Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/YKhcGi_Q6UldaKUz2j7HRjSFTzk.roa
File: YKhcGi_Q6UldaKUz2j7HRjSFTzk.roa (raw, json)
Hash identifier: 5FKte8IXUXHorZjXQFeux917LxzuIx5aYphzJQp5tpw=
Subject key identifier: 60:A8:5C:1A:2F:D0:E9:49:5D:68:A5:33:DA:3E:C7:46:34:85:4F:39
Certificate issuer: /CN=4235d69d8d896faec6e7c2171d30dd09b501a03f
Certificate serial: 1490A27B
Authority key identifier: 42:35:D6:9D:8D:89:6F:AE:C6:E7:C2:17:1D:30:DD:09:B5:01:A0:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjXWnY2Jb67G58IXHTDdCbUBoD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/YKhcGi_Q6UldaKUz2j7HRjSFTzk.roa
Signing time: Sat 01 Jan 2022 05:53:22 +0000
ROA not before: Sat 01 Jan 2022 05:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62388
IP address blocks: 89.46.43.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
188.212.36.0/24 maxlen: 24
89.37.100.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
89.47.37.0/24 maxlen: 24
89.37.232.0/23 maxlen: 23
89.35.112.0/24 maxlen: 24
185.114.52.0/22 maxlen: 22
2a06:7900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345023099 (0x1490a27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4235d69d8d896faec6e7c2171d30dd09b501a03f
Validity
Not Before: Jan 1 05:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60a85c1a2fd0e9495d68a533da3ec74634854f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:1f:53:a3:b6:8d:3c:5b:ef:24:3d:cf:6c:
ee:f4:09:a4:49:5c:3d:7c:5e:b8:e6:c8:ff:1f:84:
bb:b0:07:11:ec:b5:35:13:18:ae:0c:ea:14:89:71:
ed:86:4e:2e:d3:a4:51:ad:2e:63:c9:d7:cf:9e:3b:
24:d4:48:90:9c:da:fa:b7:ca:69:34:c1:e7:18:1c:
15:39:b5:a4:d7:72:58:83:28:e6:89:68:58:0b:f3:
fb:6b:19:30:f1:c5:a8:af:19:4c:b5:5a:51:63:43:
17:f4:63:cd:62:74:5a:96:12:e0:d6:d0:38:27:cd:
d9:40:ee:58:5a:45:98:b1:0d:6e:ef:a0:6a:75:ca:
9a:57:e7:b0:8e:bc:24:7c:11:c6:2b:c1:5d:4d:d2:
56:d4:97:a9:7c:33:fe:c2:11:40:b8:6f:fb:48:75:
df:e2:06:ac:e5:d5:c2:48:c8:3b:41:32:a6:36:c0:
05:ee:85:63:8d:e6:fe:f5:44:ff:29:c6:f3:5f:2f:
49:c0:98:26:c7:80:29:b8:b2:02:b0:f3:c6:b6:fd:
82:48:82:3a:76:70:10:b3:7a:58:4a:56:1a:54:82:
0b:83:5e:c5:91:72:63:11:91:a5:e2:bd:f9:9b:ac:
6c:21:59:df:b3:33:a8:cb:67:21:1c:2c:57:4e:42:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:5C:1A:2F:D0:E9:49:5D:68:A5:33:DA:3E:C7:46:34:85:4F:39
X509v3 Authority Key Identifier:
keyid:42:35:D6:9D:8D:89:6F:AE:C6:E7:C2:17:1D:30:DD:09:B5:01:A0:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjXWnY2Jb67G58IXHTDdCbUBoD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/YKhcGi_Q6UldaKUz2j7HRjSFTzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/QjXWnY2Jb67G58IXHTDdCbUBoD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.112.0/24
89.36.230.0/24
89.37.100.0/24
89.37.232.0/23
89.46.43.0/24
89.47.37.0/24
185.114.52.0/22
188.210.236.0/24
188.212.36.0/24
IPv6:
2a06:7900::/29
Signature Algorithm: sha256WithRSAEncryption
94:ae:87:bc:fd:7a:5f:89:70:0c:62:39:c1:2e:de:83:10:65:
5a:be:b0:75:cf:16:bd:38:a4:9f:d7:b5:a8:b0:27:60:10:e6:
a7:81:09:5f:a2:5e:57:83:53:8e:ec:02:ff:70:07:a6:79:56:
65:2c:e3:56:b2:23:b4:f0:c0:5a:f9:25:5c:16:20:a9:ba:a6:
3b:da:87:dd:4d:72:0f:43:37:37:5d:17:0c:83:17:46:1e:7d:
4b:3d:15:92:56:d2:27:14:88:17:e9:c5:db:4c:53:04:71:53:
fd:55:0f:79:3e:30:f3:99:45:43:b6:12:6b:13:d6:22:fd:58:
cc:82:ec:85:02:f4:05:c3:bd:18:5f:96:91:27:81:cd:e6:7a:
05:2b:a5:9c:71:b8:f5:00:cc:5a:2f:e3:f5:6e:a5:31:db:a6:
ad:bf:64:34:83:eb:6f:1e:38:8c:d4:63:70:83:6e:7b:14:d3:
88:f3:3e:2d:73:c5:d9:ae:03:d3:e0:6a:ee:65:81:f5:5a:6f:
df:06:af:a6:82:4d:08:19:03:34:f5:f2:f9:aa:7d:ed:f4:53:
f8:f7:a4:40:fe:20:31:a6:9b:0e:31:97:e3:99:75:4d:10:c8:
54:04:92:bb:fa:ba:6b:9e:ad:8b:02:14:55:98:e6:cf:d8:b2:
d2:10:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:36 2024 by rpki-client on console-fra.rpki-client.org