Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/Hfmg77xhwB5TYnVBZ8CuOk63N1k.roa
File: Hfmg77xhwB5TYnVBZ8CuOk63N1k.roa (raw, json)
Hash identifier: frM7ULRuOWTHOTUfTEmJZEGzL0FF8kTWcwU7gQVbp/c=
Subject key identifier: 1D:F9:A0:EF:BC:61:C0:1E:53:62:75:41:67:C0:AE:3A:4E:B7:37:59
Certificate issuer: /CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
Certificate serial: 1CA3D599
Authority key identifier: 27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/Hfmg77xhwB5TYnVBZ8CuOk63N1k.roa
Signing time: Sat 01 Jan 2022 04:03:34 +0000
ROA not before: Sat 01 Jan 2022 04:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34594
IP address blocks: 89.201.128.0/20 maxlen: 20
89.201.128.0/17 maxlen: 19
89.201.144.0/20 maxlen: 20
89.201.160.0/20 maxlen: 20
80.80.48.0/20 maxlen: 24
80.80.50.0/24 maxlen: 24
176.222.32.0/20 maxlen: 21
5.43.160.0/19 maxlen: 19
5.43.160.0/20 maxlen: 20
5.43.160.0/21 maxlen: 21
89.201.240.0/20 maxlen: 20
37.60.128.0/21 maxlen: 21
5.43.168.0/21 maxlen: 21
5.43.176.0/21 maxlen: 21
37.205.96.0/20 maxlen: 20
5.43.176.0/20 maxlen: 20
5.43.184.0/21 maxlen: 21
95.178.128.0/20 maxlen: 20
95.178.128.0/17 maxlen: 19
89.201.175.0/24 maxlen: 24
89.201.176.0/20 maxlen: 20
85.114.32.0/19 maxlen: 24
85.114.32.0/20 maxlen: 20
89.201.192.0/20 maxlen: 20
85.114.41.0/24 maxlen: 24
85.114.48.0/20 maxlen: 20
89.201.208.0/20 maxlen: 20
185.18.60.0/22 maxlen: 22
185.18.61.0/24 maxlen: 24
185.18.62.0/24 maxlen: 24
185.18.63.0/24 maxlen: 24
185.18.60.0/24 maxlen: 24
89.201.224.0/20 maxlen: 20
95.178.192.0/20 maxlen: 20
151.252.224.0/19 maxlen: 20
95.178.208.0/20 maxlen: 20
95.178.224.0/20 maxlen: 20
95.178.160.0/20 maxlen: 20
89.17.0.0/19 maxlen: 22
95.178.176.0/20 maxlen: 20
89.17.4.0/22 maxlen: 22
151.252.208.0/21 maxlen: 22
5.39.128.0/19 maxlen: 19
95.178.240.0/20 maxlen: 20
2a03:6100::/32 maxlen: 48
2a02:ac8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480499097 (0x1ca3d599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27aaf3bf54aff86f1fa86b643301e915ce8a8acf
Validity
Not Before: Jan 1 04:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1df9a0efbc61c01e5362754167c0ae3a4eb73759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:71:34:54:a1:84:f9:c5:ce:b2:28:e5:dd:
13:f9:c8:bd:0e:86:81:6d:4c:3d:84:75:e6:ed:30:
3b:19:99:aa:c8:10:03:5e:4b:25:21:26:18:16:d2:
fc:56:c8:d1:25:e3:23:2e:cf:ff:d7:3a:b8:40:42:
04:ac:79:0b:de:03:c6:ed:b0:83:f5:10:a7:99:80:
f6:3f:ef:dc:30:8c:a3:16:9b:12:8e:b1:13:91:82:
e0:29:cc:29:00:1e:0d:e3:f0:d7:50:6b:8f:6f:e2:
06:57:28:0a:73:5e:d2:eb:97:f6:ee:4c:93:cb:78:
64:fe:37:73:4a:66:9a:17:7e:93:7e:9a:e9:8a:b7:
7c:2b:a3:fe:57:ed:3c:d5:dc:60:54:67:40:e4:f4:
99:1c:2b:bf:d9:74:80:43:81:e8:cb:6e:ff:84:a2:
73:4e:00:56:72:27:08:e9:03:e3:fc:46:e2:ba:11:
43:23:56:f8:ea:2c:1d:bd:1e:3c:97:ad:de:89:5b:
e8:c9:14:58:a2:7d:ae:04:84:ab:35:13:03:f6:9b:
6a:c0:86:90:15:94:3f:e6:5a:e9:f1:52:56:45:03:
cc:55:ad:d2:d9:18:ea:77:cf:d6:5c:a8:7b:1c:0e:
91:16:d3:bb:19:44:0c:db:f7:c8:58:0e:70:d6:9d:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:A0:EF:BC:61:C0:1E:53:62:75:41:67:C0:AE:3A:4E:B7:37:59
X509v3 Authority Key Identifier:
keyid:27:AA:F3:BF:54:AF:F8:6F:1F:A8:6B:64:33:01:E9:15:CE:8A:8A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/Hfmg77xhwB5TYnVBZ8CuOk63N1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd5b66-a44c-4f56-a35c-ab641c8db332/1/J6rzv1Sv-G8fqGtkMwHpFc6Kis8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.128.0/19
5.43.160.0/19
37.60.128.0/21
37.205.96.0/20
80.80.48.0/20
85.114.32.0/19
89.17.0.0/19
89.201.128.0/17
95.178.128.0/17
151.252.208.0/21
151.252.224.0/19
176.222.32.0/20
185.18.60.0/22
IPv6:
2a02:ac8::/32
2a03:6100::/32
Signature Algorithm: sha256WithRSAEncryption
05:5a:88:b2:d8:1e:06:82:94:12:66:f2:c9:61:45:b6:e2:2b:
67:aa:f3:71:bb:06:52:bc:ee:3b:4e:7d:d1:b3:ad:6c:d0:0f:
99:6a:73:40:51:03:d6:b7:88:ff:b0:37:d9:8b:63:98:ea:b4:
5b:75:63:1e:a4:69:32:b1:4f:93:93:a0:74:2a:5f:71:f9:35:
9a:da:dd:21:32:af:03:21:c6:e2:fd:07:e6:75:f7:3d:35:12:
9a:40:b1:f3:83:05:64:36:dc:46:0f:87:d6:49:3e:13:ef:e8:
07:c5:44:73:c7:ca:33:ca:49:ca:e3:c7:d2:6d:03:ee:da:60:
d0:2a:93:4b:e9:d2:db:76:4a:4b:85:40:22:2e:c2:08:6c:18:
e9:c3:71:65:0f:ce:6a:58:9e:8e:98:e6:d5:9c:e9:8c:71:01:
79:c8:60:e8:02:ec:a4:0d:f4:af:fd:09:fc:a6:1b:68:d4:20:
22:74:00:c8:ff:f7:fe:43:81:d5:7d:64:ed:3e:19:dd:fa:df:
fb:92:08:cb:1c:6b:f1:32:c8:f2:d1:48:55:b5:c1:55:97:25:
10:8b:84:91:38:1a:eb:e2:25:ce:86:42:53:73:14:7e:be:76:
44:89:be:db:a6:c4:30:3b:3a:96:73:0c:ec:17:10:a2:4d:10:
84:5d:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:45 2024 by rpki-client on console-fra.rpki-client.org