Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/243855-5321-4ebe-8c77-65e31da1f38f/1/JpE16jgmirkFqlX-0o-3abINC4I.roa
File: JpE16jgmirkFqlX-0o-3abINC4I.roa (raw, json)
Hash identifier: 5VsBajPxKCa8a2mldywzYvcjVG4UcCe32l+RKmyJWEQ=
Subject key identifier: 26:91:35:EA:38:26:8A:B9:05:AA:55:FE:D2:8F:B7:69:B2:0D:0B:82
Certificate issuer: /CN=9509cccc54a60081c0800f6dcc30a5e88bee6fda
Certificate serial: 05E62251
Authority key identifier: 95:09:CC:CC:54:A6:00:81:C0:80:0F:6D:CC:30:A5:E8:8B:EE:6F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQnMzFSmAIHAgA9tzDCl6Ivub9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/243855-5321-4ebe-8c77-65e31da1f38f/1/JpE16jgmirkFqlX-0o-3abINC4I.roa
Signing time: Sat 01 Jan 2022 12:58:33 +0000
ROA not before: Sat 01 Jan 2022 12:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207050
IP address blocks: 185.59.51.0/24 maxlen: 24
185.59.50.0/24 maxlen: 24
185.59.48.0/22 maxlen: 22
185.59.48.0/24 maxlen: 24
185.59.49.0/24 maxlen: 24
193.160.84.0/24 maxlen: 24
92.119.20.0/24 maxlen: 24
92.119.21.0/24 maxlen: 24
79.143.132.0/24 maxlen: 24
79.143.132.0/22 maxlen: 22
92.119.22.0/24 maxlen: 24
79.143.135.0/24 maxlen: 24
185.124.107.0/24 maxlen: 24
185.124.106.0/24 maxlen: 24
185.124.104.0/24 maxlen: 24
185.124.104.0/22 maxlen: 22
185.124.105.0/24 maxlen: 24
2a04:e2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98968145 (0x5e62251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9509cccc54a60081c0800f6dcc30a5e88bee6fda
Validity
Not Before: Jan 1 12:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=269135ea38268ab905aa55fed28fb769b20d0b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:11:8c:e9:89:e5:c1:65:17:15:94:d7:80:
39:53:98:48:9b:b7:ec:1f:47:a9:a2:ca:54:ed:01:
ee:07:a6:28:1b:6b:eb:de:4e:52:c0:a2:f5:6b:81:
9e:97:a2:26:d4:15:b4:fe:26:aa:98:3b:04:ac:a8:
e9:8b:d7:be:0d:fe:0a:56:f7:00:c3:ec:00:02:41:
46:56:1b:25:b9:a6:18:75:1b:bd:df:5c:9c:09:cb:
bc:d5:94:9d:81:0d:a9:80:80:38:78:ee:b5:20:cb:
f7:be:ec:2d:5a:de:fa:a8:0d:d7:95:c0:e7:c2:f6:
fb:a8:62:d7:1a:9a:9b:0d:ef:bf:ed:d6:60:7d:9f:
ae:c5:2d:7d:03:67:cf:05:20:ec:6a:1e:ec:18:f6:
3b:c0:a1:52:25:7c:d7:83:a3:f5:d3:ad:73:d2:1a:
99:30:bb:bb:ea:bb:68:ef:07:f6:f7:87:91:46:0d:
40:1d:e5:bb:4b:66:68:3d:70:d3:e6:a4:95:5a:e7:
6a:81:c0:15:af:5f:cc:0f:8b:cd:97:fd:91:cf:1a:
46:e3:25:9a:fc:37:30:03:28:02:c4:e3:e3:1b:d6:
aa:3a:73:2d:48:e5:eb:a4:ce:0f:f3:50:07:b7:6e:
98:76:79:93:8e:27:82:93:b6:d5:83:05:0f:54:80:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:91:35:EA:38:26:8A:B9:05:AA:55:FE:D2:8F:B7:69:B2:0D:0B:82
X509v3 Authority Key Identifier:
keyid:95:09:CC:CC:54:A6:00:81:C0:80:0F:6D:CC:30:A5:E8:8B:EE:6F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQnMzFSmAIHAgA9tzDCl6Ivub9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/243855-5321-4ebe-8c77-65e31da1f38f/1/JpE16jgmirkFqlX-0o-3abINC4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/243855-5321-4ebe-8c77-65e31da1f38f/1/lQnMzFSmAIHAgA9tzDCl6Ivub9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.132.0/22
92.119.20.0-92.119.22.255
185.59.48.0/22
185.124.104.0/22
193.160.84.0/24
IPv6:
2a04:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:e1:f7:3b:4b:54:70:ce:4d:00:09:20:9d:8c:b4:1b:30:b6:
f0:cc:66:b5:e9:bc:2a:18:8b:48:04:d3:1e:d6:a9:40:17:cf:
a6:e1:b9:80:ed:fd:1e:b3:23:46:fb:0a:7b:d0:88:67:d1:3b:
3d:04:2a:39:29:24:9f:b3:a8:1c:4f:94:cd:6a:0f:0c:82:f7:
6d:57:e2:9c:5b:c1:e1:1f:8a:24:ae:55:40:80:7e:01:c5:12:
28:68:89:7b:87:d1:4c:12:2f:1d:ac:d9:35:14:6d:f3:54:63:
bb:c6:4f:74:eb:be:c9:23:c9:08:ce:93:1f:e8:2e:d5:97:95:
b0:5f:ef:70:bc:eb:3d:5f:59:bb:64:4e:4e:7f:a6:6e:68:e8:
2e:2c:2e:49:cb:95:3a:18:e7:8d:17:0a:56:4f:67:92:b3:fe:
a3:33:c2:87:c4:7a:81:31:09:33:e8:c2:83:5f:0a:29:30:7b:
c7:05:50:27:e8:3e:bb:42:b4:63:fc:85:05:7a:01:1f:56:2d:
64:f8:ee:e7:82:9c:f1:ac:03:cf:ac:16:f4:27:80:bb:08:13:
90:ae:be:2e:c5:6b:f4:7f:8c:8e:40:dd:0a:b7:9c:d0:e3:d6:
ee:f2:fb:8b:dc:c0:b2:ee:65:5e:a3:e0:c7:fa:d2:32:89:a6:
09:6b:10:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:35 2023 by rpki-client on console-ams.rpki-client.org