Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/1-sYKmZAlcNA9FDbBZmP6l6MIugI.roa
File: 1-sYKmZAlcNA9FDbBZmP6l6MIugI.roa (raw, json)
Hash identifier: e0eCvav/vYuZQACZ4b76P9vBqnx6ZFLG2eSR1KL2QF8=
Subject key identifier: FA:C6:0A:99:90:25:70:D0:3D:14:36:C1:66:63:FA:97:A3:08:BA:02
Certificate issuer: /CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
Certificate serial: 01842538D0262FA5233B1CD1C329ADF2DFC3
Authority key identifier: 27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/1-sYKmZAlcNA9FDbBZmP6l6MIugI.roa
Signing time: Sat 29 Oct 2022 19:29:51 +0000
ROA not before: Sat 29 Oct 2022 19:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34594
IP address blocks: 89.201.128.0/20 maxlen: 20
89.201.128.0/17 maxlen: 19
89.201.144.0/20 maxlen: 20
89.201.160.0/20 maxlen: 20
80.80.48.0/20 maxlen: 24
80.80.50.0/24 maxlen: 24
176.222.32.0/20 maxlen: 21
5.43.160.0/19 maxlen: 19
5.43.160.0/21 maxlen: 21
5.43.160.0/20 maxlen: 20
89.201.240.0/20 maxlen: 20
37.60.128.0/21 maxlen: 21
5.43.168.0/21 maxlen: 21
5.43.176.0/21 maxlen: 21
37.205.96.0/20 maxlen: 20
5.43.176.0/20 maxlen: 20
5.43.184.0/21 maxlen: 21
95.178.128.0/20 maxlen: 20
95.178.128.0/17 maxlen: 19
89.201.175.0/24 maxlen: 24
89.201.176.0/20 maxlen: 20
85.114.32.0/19 maxlen: 24
85.114.32.0/20 maxlen: 20
89.201.192.0/20 maxlen: 20
85.114.41.0/24 maxlen: 24
85.114.48.0/20 maxlen: 20
89.201.208.0/20 maxlen: 20
185.18.60.0/22 maxlen: 22
185.18.61.0/24 maxlen: 24
185.18.62.0/24 maxlen: 24
185.18.63.0/24 maxlen: 24
185.18.60.0/24 maxlen: 24
89.201.224.0/20 maxlen: 20
95.178.192.0/20 maxlen: 20
151.252.224.0/19 maxlen: 20
95.178.208.0/20 maxlen: 20
95.178.224.0/20 maxlen: 20
185.10.40.0/22 maxlen: 22
95.178.160.0/20 maxlen: 20
95.178.176.0/20 maxlen: 20
89.17.0.0/19 maxlen: 22
89.17.4.0/22 maxlen: 22
151.252.208.0/21 maxlen: 22
5.39.128.0/19 maxlen: 19
95.178.240.0/20 maxlen: 20
2a03:6100::/32 maxlen: 48
2a02:ac8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:25:38:d0:26:2f:a5:23:3b:1c:d1:c3:29:ad:f2:df:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
Validity
Not Before: Oct 29 19:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fac60a99902570d03d1436c16663fa97a308ba02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:55:cb:bc:81:06:36:6e:3e:36:03:8e:25:
7b:f1:21:6c:86:0d:46:da:27:b9:f1:3a:fb:bd:55:
42:c3:49:2d:cb:5b:1d:39:84:aa:12:a8:ac:26:05:
b5:bf:36:4b:0b:a7:eb:94:40:4d:a3:27:57:0a:c6:
26:db:a1:1d:ed:35:3a:04:78:68:48:6c:da:8c:e2:
01:4a:3e:96:1c:66:f4:26:a8:cb:54:31:3f:67:f4:
9a:95:7e:2c:9a:3c:e4:cf:21:fd:17:91:d9:f5:8c:
4a:24:aa:59:7c:1d:c5:fe:ac:f5:84:d0:5b:2a:15:
ae:03:3e:85:7c:1c:d6:0c:74:31:0c:75:41:4e:d9:
ab:0d:04:91:56:62:74:db:69:b8:40:c1:3c:ea:58:
1e:4b:5a:da:71:5e:c8:83:47:33:01:ab:1b:7f:ce:
ce:ae:20:48:da:2a:0a:e0:50:a8:12:ab:5d:1a:50:
76:70:ec:b5:60:18:45:d5:1d:48:57:9e:09:34:06:
6c:67:bc:b9:66:8d:83:83:02:19:15:26:27:e5:46:
46:92:d1:e0:ed:47:55:60:f2:c5:aa:27:ef:de:a3:
63:c2:68:31:6c:76:91:74:ee:43:4d:e7:c5:6d:e4:
c7:f3:4b:2a:2c:2c:d0:57:45:ae:86:be:f2:fe:75:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C6:0A:99:90:25:70:D0:3D:14:36:C1:66:63:FA:97:A3:08:BA:02
X509v3 Authority Key Identifier:
keyid:27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/1-sYKmZAlcNA9FDbBZmP6l6MIugI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.128.0/19
5.43.160.0/19
37.60.128.0/21
37.205.96.0/20
80.80.48.0/20
85.114.32.0/19
89.17.0.0/19
89.201.128.0/17
95.178.128.0/17
151.252.208.0/21
151.252.224.0/19
176.222.32.0/20
185.10.40.0/22
185.18.60.0/22
IPv6:
2a02:ac8::/32
2a03:6100::/32
Signature Algorithm: sha256WithRSAEncryption
6d:4d:d3:ad:8a:d0:bb:3b:e7:c4:4e:3a:c9:cb:b6:b9:8c:73:
c1:e2:81:8e:ad:05:6b:bf:e9:ee:54:ea:35:d9:e4:54:88:99:
93:48:a2:f5:55:1d:10:84:d8:f3:47:0a:10:f4:b5:aa:c6:5e:
33:3d:b7:78:37:b8:d9:d2:15:2b:b4:3f:1d:84:fa:93:81:c9:
3b:bf:59:23:7d:db:54:08:97:45:57:16:21:a5:57:aa:f9:b3:
de:0b:ee:31:3a:e9:e7:b8:a0:b2:23:86:86:77:c0:80:7c:14:
df:f8:6c:c6:63:59:cc:58:45:3c:b9:89:25:ee:4f:61:e4:6e:
c1:5a:9f:ec:db:03:ac:cc:e5:f6:d1:54:84:13:63:47:19:69:
a2:cd:37:06:78:0c:4c:d5:a9:4c:1e:0b:02:dc:99:54:f7:24:
cc:ff:13:ea:da:62:97:6c:5e:4d:69:d0:41:79:af:f8:ff:b0:
6d:9b:28:88:9f:6b:3a:d9:9f:6e:c0:ef:5b:2b:80:fe:b8:06:
48:04:3d:ad:6b:14:23:49:a6:7a:75:05:a8:d7:8b:40:cb:9c:
2e:d5:f5:f0:f3:7e:dc:92:3e:34:85:c4:af:1d:0c:88:12:17:
08:0a:77:64:45:fc:11:ce:e3:bd:5f:b6:e6:68:5c:96:8e:48:
c3:93:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:31 2024 by rpki-client on console-ams.rpki-client.org