Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/JUfWPt7JdvXV1AdnBvGbd1bYe4U.roa
File: JUfWPt7JdvXV1AdnBvGbd1bYe4U.roa (raw, json)
Hash identifier: Rq0DAEvj76wEAuIjFGDTgwO9FgGI28QdH/vhXmjfrRI=
Subject key identifier: 25:47:D6:3E:DE:C9:76:F5:D5:D4:07:67:06:F1:9B:77:56:D8:7B:85
Certificate issuer: /CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
Certificate serial: 01856ECB9978849DF3AD29BF301A2B9D6515
Authority key identifier: F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/JUfWPt7JdvXV1AdnBvGbd1bYe4U.roa
Signing time: Sun 01 Jan 2023 19:25:14 +0000
ROA not before: Sun 01 Jan 2023 19:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202119
IP address blocks: 185.20.4.0/22 maxlen: 22
185.20.6.0/23 maxlen: 23
2a00:4ce0::/40 maxlen: 40
2a00:4ce0::/32 maxlen: 32
2a00:4ce0:3::/48 maxlen: 48
2a00:4ce0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:99:78:84:9d:f3:ad:29:bf:30:1a:2b:9d:65:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
Validity
Not Before: Jan 1 19:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2547d63edec976f5d5d4076706f19b7756d87b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:d4:7d:7e:09:23:1f:70:69:92:f5:0f:e4:
30:27:32:5c:4f:6d:11:21:fd:13:8b:96:f6:81:a4:
eb:d8:13:3c:62:86:25:02:5f:5c:05:7e:e4:ec:a6:
a1:e1:a4:43:75:f6:2a:94:91:09:80:e8:98:20:ab:
7a:6f:11:4a:66:25:c2:92:e2:8e:c0:91:9e:9c:2d:
db:77:0f:0d:b7:cc:71:43:bb:ec:86:9f:57:d9:03:
19:aa:67:48:0e:2b:4c:72:ec:66:ad:df:11:36:7d:
5d:87:ca:f4:11:a6:f4:91:fe:25:b9:87:de:24:12:
96:3b:e0:5a:24:3c:da:f9:80:83:bc:08:b4:cd:7c:
4b:17:28:fe:bf:1e:84:8c:1c:15:91:98:8e:0d:a8:
a2:ab:12:ca:bd:01:db:18:d4:08:e1:ec:05:45:f7:
fa:50:62:63:a9:ae:55:05:03:57:f5:c0:0a:60:c1:
af:de:b5:6a:be:65:1b:48:01:1a:b2:60:8b:bd:ca:
12:32:3f:85:44:90:13:06:5f:a0:7d:ab:ba:93:4e:
b1:6d:ef:98:e4:2e:2e:a0:b9:be:31:62:83:7a:ab:
34:8b:57:c6:3e:fc:61:78:c2:49:fa:5e:66:3e:38:
17:52:e9:f8:2a:68:20:15:76:0e:c4:1c:ac:e9:68:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:D6:3E:DE:C9:76:F5:D5:D4:07:67:06:F1:9B:77:56:D8:7B:85
X509v3 Authority Key Identifier:
keyid:F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/JUfWPt7JdvXV1AdnBvGbd1bYe4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.4.0/22
IPv6:
2a00:4ce0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:6b:3d:23:00:e8:4a:49:bb:51:e8:b0:03:86:e3:3d:4c:5d:
d4:38:92:64:db:4f:c3:a7:86:d3:c4:d4:6e:c6:8c:92:2b:a0:
62:dd:ef:5c:ba:ab:fb:96:df:3b:8d:49:f4:d7:d1:86:02:5f:
38:1b:83:4f:ce:45:da:18:98:4b:81:bc:a7:68:ce:76:ef:e5:
b8:11:25:5f:ee:47:21:cc:e7:68:d5:e2:74:dc:a7:b0:0b:04:
d3:5d:97:ac:7b:d2:b2:11:af:8e:71:17:9a:cc:5f:b0:4b:ba:
22:34:5b:7a:0c:b2:fc:7b:7b:9b:78:1f:fa:d1:1c:61:c9:35:
65:e6:f3:6d:30:a9:8a:01:2e:47:57:72:5b:2d:03:f6:f0:f0:
7d:3c:38:2f:f8:09:05:99:03:66:51:29:81:ab:f2:8f:32:22:
70:48:7f:e5:8b:25:bc:5f:97:e1:47:71:ad:30:7e:76:85:f2:
a7:26:a9:f6:1a:91:d4:66:2d:c3:0f:ea:ec:76:f8:db:1c:56:
0b:b1:d2:f1:a0:e8:a9:6b:7b:03:da:00:24:23:90:6b:af:b4:
80:06:c3:c3:cb:42:c6:c0:b7:55:ae:d7:53:f8:2a:0e:9e:35:
40:6a:25:2d:3b:2e:d0:65:7c:37:85:8a:b1:c1:e0:5f:2a:cb:
89:02:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:45 2024 by rpki-client on console-fra.rpki-client.org