Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/cfuK2xjNxReWxqoBU3P7HDO0Cmk.roa
File: cfuK2xjNxReWxqoBU3P7HDO0Cmk.roa (raw, json)
Hash identifier: 4Cf+s0AjPkvEEsfSm/x0Kz2ZIbdQmaQBMr3zmCJfXRc=
Subject key identifier: 71:FB:8A:DB:18:CD:C5:17:96:C6:AA:01:53:73:FB:1C:33:B4:0A:69
Certificate issuer: /CN=a28815e43926af7eb961de7b703aed6328953e30
Certificate serial: 018A830DC567FF79496EDE7500226DBADBC7
Authority key identifier: A2:88:15:E4:39:26:AF:7E:B9:61:DE:7B:70:3A:ED:63:28:95:3E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oogV5Dkmr365Yd57cDrtYyiVPjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/cfuK2xjNxReWxqoBU3P7HDO0Cmk.roa
Signing time: Mon 11 Sep 2023 07:03:52 +0000
ROA not before: Mon 11 Sep 2023 07:03:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35625
IP address blocks: 195.90.116.0/22 maxlen: 22
94.158.180.0/22 maxlen: 22
109.197.240.0/21 maxlen: 21
185.39.168.0/22 maxlen: 22
195.190.27.0/24 maxlen: 24
45.15.204.0/22 maxlen: 22
91.212.236.0/24 maxlen: 24
185.218.212.0/22 maxlen: 22
185.181.4.0/22 maxlen: 22
185.31.148.0/22 maxlen: 22
91.229.136.0/24 maxlen: 24
2a00:ba60::/32 maxlen: 32
2a00:ba60::/31 maxlen: 31
2a00:ba62::/32 maxlen: 32
2a00:ba61::/32 maxlen: 32
2a00:ba67::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:0d:c5:67:ff:79:49:6e:de:75:00:22:6d:ba:db:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a28815e43926af7eb961de7b703aed6328953e30
Validity
Not Before: Sep 11 07:03:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71fb8adb18cdc51796c6aa015373fb1c33b40a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:14:e9:a0:b7:06:37:37:05:fc:52:c6:e5:
f2:5f:47:d2:4e:5f:b1:dd:fd:bd:51:6a:66:b5:64:
b0:00:3f:b7:06:96:df:bc:d2:8c:97:43:57:ca:13:
63:2c:90:9a:dc:fd:29:72:fb:01:b3:40:cf:b3:bd:
e8:01:08:21:13:8a:18:46:d8:8c:ab:1c:37:7f:64:
8d:93:70:2a:1a:cf:f9:a9:29:25:af:4a:86:79:09:
44:c4:47:34:b0:45:6d:9f:e0:92:36:4a:2a:ee:3e:
bb:18:dc:3f:46:ea:99:7b:39:b4:40:bf:91:0c:93:
63:f0:71:93:d0:e8:8c:5b:91:ca:4c:0f:32:1b:61:
5e:80:47:46:c8:e8:d3:aa:06:4a:fc:76:a8:38:50:
d4:6d:cc:08:34:e7:15:2e:1e:61:45:ff:76:df:e0:
52:c9:c2:58:71:9b:57:5c:f7:ab:c6:25:1b:30:af:
03:a8:d3:85:69:44:95:c6:af:71:09:81:59:b8:58:
bd:69:c7:2b:b6:55:86:40:8a:ff:29:ad:b1:7e:3f:
8b:6d:20:f5:8a:fd:ef:95:ee:70:49:a8:4d:17:ac:
d5:bd:56:8f:f6:94:47:90:97:ad:bd:b6:b4:8d:d1:
8d:c4:84:e4:0b:7d:02:e2:bb:a8:d4:62:af:af:3d:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:8A:DB:18:CD:C5:17:96:C6:AA:01:53:73:FB:1C:33:B4:0A:69
X509v3 Authority Key Identifier:
keyid:A2:88:15:E4:39:26:AF:7E:B9:61:DE:7B:70:3A:ED:63:28:95:3E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oogV5Dkmr365Yd57cDrtYyiVPjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/cfuK2xjNxReWxqoBU3P7HDO0Cmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/oogV5Dkmr365Yd57cDrtYyiVPjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.204.0/22
91.212.236.0/24
91.229.136.0/24
94.158.180.0/22
109.197.240.0/21
185.31.148.0/22
185.39.168.0/22
185.181.4.0/22
185.218.212.0/22
195.90.116.0/22
195.190.27.0/24
IPv6:
2a00:ba60::-2a00:ba62:ffff:ffff:ffff:ffff:ffff:ffff
2a00:ba67::/32
Signature Algorithm: sha256WithRSAEncryption
5c:64:28:99:aa:47:a0:f8:ae:71:6d:18:59:49:48:16:2d:d9:
5e:bb:17:b2:2c:99:a8:22:8c:2c:27:19:91:40:85:5f:6b:57:
53:39:4a:ef:27:49:a2:6d:3c:89:3b:e8:6d:8e:75:f2:26:11:
48:19:57:c7:57:72:23:d2:41:6e:c7:19:f9:09:c3:3b:93:93:
b2:99:b7:f7:74:b5:1a:08:98:00:a1:5c:ee:6b:c2:b0:d5:c1:
14:70:5b:4b:dc:06:2e:9b:8c:2c:fb:cf:4a:f8:e0:ac:3b:4f:
84:92:2e:26:aa:85:6c:a5:68:dd:82:e3:b6:9e:45:03:2e:d4:
33:a5:e1:9a:30:78:89:95:8e:a1:63:45:7b:35:65:a0:f1:3a:
c3:66:09:22:15:f1:da:76:fd:ec:d7:b4:ad:67:b1:fa:b7:6a:
58:10:fd:8b:0a:d0:6c:5d:d2:a4:0f:6b:15:37:b4:e2:34:f7:
98:fb:e9:c7:37:6b:aa:54:85:89:86:0b:d9:13:ec:fb:79:66:
3a:20:0b:e0:ea:1f:2e:17:51:7d:31:06:19:9f:65:58:b8:e9:
32:f4:07:d1:33:97:08:c2:2d:26:95:5c:48:b3:32:44:85:c6:
d0:e0:99:7b:9c:cc:8a:54:4f:cc:6e:02:60:00:41:6e:ac:4d:
17:d0:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:46 2024 by rpki-client on console-fra.rpki-client.org