Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/7wJG9_s5oDkPvdrvI2haVGR-K_c.roa
File: 7wJG9_s5oDkPvdrvI2haVGR-K_c.roa (raw, json)
Hash identifier: PBXXpBofv43sW7cNk5vszNCODA9ipZhQ2CCT0A8vPSY=
Subject key identifier: EF:02:46:F7:FB:39:A0:39:0F:BD:DA:EF:23:68:5A:54:64:7E:2B:F7
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0262E0EF
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/7wJG9_s5oDkPvdrvI2haVGR-K_c.roa
Signing time: Sat 01 Jan 2022 06:06:26 +0000
ROA not before: Sat 01 Jan 2022 06:06:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 88.218.80.0/24 maxlen: 24
95.214.83.0/24 maxlen: 24
176.118.188.0/23 maxlen: 24
84.252.64.0/23 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
84.252.66.0/23 maxlen: 24
77.83.20.0/23 maxlen: 24
77.83.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40034543 (0x262e0ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 06:06:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef0246f7fb39a0390fbddaef23685a54647e2bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:ad:9a:c1:b4:4b:79:e5:db:2e:4a:ad:ec:
65:06:c9:46:5f:1d:de:b6:e4:c0:da:c9:4e:5c:93:
d7:c9:c6:14:ee:86:58:e4:b7:2b:6e:9a:1b:1f:1e:
ae:f2:ad:7e:fe:4e:25:0a:26:b7:e9:4f:90:de:60:
63:5d:68:0a:79:57:df:2d:9b:c9:dc:9c:02:f5:01:
16:52:6d:25:14:45:71:bf:d8:bc:fc:52:83:15:8b:
b4:8a:87:65:e4:53:2d:b6:f2:40:53:41:89:8f:d4:
7f:7c:f3:b7:c8:ca:40:ac:1a:f5:e3:fa:b1:c2:f1:
de:7b:1e:4f:7c:93:c3:08:5d:8a:9d:64:62:e5:bd:
ba:0f:46:a6:d2:42:52:d7:4c:cb:eb:e0:8f:1f:bd:
a7:e8:bf:36:e2:ca:d4:85:82:61:8a:aa:fe:fd:c2:
2a:c7:84:33:dd:8e:0b:d4:75:bd:c7:0f:df:7d:2e:
41:f0:53:ca:2e:26:c8:49:a8:97:1f:d2:80:d5:94:
9f:a5:ab:df:95:23:04:66:de:ed:6b:8d:6a:b6:b7:
2c:9c:29:88:ac:38:81:8d:cd:cf:3f:3e:6d:de:64:
54:b5:1c:73:fb:9c:78:fd:dd:c5:bf:19:00:e0:28:
c1:ef:3a:3f:48:47:b7:89:68:06:68:2e:4e:ae:a4:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:46:F7:FB:39:A0:39:0F:BD:DA:EF:23:68:5A:54:64:7E:2B:F7
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/7wJG9_s5oDkPvdrvI2haVGR-K_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.20.0/22
84.252.64.0/22
88.218.80.0/24
95.214.83.0/24
176.118.188.0/23
185.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:1c:b5:59:3c:17:5c:e4:78:03:d8:ac:00:6b:fb:8c:26:b3:
ef:03:85:92:5a:a8:15:55:23:28:27:e4:52:b3:e5:45:51:6b:
61:33:b5:f8:96:a8:61:ba:a1:5c:23:de:f2:8d:6d:49:06:a4:
5b:2b:d0:1d:9b:36:49:97:6e:73:84:c0:a3:77:5e:f2:7c:3f:
20:98:a6:f7:71:91:7b:24:0c:a8:e4:01:d3:2a:fb:37:df:e3:
e1:f6:a9:9a:2b:e0:15:f2:9e:f7:8e:11:80:04:84:93:e2:b0:
59:28:6d:66:76:60:e3:41:c5:73:d4:e9:eb:19:db:5b:c4:d1:
9e:c4:44:3c:9f:9d:68:fc:a6:4f:c1:9a:e0:d2:45:bb:18:0d:
71:1f:98:b8:82:94:c5:ea:3c:6a:da:94:a5:42:90:42:53:43:
59:c6:57:e1:ca:4e:8d:25:27:5c:0c:86:30:67:e8:70:f4:c7:
3e:b5:48:7d:b8:12:5e:fb:24:02:d7:89:6a:60:3b:b3:32:7a:
e9:64:e2:fc:30:b8:da:4f:6e:dd:45:72:76:01:01:5c:de:17:
b7:9f:b7:22:98:d4:26:66:e5:70:6b:fe:46:49:4b:49:f2:a8:
1a:27:c6:6c:ff:35:09:92:2b:e1:07:e5:01:09:15:a5:53:9d:
f5:ba:ff:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:00 2024 by rpki-client on console-fra.rpki-client.org