:A2:F4:14:A8
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/F_-wiJ5fVf06mnFZMnLyuaL0FKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.240.0/20
86.62.64.0/18
195.54.192.0/19
195.91.128.0/17
IPv6:
2a00:14d0::/32
Signature Algorithm: sha256WithRSAEncryption
d7:f7:c2:69:e5:be:5f:cf:18:97:d0:dd:90:9f:25:44:10:d7:
92:d2:ba:da:ad:7f:17:ba:1c:b5:53:55:fe:a8:aa:1d:50:5e:
f7:65:dc:d4:98:c8:bf:37:a5:49:78:32:c7:38:1e:df:72:74:
bb:a2:fa:9a:d8:82:0e:54:2e:bf:d3:be:9f:11:fc:0f:7a:86:
53:2e:10:61:42:55:05:cb:41:e1:b8:76:b5:9f:39:f6:ce:64:
11:3d:32:d5:42:05:d7:90:2b:ed:61:3f:e5:d7:8b:9b:57:45:
17:1f:e0:76:75:53:e1:14:6e:99:a4:0f:77:fa:ef:e0:2d:17:
e2:f6:0d:53:0b:80:85:4d:dc:0d:56:d1:6c:c5:b5:8e:33:9c:
27:42:22:8e:29:35:e9:6a:74:b5:6d:30:1a:22:4e:31:9e:17:
7c:e3:a1:b1:0e:54:bc:97:07:c6:ea:4c:6a:7f:6d:1d:99:92:
8a:c7:51:22:6f:79:0d:1a:3a:7b:8c:f8:0d:fa:9c:ab:63:fb:
7b:da:a1:9d:dc:6a:9d:b5:d2:d2:c0:b5:2b:e2:40:c8:4f:ca:
c7:8d:55:b3:48:a5:6d:9d:d7:de:0c:36:18:a8:82:06:23:32:
55:3d:07:24:47:bc:ba:59:6f:b6:9a:ac:68:fc:ea:92:5d:d9:
e6:40:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:44 2025 by rpki-client