Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/GfE9WnbgZsDkhluBu5oLhyANlFo.roa
File: GfE9WnbgZsDkhluBu5oLhyANlFo.roa (raw, json)
Hash identifier: kpAMFgjR/nu7hv7zmBZGG+lxd73YBK+Iv+38DipOgj4=
Subject key identifier: 19:F1:3D:5A:76:E0:66:C0:E4:86:5B:81:BB:9A:0B:87:20:0D:94:5A
Certificate issuer: /CN=273c2a39983bcd03551853447847c1e1861ec732
Certificate serial: 01857356104A70F61960DADB716270630B97
Authority key identifier: 27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/GfE9WnbgZsDkhluBu5oLhyANlFo.roa
Signing time: Mon 02 Jan 2023 16:34:58 +0000
ROA not before: Mon 02 Jan 2023 16:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.255.0/24 maxlen: 24
185.171.146.0/24 maxlen: 24
185.171.144.0/23 maxlen: 24
79.106.97.0/24 maxlen: 24
79.106.98.0/24 maxlen: 24
79.106.104.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.100.0/24 maxlen: 24
79.106.101.0/24 maxlen: 24
79.106.99.0/24 maxlen: 24
79.106.109.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.108.0/24 maxlen: 24
79.106.106.0/24 maxlen: 24
79.106.120.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.220.0/24 maxlen: 24
79.106.0.0/21 maxlen: 21
79.106.0.0/16 maxlen: 24
79.106.8.0/21 maxlen: 21
79.106.16.0/23 maxlen: 23
79.106.16.0/20 maxlen: 20
217.24.240.0/22 maxlen: 22
217.24.240.0/21 maxlen: 21
217.24.240.0/20 maxlen: 21
217.24.248.0/21 maxlen: 24
217.24.252.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc0::/29 maxlen: 29
2a05:fdc1::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:10:4a:70:f6:19:60:da:db:71:62:70:63:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=273c2a39983bcd03551853447847c1e1861ec732
Validity
Not Before: Jan 2 16:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f13d5a76e066c0e4865b81bb9a0b87200d945a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:26:af:80:14:57:2f:b5:c2:0a:0c:13:e7:
38:3d:00:f5:6d:87:84:22:e4:59:3f:5f:d8:78:70:
dd:fa:1f:3d:44:53:f3:0e:87:a2:1c:91:84:6e:95:
ff:76:2d:b5:f6:a8:e3:1d:ab:4c:83:d0:e2:7b:49:
a8:65:51:75:26:d1:13:08:34:31:5e:60:f6:85:be:
99:29:95:3d:c7:fa:06:f1:16:95:ed:98:22:d3:99:
d6:e3:0a:04:26:63:a5:93:ce:ec:88:ff:4d:d5:74:
10:1e:78:ad:c5:a9:93:fb:4d:a9:b2:90:4e:3f:6b:
e1:20:c6:4e:f1:fd:52:6a:98:68:26:63:9f:13:57:
b2:e2:ac:79:32:1f:09:4d:81:71:d8:9d:fa:03:c7:
69:57:96:06:cd:e5:b2:80:f7:51:0e:f0:ed:ae:a3:
c1:7c:8b:8e:1a:68:05:ad:b8:55:9a:08:50:a3:1e:
d1:8c:ac:c2:4f:ae:90:36:a6:4e:c2:27:94:92:ac:
f1:9b:f0:a2:a4:c9:bb:71:b1:99:d6:4a:4a:7c:3b:
df:a7:6d:60:1f:4a:bf:14:5d:01:64:58:0f:59:ea:
6a:7e:da:ce:36:ba:18:52:b7:b9:b6:60:47:11:aa:
73:45:40:bc:06:f2:51:3d:5c:07:d4:ef:46:ba:ed:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:3D:5A:76:E0:66:C0:E4:86:5B:81:BB:9A:0B:87:20:0D:94:5A
X509v3 Authority Key Identifier:
keyid:27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/GfE9WnbgZsDkhluBu5oLhyANlFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JzwqOZg7zQNVGFNEeEfB4YYexzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0-185.171.146.255
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
52:bd:ef:08:b0:a6:4a:50:fc:27:40:b3:d2:9a:41:f6:df:1d:
9d:e1:a4:18:73:ae:69:16:72:60:27:6a:e5:d0:54:7f:de:0c:
92:fe:9e:4c:13:70:4b:0d:b9:d0:36:93:f9:aa:4f:2c:df:78:
31:f5:c3:7b:2c:b9:9d:9c:6c:5c:02:3a:0f:73:10:f7:69:71:
a9:ac:48:69:05:11:d3:80:da:89:1b:f1:32:9d:5e:da:6b:82:
c1:17:0c:ba:a1:31:69:11:41:6b:3b:b8:a0:d1:e0:9a:b0:82:
43:ef:0e:fc:3c:85:4a:89:4f:c3:b8:b5:0a:5d:09:b6:64:df:
b1:25:47:9c:76:ea:6a:bb:e2:ec:d2:25:81:03:b6:f7:2a:00:
e8:58:75:af:01:3f:f7:67:f4:a5:62:f3:60:b1:d0:b1:78:0a:
c5:b6:df:7b:38:68:56:8a:4a:e6:d3:f7:2e:79:b9:7a:ef:d1:
2b:ef:4a:03:50:19:03:14:0f:cb:9d:a5:d7:c8:c0:c5:a8:a6:
5b:17:94:c9:0a:fa:83:4d:06:93:93:bb:7a:10:c6:9c:49:36:
50:35:65:7f:29:5d:bc:bf:2d:22:ab:79:16:84:c9:47:d2:fe:
c3:93:62:f4:b8:ff:45:c1:0f:15:c8:fd:34:af:75:c9:db:2b:
3d:c8:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org