Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/_6nfdfi4WxQvNa8fUnsCntQ5SVY.roa
File: _6nfdfi4WxQvNa8fUnsCntQ5SVY.roa (raw, json)
Hash identifier: PYeS1rcdh4O89FCwTGHtTHVnDY64kWhW+VURTyQFc40=
Subject key identifier: FF:A9:DF:75:F8:B8:5B:14:2F:35:AF:1F:52:7B:02:9E:D4:39:49:56
Certificate issuer: /CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Certificate serial: 10E43F47
Authority key identifier: 81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/_6nfdfi4WxQvNa8fUnsCntQ5SVY.roa
Signing time: Sat 01 Jan 2022 07:02:36 +0000
ROA not before: Sat 01 Jan 2022 07:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43402
IP address blocks: 83.142.240.0/21 maxlen: 21
95.131.160.0/21 maxlen: 21
95.131.166.0/24 maxlen: 24
95.131.167.0/24 maxlen: 24
185.127.144.0/22 maxlen: 22
2a03:62c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283393863 (0x10e43f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Validity
Not Before: Jan 1 07:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffa9df75f8b85b142f35af1f527b029ed4394956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:81:ba:35:59:d6:d9:bd:cf:cf:80:74:f9:
43:ff:8a:5b:c2:6e:88:55:41:35:e7:67:b2:cf:48:
8a:ac:d6:fd:ce:27:a1:02:32:db:b6:94:f0:e7:9f:
2e:3b:bd:4e:30:91:07:d3:66:57:45:73:80:ad:84:
09:1c:6d:f8:fd:2a:69:77:eb:a2:60:d9:a3:e1:33:
0e:30:bc:6c:4c:c6:52:d7:b9:20:55:b2:fd:49:b5:
1e:f5:c9:3e:13:1a:55:a0:e4:ef:ad:57:0d:85:07:
49:3d:7b:9e:e9:7a:5e:9b:df:c4:38:6e:cf:08:c4:
f9:91:91:10:e6:aa:e9:57:3b:f7:f8:26:96:82:44:
90:70:30:ac:29:8c:c7:ae:b9:d8:20:ed:2f:ad:c2:
55:f8:ac:88:4d:3a:96:25:e3:34:56:1f:65:be:39:
75:8e:4a:21:e6:93:b6:14:b4:e8:be:c5:4d:aa:4e:
bc:e8:71:6e:99:74:45:e7:0e:43:96:9a:75:09:90:
a5:b5:76:11:63:47:33:0a:93:89:b2:66:54:37:25:
0f:53:d4:9f:ff:3f:99:cf:aa:be:0b:2a:89:2b:7d:
5d:c1:5f:2c:8a:20:fc:52:f1:23:13:5f:4f:7d:36:
00:d1:de:56:e7:88:63:0e:9e:46:1c:0e:60:94:3c:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A9:DF:75:F8:B8:5B:14:2F:35:AF:1F:52:7B:02:9E:D4:39:49:56
X509v3 Authority Key Identifier:
keyid:81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/_6nfdfi4WxQvNa8fUnsCntQ5SVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.240.0/21
95.131.160.0/21
185.127.144.0/22
IPv6:
2a03:62c0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:26:c6:1e:24:da:50:2f:14:f7:57:27:a8:d9:91:28:6f:88:
1f:d1:12:20:76:cd:e4:e5:1a:c1:37:16:58:48:99:74:24:29:
f8:c5:28:f0:20:f6:60:fd:47:ca:5a:29:53:ff:89:79:63:10:
b0:2b:d8:31:d0:ce:3b:9f:81:27:60:51:1e:01:d0:21:1a:c5:
dc:f0:d6:2d:f6:e6:a1:d8:f6:87:f4:e9:5e:8c:ab:9d:64:07:
8f:83:f6:8b:e7:e1:4c:ed:87:09:3a:72:ab:bc:1d:94:e7:d5:
87:5d:b9:0d:f4:73:03:b8:56:33:69:50:68:4d:50:7a:73:a4:
83:ea:f4:51:07:d8:50:13:a5:05:bf:43:2a:46:f8:58:d1:6a:
fe:9c:2f:2e:87:b9:3e:26:4e:50:59:c3:42:fc:c8:3c:d1:c2:
19:44:e3:5e:10:f8:2b:13:9b:d1:1a:1b:2e:83:5b:a4:c0:19:
b5:b3:a0:38:54:4e:b8:f0:35:b9:6d:d8:85:75:da:ef:96:af:
f9:e3:09:29:cc:25:2e:27:68:25:4d:81:d4:36:69:57:c5:ad:
ce:e4:d8:90:36:ab:8b:10:2b:b4:94:53:cc:7a:37:f3:81:dd:
c4:a0:30:70:55:9e:8b:6d:18:d9:ff:f8:e1:a0:da:bd:a9:9f:
69:89:ce:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:43 2024 by rpki-client on console-ams.rpki-client.org