Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/RndE_JQ12k7lH401aZ9MPUjlaUk.roa
File: RndE_JQ12k7lH401aZ9MPUjlaUk.roa (raw, json)
Hash identifier: M7yQPSICvwc9oi0nQFaN9tfoaCVPUImOyWM3Y2Q0TSg=
Subject key identifier: 46:77:44:FC:94:35:DA:4E:E5:1F:8D:35:69:9F:4C:3D:48:E5:69:49
Certificate issuer: /CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Certificate serial: 05319C0C
Authority key identifier: 74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/RndE_JQ12k7lH401aZ9MPUjlaUk.roa
Signing time: Sat 01 Jan 2022 16:04:55 +0000
ROA not before: Sat 01 Jan 2022 16:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43668
IP address blocks: 185.248.168.0/23 maxlen: 23
185.248.170.0/23 maxlen: 23
94.131.221.0/24 maxlen: 24
2a0b:7fc2::/32 maxlen: 32
2a0b:7fc0::/32 maxlen: 32
2a0b:7fc6::/32 maxlen: 32
2a0b:7fc1::/32 maxlen: 32
2a0b:7fc5::/32 maxlen: 32
2a0b:7fc3::/32 maxlen: 32
2a0b:7fc7::/32 maxlen: 32
2a0b:7fc4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87137292 (0x5319c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Validity
Not Before: Jan 1 16:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=467744fc9435da4ee51f8d35699f4c3d48e56949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:2c:70:43:28:36:b3:0d:5c:24:2f:08:27:
36:a7:23:d6:20:d9:08:18:d6:4c:03:ad:16:c8:c8:
49:99:d6:7e:0a:da:75:a0:bb:68:da:6b:a5:86:26:
e4:8f:74:cd:6b:98:00:34:ad:3e:c0:fa:83:b5:6e:
1a:a8:6d:bd:6e:2d:9e:e4:2e:f2:27:f7:3e:3c:0d:
c8:ac:f0:5f:34:96:5b:87:d9:b2:0c:e3:dd:5c:58:
68:22:f5:41:4a:0c:8f:76:e5:6d:21:63:54:8f:02:
18:af:97:6f:3f:84:3b:e6:77:3d:3e:05:e4:8d:6e:
ed:46:09:c9:81:98:aa:3a:b7:df:6a:3c:37:1d:5a:
87:8b:07:c2:38:34:0b:2f:fc:49:27:56:1f:0b:3e:
bf:3b:93:35:b6:55:8f:91:1d:d5:e1:46:ae:06:78:
3d:e2:3c:3d:59:05:ce:79:58:3f:a7:1c:54:30:2b:
37:68:e9:ae:6d:f5:0f:55:25:3f:af:d2:71:af:ff:
fa:1e:d9:e7:80:37:e0:ee:6c:ad:70:fd:2b:a2:c3:
31:dc:7f:96:65:97:9d:43:4b:2e:af:ca:49:2a:60:
a5:21:88:cc:de:7f:80:46:9a:2c:40:49:04:73:d3:
ea:5d:fd:24:8a:ae:d1:9e:c3:64:1e:be:d2:13:2d:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:44:FC:94:35:DA:4E:E5:1F:8D:35:69:9F:4C:3D:48:E5:69:49
X509v3 Authority Key Identifier:
keyid:74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/RndE_JQ12k7lH401aZ9MPUjlaUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/dMF8P0X8We5mdfEJFOw6nmi3I48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.221.0/24
185.248.168.0/22
IPv6:
2a0b:7fc0::/29
Signature Algorithm: sha256WithRSAEncryption
01:07:e4:49:3d:ee:31:89:b9:c9:68:bb:e6:dc:09:fe:61:25:
08:76:ce:98:f3:8c:c3:94:b2:47:4f:9f:64:30:83:4b:ff:b1:
49:09:e1:24:3f:c5:73:1d:b1:c0:be:06:57:77:f7:5a:2f:1c:
44:9a:27:0c:99:c9:26:89:02:97:9c:e9:27:48:9b:9a:2b:eb:
ae:c1:d0:75:87:a8:d8:c9:82:1e:34:39:dc:ee:a3:05:b6:1d:
75:99:d9:03:fb:92:3a:2b:23:d1:7b:40:c1:da:e1:a8:91:e7:
46:b2:da:4f:5a:92:75:f4:a5:74:c6:09:9d:84:dc:dd:d2:51:
93:6d:6f:e2:21:7e:b3:35:34:ae:ce:d8:7d:42:a4:92:f8:20:
b0:f6:1d:a2:08:b8:7b:31:48:67:c4:08:21:2e:63:a0:cd:e6:
1f:96:6c:73:3c:9f:18:91:e9:ff:70:54:83:63:29:03:b7:7e:
fa:6d:c0:7a:8a:ac:92:97:94:3b:73:f7:7c:8e:a4:23:ae:38:
d1:2d:3e:7a:3d:33:26:4a:e0:4f:fe:b8:48:18:20:4d:51:06:
0a:94:d2:1a:e7:bb:f5:e6:20:2c:f4:10:b9:b0:9d:d1:ec:1e:
b3:db:e3:bb:5a:09:c0:76:84:09:af:0e:58:fa:d7:3b:98:6b:
d9:0e:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:26 2024 by rpki-client on console-fra.rpki-client.org