Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/18827e-df6b-41fa-bd10-16260a49ce69/1/xD1jBXxaIlhSLEkQLFdy88-fCTE.roa
File: xD1jBXxaIlhSLEkQLFdy88-fCTE.roa (raw, json)
Hash identifier: MX50SHd11e0jaKmJagQ5TRb68Mm2kmtOeqI+ED2czRI=
Subject key identifier: C4:3D:63:05:7C:5A:22:58:52:2C:49:10:2C:57:72:F3:CF:9F:09:31
Certificate issuer: /CN=aec7aced79c7d7c19cd3a82762e2696cfd2e9f3f
Certificate serial: 02EF9CF6
Authority key identifier: AE:C7:AC:ED:79:C7:D7:C1:9C:D3:A8:27:62:E2:69:6C:FD:2E:9F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rses7XnH18Gc06gnYuJpbP0unz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/18827e-df6b-41fa-bd10-16260a49ce69/1/xD1jBXxaIlhSLEkQLFdy88-fCTE.roa
Signing time: Sat 01 Jan 2022 03:55:05 +0000
ROA not before: Sat 01 Jan 2022 03:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15594
IP address blocks: 217.116.112.0/20 maxlen: 25
212.9.32.0/19 maxlen: 25
217.10.64.0/20 maxlen: 25
82.116.96.0/19 maxlen: 25
95.174.128.0/19 maxlen: 25
2001:ab0::/29 maxlen: 48
2001:ab7:f000::/36 maxlen: 49
2001:ab7:2000::/36 maxlen: 49
2001:ab7::/36 maxlen: 49
2001:ab7:1000::/36 maxlen: 49
2001:ab7:3000::/36 maxlen: 49
2001:ab0::/36 maxlen: 49
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49257718 (0x2ef9cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec7aced79c7d7c19cd3a82762e2696cfd2e9f3f
Validity
Not Before: Jan 1 03:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c43d63057c5a2258522c49102c5772f3cf9f0931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:32:e3:96:db:71:e6:10:d4:89:2b:88:d4:
2b:50:dc:85:5d:b6:dc:eb:ad:24:92:e0:66:af:95:
01:19:dd:2f:6e:e4:f0:ac:8b:dc:4d:0e:58:4d:ab:
e5:7e:ac:88:15:4c:e2:7a:88:3c:98:48:d5:47:c8:
c0:8f:6e:27:31:24:b2:ce:93:10:03:4b:b5:f2:69:
e4:e7:a3:23:45:4f:d5:59:69:7d:9d:ea:2f:58:69:
04:c3:64:7c:be:aa:7a:84:4f:c2:3e:f8:f9:03:c7:
a0:07:42:e7:ba:be:5e:08:9d:e8:6d:6e:3d:7a:1a:
09:8f:43:df:13:60:f4:55:80:76:89:e7:71:e8:38:
0b:12:18:61:22:e8:f1:44:7d:f5:86:d5:92:b2:32:
2f:a1:67:49:41:ae:4f:54:3f:4e:af:36:c2:60:4a:
28:53:59:74:74:5d:4e:aa:18:54:33:a5:5d:97:06:
ae:69:dc:c3:74:dc:69:09:cf:a1:e1:bf:09:2e:a1:
b5:49:de:7b:8b:09:0f:79:d7:c9:0a:27:59:de:f4:
ee:17:77:c1:a0:56:d4:91:69:66:2d:ea:37:a4:7c:
79:97:b2:81:20:c8:ec:03:1e:9c:eb:bb:97:77:72:
86:94:9b:bf:a9:b0:c5:62:48:dd:31:bb:9b:3a:19:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3D:63:05:7C:5A:22:58:52:2C:49:10:2C:57:72:F3:CF:9F:09:31
X509v3 Authority Key Identifier:
keyid:AE:C7:AC:ED:79:C7:D7:C1:9C:D3:A8:27:62:E2:69:6C:FD:2E:9F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rses7XnH18Gc06gnYuJpbP0unz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/18827e-df6b-41fa-bd10-16260a49ce69/1/xD1jBXxaIlhSLEkQLFdy88-fCTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/18827e-df6b-41fa-bd10-16260a49ce69/1/rses7XnH18Gc06gnYuJpbP0unz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.96.0/19
95.174.128.0/19
212.9.32.0/19
217.10.64.0/20
217.116.112.0/20
IPv6:
2001:ab0::/29
Signature Algorithm: sha256WithRSAEncryption
20:35:20:50:3e:96:f7:7c:2c:83:8a:b7:3a:86:de:96:e4:4f:
f0:ba:af:51:24:28:3e:85:04:56:da:d3:f5:72:97:ba:2b:bd:
5c:7f:74:e4:0d:c2:3d:e0:21:90:24:34:0f:2e:48:a5:e1:c4:
fb:1b:1f:1d:bf:89:89:43:f0:87:50:26:9f:57:8f:ba:20:1f:
8c:18:44:27:81:fe:d6:f2:2c:6f:82:f5:04:f4:75:ba:df:8c:
cd:b5:b7:7f:48:09:44:8a:2f:1e:b5:14:ae:2e:79:f4:f0:92:
1d:59:29:da:b8:cb:d5:33:81:64:78:81:a4:4e:d5:76:59:7a:
f9:ff:46:4f:2b:a1:b6:5f:35:ae:98:34:0c:d7:2b:61:17:c1:
2d:56:ec:f2:7a:65:89:2f:0b:fc:47:72:34:32:d1:4c:fe:bf:
03:90:02:87:c9:bd:3f:18:e7:e0:86:e9:83:d3:64:0b:74:93:
0e:c5:68:0f:8c:72:49:09:1e:e1:dc:74:b9:7d:c7:37:c5:85:
4c:30:cc:fd:64:e6:be:e4:ed:cf:7e:52:e4:01:9c:26:fc:00:
73:bd:08:c9:b5:51:ae:15:87:c2:a6:ab:7c:16:00:90:36:d4:
9e:b1:f9:5b:00:57:53:d5:7f:59:f4:2b:08:c5:be:50:bf:9d:
dc:6a:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:15 2024 by rpki-client on console-fra.rpki-client.org