Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/X6ZbqumCzm6VuZPPgWHf0MHWhvs.roa
File: X6ZbqumCzm6VuZPPgWHf0MHWhvs.roa (raw, json)
Hash identifier: t2G2F/Ethn7EeRfhb0k/xsXsA9N8UzbzKDPM16WLGUs=
Subject key identifier: 5F:A6:5B:AA:E9:82:CE:6E:95:B9:93:CF:81:61:DF:D0:C1:D6:86:FB
Certificate issuer: /CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Certificate serial: 01856F549AD30468647D58127D203A39387A
Authority key identifier: 05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/X6ZbqumCzm6VuZPPgWHf0MHWhvs.roa
Signing time: Sun 01 Jan 2023 21:54:53 +0000
ROA not before: Sun 01 Jan 2023 21:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24935
IP address blocks: 195.74.80.0/24 maxlen: 24
185.161.45.0/24 maxlen: 24
185.161.47.0/24 maxlen: 24
185.252.156.0/24 maxlen: 24
185.252.159.0/24 maxlen: 24
185.252.158.0/24 maxlen: 24
37.235.92.0/24 maxlen: 24
46.29.122.0/24 maxlen: 24
37.235.93.0/24 maxlen: 24
46.29.123.0/24 maxlen: 24
194.213.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:9a:d3:04:68:64:7d:58:12:7d:20:3a:39:38:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Validity
Not Before: Jan 1 21:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa65baae982ce6e95b993cf8161dfd0c1d686fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:63:01:53:6c:83:4b:02:31:91:43:95:75:
8f:ee:9a:c8:09:00:b6:8f:25:d9:fe:6e:a1:6b:8e:
c7:89:8f:e5:b9:dc:aa:c8:85:aa:c6:a3:15:60:c9:
a0:fd:45:2b:10:97:7a:40:78:f5:55:cc:1c:cf:ba:
9e:0c:a4:91:8a:cc:ac:8c:c7:d0:6b:46:3d:c8:3f:
90:7e:2d:20:4f:2e:c1:0e:18:21:16:25:51:dd:1b:
d3:91:ae:fb:0b:83:76:21:ff:4e:fc:49:ff:c9:45:
84:8c:1c:c5:06:ac:d1:06:2e:29:1c:79:d4:bb:16:
ff:fc:a9:5b:57:0e:56:97:b1:d0:d8:7e:a3:1a:f5:
d6:8a:5d:60:4d:52:b0:99:32:d4:24:dc:10:9d:af:
46:cc:f5:f5:99:88:bf:23:ef:26:5c:3f:b1:8c:c2:
1f:4c:ec:ca:f5:d4:8a:97:5b:af:5e:b0:19:72:3b:
9b:3b:08:cb:1a:71:51:8b:cf:e2:48:65:fb:44:dd:
6b:ef:de:83:6e:67:d4:bf:a8:ac:46:84:33:a6:43:
67:74:f0:9a:16:0d:12:7e:b4:16:6d:8c:ff:c7:c2:
e6:0e:59:7e:a4:d1:fd:13:ce:34:b2:ae:2e:4e:68:
8e:8b:aa:66:d9:56:5c:72:37:d9:84:2c:e2:97:1a:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:5B:AA:E9:82:CE:6E:95:B9:93:CF:81:61:DF:D0:C1:D6:86:FB
X509v3 Authority Key Identifier:
keyid:05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/X6ZbqumCzm6VuZPPgWHf0MHWhvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/BdZYWUtlNkssLlampF67BoR7OEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.92.0/23
46.29.122.0/23
185.161.45.0/24
185.161.47.0/24
185.252.156.0/24
185.252.158.0/23
194.213.30.0/24
195.74.80.0/24
Signature Algorithm: sha256WithRSAEncryption
87:21:27:ef:56:60:ce:46:7d:95:d8:95:53:f5:a5:0b:c5:d8:
80:95:00:be:92:b5:a8:0e:f9:44:58:cc:13:81:49:7f:f5:61:
a1:84:9b:fb:87:4d:06:fe:ad:2b:5b:85:d7:09:3a:aa:3c:1f:
9e:1c:67:f6:e8:9f:dc:ec:dc:f5:e8:62:80:08:14:c6:2d:fc:
6f:82:44:c2:cb:69:a1:9f:dc:ea:d2:ba:19:e2:b1:34:c4:29:
72:ab:e8:2e:db:6a:7e:39:53:62:68:01:cb:8b:89:58:1d:41:
9c:b6:25:4b:76:30:2d:68:9b:bd:a0:6e:72:39:30:b6:50:63:
1a:ed:89:ba:2d:11:a3:05:99:a0:1b:a3:d0:04:00:bd:a1:e7:
ee:32:42:7e:8e:0f:dc:1c:03:2a:a8:2b:71:20:b5:44:9f:82:
81:8d:e8:70:9f:f7:e7:20:de:f5:be:96:04:1f:83:6e:35:f1:
e7:ac:9c:ba:f8:09:07:73:e1:15:af:0c:a0:b6:9b:d0:32:80:
39:3a:e6:4f:8d:94:08:5e:7e:4b:d5:bb:f2:67:36:36:0b:81:
31:06:e5:68:b1:27:48:97:e1:c6:12:a2:51:ab:4e:c1:ee:9e:
a1:17:0c:4f:b5:36:b2:84:5c:3b:58:6b:0b:0f:07:a7:d5:01:
e4:c0:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 11:55:31 2023 by rpki-client on console-ams.rpki-client.org