Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/bP6K8yyA_bgCVKE6rWauv3shjUY.roa
File: bP6K8yyA_bgCVKE6rWauv3shjUY.roa (raw, json)
Hash identifier: H0ScgWMJaW5mkQeoXP7V0bn+bq8IkyLCoYTNxpxNIbg=
Subject key identifier: 6C:FE:8A:F3:2C:80:FD:B8:02:54:A1:3A:AD:66:AE:BF:7B:21:8D:46
Certificate issuer: /CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Certificate serial: 04C98036
Authority key identifier: 24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/bP6K8yyA_bgCVKE6rWauv3shjUY.roa
Signing time: Thu 12 May 2022 08:32:02 +0000
ROA not before: Thu 12 May 2022 08:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.210.88.0/22 maxlen: 24
185.216.168.0/22 maxlen: 24
185.165.4.0/22 maxlen: 24
194.35.88.0/22 maxlen: 24
109.107.96.0/19 maxlen: 24
185.235.100.0/22 maxlen: 24
185.96.24.0/22 maxlen: 24
185.214.12.0/22 maxlen: 24
185.210.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80314422 (0x4c98036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Validity
Not Before: May 12 08:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cfe8af32c80fdb80254a13aad66aebf7b218d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:41:a9:67:58:18:7e:c8:6c:f7:e4:2c:33:
a4:ae:b8:55:3d:1f:4c:89:ea:10:dd:f7:ba:15:79:
88:a6:52:96:d7:4c:0a:b7:d6:f9:24:a9:93:68:4a:
5d:1c:ba:61:5c:33:b0:1e:e8:0a:a2:bc:17:8a:bb:
8c:f8:1e:da:57:c1:9c:b6:d0:3f:d5:55:8b:97:34:
40:66:a6:e9:4e:b2:c4:12:ac:13:4c:fd:28:20:e9:
ce:7f:2f:e4:da:66:8b:fd:c9:3c:25:f5:8f:4a:cc:
a1:fe:c2:04:d2:c5:a4:51:b7:37:1c:06:f3:77:48:
16:fe:8a:05:b5:a8:44:e4:dd:0c:85:73:9e:66:4b:
df:67:0d:09:20:46:13:b6:31:d8:f4:ff:04:83:fd:
e2:28:af:a6:99:02:7e:b2:5d:a2:74:8e:27:f1:30:
62:ac:2a:04:31:4e:0a:ab:82:2c:00:11:fb:78:a5:
00:2a:bd:6c:5e:cc:77:63:9d:e6:c6:3f:4e:de:6f:
b5:74:5e:d5:82:c9:61:76:3b:0d:de:c4:d2:38:71:
63:85:67:81:5a:97:b1:10:3d:39:c4:35:02:50:3f:
19:bb:e7:91:0e:58:19:89:1b:6b:3f:8e:07:d1:20:
6e:9d:a7:9f:af:5c:5e:32:d1:b3:a8:99:e7:23:34:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FE:8A:F3:2C:80:FD:B8:02:54:A1:3A:AD:66:AE:BF:7B:21:8D:46
X509v3 Authority Key Identifier:
keyid:24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/bP6K8yyA_bgCVKE6rWauv3shjUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.96.0/19
185.96.24.0/22
185.165.4.0/22
185.210.88.0/22
185.210.184.0/22
185.214.12.0/22
185.216.168.0/22
185.235.100.0/22
194.35.88.0/22
Signature Algorithm: sha256WithRSAEncryption
69:08:91:7c:6a:cf:3f:e5:0c:09:1d:bf:08:ac:36:09:8e:e7:
4c:05:ef:7f:1e:61:5c:ae:b4:b0:55:56:f4:a3:3f:f1:6f:6a:
08:1a:40:4f:25:bd:8f:d1:73:9e:c3:62:ce:4c:6c:6b:d1:c2:
d5:b9:e8:61:f8:dd:a8:37:30:0a:1f:46:d2:ec:4a:7b:9c:3a:
de:8c:6a:02:e0:e0:75:83:5b:58:69:3b:2a:19:48:02:94:1c:
10:51:1a:74:32:48:ee:2f:d2:e4:e9:6d:a2:f1:e2:b0:70:53:
04:05:b4:2d:8f:9f:27:3f:62:4a:da:58:51:06:74:0a:a5:25:
d3:6a:2b:de:1e:48:f1:c5:52:6c:4c:0e:66:28:1b:39:aa:cf:
1d:df:bc:6c:12:53:ea:3d:f8:a1:28:32:7c:13:7f:d1:2f:11:
bf:14:ef:f5:5c:c2:43:d0:12:5a:73:20:70:d6:fc:70:f7:bd:
16:a0:69:81:12:70:de:5d:ff:fb:c8:af:fd:d8:10:01:ba:59:
3e:84:96:46:c8:d9:19:0e:1a:51:b5:07:0b:dd:72:f0:c0:78:
dd:6c:e7:ca:e7:06:b8:66:30:fa:7f:c0:0e:41:39:e5:0a:57:
f7:46:c6:da:44:fb:cc:8a:88:5a:c8:c8:37:b7:72:2c:79:99:
40:1b:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org