Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/PEYeuWdCtqu8CuAEQVgdRP9lPzQ.roa
File: PEYeuWdCtqu8CuAEQVgdRP9lPzQ.roa (raw, json)
Hash identifier: bA0ial2fsznvd3aH8uXBbbgTOONJGcRRuC8MMTDK0fI=
Subject key identifier: 3C:46:1E:B9:67:42:B6:AB:BC:0A:E0:04:41:58:1D:44:FF:65:3F:34
Certificate issuer: /CN=6aebc95381af87a34aee42e6854cc608a90b4acc
Certificate serial: 14E3C1
Authority key identifier: 6A:EB:C9:53:81:AF:87:A3:4A:EE:42:E6:85:4C:C6:08:A9:0B:4A:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auvJU4Gvh6NK7kLmhUzGCKkLSsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/PEYeuWdCtqu8CuAEQVgdRP9lPzQ.roa
Signing time: Fri 04 Feb 2022 14:33:20 +0000
ROA not before: Fri 04 Feb 2022 14:33:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25521
IP address blocks: 185.223.112.0/22 maxlen: 23
46.30.160.0/21 maxlen: 22
93.188.32.0/21 maxlen: 22
176.115.96.0/21 maxlen: 22
193.106.136.0/22 maxlen: 23
193.0.216.0/22 maxlen: 23
193.0.220.0/23 maxlen: 24
91.224.24.0/23 maxlen: 24
82.193.96.0/19 maxlen: 20
195.64.148.0/23 maxlen: 24
2a02:2610::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369025 (0x14e3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aebc95381af87a34aee42e6854cc608a90b4acc
Validity
Not Before: Feb 4 14:33:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c461eb96742b6abbc0ae00441581d44ff653f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:fe:93:c5:17:f4:06:79:82:9d:d5:c8:64:
32:02:55:15:fe:ef:2a:11:ee:9e:50:c8:ac:f0:87:
79:4e:db:c4:ec:a2:a8:75:18:7c:24:88:91:c3:78:
1c:4a:63:c6:e3:f1:96:70:6e:cc:29:eb:d3:ca:2d:
a6:9c:71:65:d5:94:98:d0:e4:66:72:d0:05:e4:66:
50:03:10:93:8d:ac:19:d4:84:58:1d:5d:2b:ac:c3:
c5:fd:24:de:1d:d4:56:fb:13:0c:27:56:55:ee:28:
28:bb:6c:ad:8c:d2:4e:6e:8d:7a:20:85:32:10:d3:
f8:6b:6e:bf:6a:e8:51:b9:6f:c4:42:a8:23:f7:e4:
77:a1:0f:70:6e:ca:0c:bb:f7:7f:c7:86:d4:56:b2:
d5:95:7a:b5:8a:a8:b6:2c:6a:71:43:8a:27:1c:75:
fc:a2:87:c7:10:81:da:a1:aa:14:f3:56:60:da:08:
ea:bf:2a:a3:cf:50:29:71:45:89:7e:8f:72:eb:10:
23:97:b7:58:4c:35:ea:12:99:01:3b:db:09:99:63:
38:9c:d6:29:38:64:d8:af:84:54:99:8c:93:c5:15:
9e:5b:08:ad:4e:88:95:1a:c9:39:35:da:5c:01:af:
37:34:cf:d8:af:6a:47:4f:0d:d3:38:9c:1c:06:0c:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:46:1E:B9:67:42:B6:AB:BC:0A:E0:04:41:58:1D:44:FF:65:3F:34
X509v3 Authority Key Identifier:
keyid:6A:EB:C9:53:81:AF:87:A3:4A:EE:42:E6:85:4C:C6:08:A9:0B:4A:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auvJU4Gvh6NK7kLmhUzGCKkLSsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/PEYeuWdCtqu8CuAEQVgdRP9lPzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/auvJU4Gvh6NK7kLmhUzGCKkLSsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.160.0/21
82.193.96.0/19
91.224.24.0/23
93.188.32.0/21
176.115.96.0/21
185.223.112.0/22
193.0.216.0-193.0.221.255
193.106.136.0/22
195.64.148.0/23
IPv6:
2a02:2610::/32
Signature Algorithm: sha256WithRSAEncryption
5b:ec:da:f4:99:af:c9:d4:c6:ec:ce:df:c3:45:90:d3:b1:cc:
63:e8:cf:01:e2:f0:0a:d4:4a:90:f9:e5:20:93:c9:81:0e:27:
db:d0:94:33:67:35:ba:9c:eb:0d:69:cf:90:bf:4e:1b:f5:78:
d5:57:c6:fc:bd:4f:47:cc:33:ec:76:08:3e:d5:e7:ad:f7:73:
4d:f6:b2:a3:05:68:0c:1a:51:dc:d9:d9:dc:de:0f:9b:81:7e:
2e:9a:b4:17:0d:8d:97:e0:5c:e4:c3:33:2a:93:db:ee:a4:13:
d9:b5:45:a3:be:64:d7:61:c5:44:45:51:fb:1d:c1:22:ef:25:
ac:ff:ea:f4:07:d7:ca:2f:bc:6e:43:04:6d:41:ba:39:a7:83:
44:ad:02:eb:39:b1:64:97:16:1b:2c:f0:ea:13:75:d3:c9:e1:
db:f7:ae:9a:be:6f:0f:17:0f:be:e0:1c:48:77:8b:c4:24:5e:
d8:40:09:b9:a2:6d:2d:30:d4:56:b2:27:f3:9f:fe:d4:32:92:
e1:8b:41:21:c3:96:71:89:6e:d9:3a:f7:f2:e9:45:fa:78:e5:
9a:26:0c:17:eb:d4:ec:1d:dd:69:33:be:37:27:7d:4c:ac:03:
80:9f:9a:52:a7:ae:9b:b1:32:3d:65:d4:3f:8f:06:34:d9:cd:
95:36:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:36 2024 by rpki-client on console-ams.rpki-client.org