Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/b9Ik_VrH5oX4vk78JMPSmcee438.roa
File: b9Ik_VrH5oX4vk78JMPSmcee438.roa (raw, json)
Hash identifier: LD84nTMpeqR3Iubkr9RF3rJeui7Kwak2qJ6Gb/UMhUU=
Subject key identifier: 6F:D2:24:FD:5A:C7:E6:85:F8:BE:4E:FC:24:C3:D2:99:C7:9E:E3:7F
Certificate issuer: /CN=1746948856a2b0adf304a16d0d3ad66857f7fd39
Certificate serial: 018F7B0D8FC7083E110FF5A5629D6F3A28FB
Authority key identifier: 17:46:94:88:56:A2:B0:AD:F3:04:A1:6D:0D:3A:D6:68:57:F7:FD:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0aUiFaisK3zBKFtDTrWaFf3_Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/b9Ik_VrH5oX4vk78JMPSmcee438.roa
Signing time: Wed 15 May 2024 07:00:37 +0000
ROA not before: Wed 15 May 2024 07:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15699
IP address blocks: 87.236.216.0/21 maxlen: 32
88.151.208.0/21 maxlen: 32
94.24.112.0/20 maxlen: 32
94.24.114.0/24 maxlen: 32
109.235.128.0/21 maxlen: 32
185.11.200.0/22 maxlen: 32
212.36.64.0/19 maxlen: 32
2a01:1c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:0d:8f:c7:08:3e:11:0f:f5:a5:62:9d:6f:3a:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1746948856a2b0adf304a16d0d3ad66857f7fd39
Validity
Not Before: May 15 07:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fd224fd5ac7e685f8be4efc24c3d299c79ee37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:29:00:6b:9d:d3:9e:20:a3:e0:c2:23:46:
ed:59:cd:51:3f:c1:6d:35:c2:95:c9:7e:d1:e6:13:
ee:29:bc:c8:f6:3d:77:f5:e7:87:83:3a:b4:76:31:
f6:18:2d:d9:3d:bc:db:09:e3:9e:2c:fb:28:fb:91:
e9:c5:0a:53:87:7a:36:9a:1f:4a:58:95:25:cb:70:
e9:3f:f4:b4:89:87:de:b4:e8:a0:94:49:90:a3:14:
f5:33:94:39:61:d4:7f:39:8f:18:7f:98:1b:ab:8b:
1c:09:06:48:4f:c5:5d:a9:24:44:f2:c8:ee:14:42:
c5:60:51:c1:81:f8:07:6f:bd:ca:56:43:c1:1f:80:
a3:85:98:37:90:72:2c:ad:23:73:06:50:4e:ec:99:
fc:f8:f5:e0:ad:09:90:57:20:69:82:08:8c:ca:e8:
1a:44:c7:f2:71:dc:c9:49:72:73:20:66:eb:e5:e6:
48:ac:1c:60:90:c2:f6:a9:0e:e1:b5:ba:91:ae:07:
a2:8e:83:66:c7:a9:cf:e5:13:8f:a9:7c:5a:f2:0a:
01:a8:88:27:8b:7b:98:39:f3:d9:ce:87:9d:10:dc:
04:69:f2:02:83:e5:82:11:7d:86:b8:3c:c2:c2:17:
11:5e:db:25:1f:ee:13:90:c3:d2:15:9a:2c:05:89:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D2:24:FD:5A:C7:E6:85:F8:BE:4E:FC:24:C3:D2:99:C7:9E:E3:7F
X509v3 Authority Key Identifier:
keyid:17:46:94:88:56:A2:B0:AD:F3:04:A1:6D:0D:3A:D6:68:57:F7:FD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0aUiFaisK3zBKFtDTrWaFf3_Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/b9Ik_VrH5oX4vk78JMPSmcee438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/F0aUiFaisK3zBKFtDTrWaFf3_Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.216.0/21
88.151.208.0/21
94.24.112.0/20
109.235.128.0/21
185.11.200.0/22
212.36.64.0/19
IPv6:
2a01:1c8::/32
Signature Algorithm: sha256WithRSAEncryption
4e:9a:d3:c3:b5:09:c5:b5:f8:bf:4a:2b:07:a8:d5:3e:ff:09:
8e:30:06:d3:d6:66:ed:81:a5:cc:bf:b8:16:b4:dd:ae:c4:10:
84:ee:5c:ed:76:8e:a2:fe:c4:54:4f:c0:97:c4:58:4b:ee:39:
c5:bb:71:4e:e6:01:a3:31:a8:7f:e8:05:e5:1d:53:1f:9d:1d:
00:63:fe:31:15:30:18:fa:b2:9c:45:c1:76:df:27:9a:a5:8c:
ee:eb:07:b7:08:c7:0f:91:2f:03:fa:d3:46:41:96:56:58:39:
31:8d:34:86:78:7d:00:f3:db:5e:4b:39:8f:f4:4c:b6:6d:e4:
fc:28:a0:dd:9a:4a:65:42:e6:ed:18:15:93:9b:80:45:c4:78:
fc:ed:1a:6c:e7:ff:48:c5:a4:9f:41:89:1f:cb:6b:58:ad:e3:
5b:35:87:70:88:ff:a9:dc:86:d2:f7:b4:0b:96:07:cd:6b:0e:
67:54:86:0f:04:21:6c:1f:f8:eb:60:e3:21:44:9d:2e:86:2c:
25:eb:cf:70:55:4e:0c:df:82:38:65:49:66:c6:4b:67:29:34:
39:46:0c:48:ef:3c:09:7a:42:b7:86:22:4e:55:20:2b:96:c7:
60:32:92:92:6d:f2:38:05:dd:32:5d:d2:8f:06:86:bf:bf:6e:
a0:e0:36:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 09:18:05 2024 by rpki-client on console-fra.rpki-client.org