Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/xeWqLQWdMa3nVNh-dR7d3BA3HsU.roa
File: xeWqLQWdMa3nVNh-dR7d3BA3HsU.roa (raw, json)
Hash identifier: fLtD4ELSuzvuOUAdn2xxAlbIDNwfi4tf3moABoOjKSo=
Subject key identifier: C5:E5:AA:2D:05:9D:31:AD:E7:54:D8:7E:75:1E:DD:DC:10:37:1E:C5
Certificate issuer: /CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Certificate serial: 018CC64B324BBB9C7350D0D9872CC6D6E480
Authority key identifier: 7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/xeWqLQWdMa3nVNh-dR7d3BA3HsU.roa
Signing time: Mon 01 Jan 2024 18:31:06 +0000
ROA not before: Mon 01 Jan 2024 18:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47110
IP address blocks: 185.10.84.0/22 maxlen: 22
212.6.38.0/24 maxlen: 24
77.223.216.0/21 maxlen: 21
92.62.124.0/22 maxlen: 22
2a03:5e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:32:4b:bb:9c:73:50:d0:d9:87:2c:c6:d6:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Validity
Not Before: Jan 1 18:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5e5aa2d059d31ade754d87e751edddc10371ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:a5:d2:73:29:b8:40:13:f5:72:ff:36:48:
58:12:6a:9c:a1:dd:66:77:ad:0e:8b:b2:28:cc:68:
d8:ef:98:6f:88:b0:3f:5f:68:56:1f:10:36:67:20:
36:c2:75:c7:ff:98:60:47:df:5d:0d:ae:a9:f4:b6:
20:69:aa:e5:02:3a:fe:0d:e2:ce:f8:34:30:f8:53:
10:00:80:08:67:31:ab:33:ca:9e:3b:02:7b:1a:62:
25:f2:8e:df:31:77:9d:d2:e1:c1:ec:6c:be:da:10:
4f:00:2f:09:01:b9:b4:b9:85:35:ec:a4:e7:03:29:
4c:d5:54:8e:b1:a6:02:24:b1:c4:78:b1:c4:66:e1:
53:69:d8:9d:84:e4:db:81:e8:ba:35:ca:22:7f:30:
3e:f4:df:48:2e:a6:69:5a:a3:00:47:76:83:7e:06:
0f:9d:3d:44:7b:51:76:05:4f:ee:f3:20:06:db:e1:
13:55:2c:ad:e9:6c:7e:e7:bc:ab:54:6b:54:33:fc:
98:69:8b:95:5d:26:50:86:03:77:ee:c1:4a:3d:57:
58:fb:65:d1:3a:b7:7e:96:d8:28:8b:4a:e5:39:bf:
ed:bf:a8:af:a8:b1:3f:05:ba:d2:ee:39:6f:54:8a:
b0:6b:19:fd:9c:3b:26:6e:52:74:b2:cf:90:ee:10:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:AA:2D:05:9D:31:AD:E7:54:D8:7E:75:1E:DD:DC:10:37:1E:C5
X509v3 Authority Key Identifier:
keyid:7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/xeWqLQWdMa3nVNh-dR7d3BA3HsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/f2W_9k2Kh5d-M02JxOOMDRCVr2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.216.0/21
92.62.124.0/22
185.10.84.0/22
212.6.38.0/24
IPv6:
2a03:5e40::/32
Signature Algorithm: sha256WithRSAEncryption
0a:eb:57:50:b0:ad:3d:ff:11:33:e0:87:66:95:89:c9:de:64:
9a:4c:d6:c0:6a:88:ee:51:40:ef:0d:cb:6d:f8:05:61:16:aa:
75:83:e2:31:30:6b:75:20:39:5f:0e:1f:a0:4d:cd:d3:22:db:
26:03:a7:04:f9:fa:d2:87:a4:e1:b9:7c:f4:ef:8c:ed:2b:6a:
bd:40:1c:96:86:9a:a3:5b:eb:70:3b:77:a3:94:9d:84:1f:68:
3e:d5:11:4e:63:68:2b:15:16:a9:a8:93:01:17:65:ee:08:fb:
d9:9f:ee:b7:bb:e9:9c:41:d6:25:05:a3:11:b1:95:a5:5e:df:
a7:77:2c:00:4d:45:80:1d:f2:6a:71:7b:4c:51:e9:90:18:94:
65:31:03:0a:9c:5c:cc:92:47:19:36:9b:0f:8f:53:29:20:03:
60:f0:b7:e8:d0:4c:e6:48:3a:7f:48:ba:91:be:63:77:01:f5:
a4:5b:f0:f5:0d:12:7f:32:08:a8:42:08:51:4d:78:06:83:fa:
9b:b8:76:d7:e8:9a:fb:52:ed:7b:23:a8:cd:85:4f:4b:13:ea:
a8:d9:84:a0:bb:d8:7f:7d:ef:66:73:1a:db:33:1e:6d:ef:1d:
45:72:ee:a3:07:8f:e6:9a:91:61:db:53:f9:3f:8b:ee:9c:d3:
dc:88:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:21 2024 by rpki-client on console-ams.rpki-client.org