Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/dgjQLJYw1MGug9ppi7Po1oABgEY.roa
File: dgjQLJYw1MGug9ppi7Po1oABgEY.roa (raw, json)
Hash identifier: rEkNPPgt/DupDTzZ604wK7kqfcWF2pECuMIklPqv7B4=
Subject key identifier: 76:08:D0:2C:96:30:D4:C1:AE:83:DA:69:8B:B3:E8:D6:80:01:80:46
Certificate issuer: /CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Certificate serial: 437E41E2
Authority key identifier: 43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/dgjQLJYw1MGug9ppi7Po1oABgEY.roa
Signing time: Sat 01 Jan 2022 06:05:44 +0000
ROA not before: Sat 01 Jan 2022 06:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34688
IP address blocks: 194.116.252.0/23 maxlen: 23
194.187.72.0/22 maxlen: 22
130.185.96.0/21 maxlen: 21
46.250.160.0/19 maxlen: 19
185.2.60.0/22 maxlen: 22
46.250.168.0/24 maxlen: 24
2a01:5e00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1132347874 (0x437e41e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Validity
Not Before: Jan 1 06:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7608d02c9630d4c1ae83da698bb3e8d680018046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:52:5e:8f:d9:e9:df:b2:16:3e:4f:5a:5b:
9e:fa:d3:4e:7b:56:ba:ba:a0:23:33:aa:e9:f7:a3:
a6:ca:9a:1d:29:f2:f5:7c:8c:50:0b:bd:75:b2:91:
28:03:31:83:3e:bf:e4:7f:1f:f2:e6:a6:73:09:b0:
45:30:37:ab:c7:2f:40:17:7c:20:42:86:1e:92:ad:
3d:60:d5:7a:1d:9a:dd:60:ba:29:97:a0:0e:c3:e5:
8e:cb:b3:81:41:19:b9:11:9a:0c:d5:e3:00:a0:c3:
f7:1c:cc:24:cd:7b:1e:de:e5:17:b9:09:c0:a8:dd:
b1:e1:41:cd:25:b9:ec:41:c5:6a:31:aa:45:24:e1:
c3:44:a9:9f:7c:8f:25:fc:73:b8:88:4f:67:e7:5b:
84:68:ec:bc:57:71:f2:4e:de:2e:00:ec:fe:db:5b:
d4:32:f4:0b:88:1e:a3:f1:71:60:69:e9:c2:ed:7b:
6f:11:8c:7d:38:ef:09:f1:5c:23:0d:b1:51:43:47:
14:0b:8e:53:bf:df:4d:d9:56:ae:b3:38:ba:f5:b2:
34:f0:15:6f:86:a3:18:e6:21:4c:d5:a3:c6:24:c7:
3b:88:22:18:fd:fd:9c:8a:78:27:93:2a:78:fe:5e:
d4:5a:a5:7f:1d:94:b3:64:6b:ea:15:76:cf:6a:8b:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:D0:2C:96:30:D4:C1:AE:83:DA:69:8B:B3:E8:D6:80:01:80:46
X509v3 Authority Key Identifier:
keyid:43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/dgjQLJYw1MGug9ppi7Po1oABgEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.160.0/19
130.185.96.0/21
185.2.60.0/22
194.116.252.0/23
194.187.72.0/22
IPv6:
2a01:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
58:c8:32:65:2b:28:b7:e8:4e:9d:2c:05:12:d1:9c:aa:22:4b:
7d:0b:07:4e:94:b3:fd:ba:36:4a:fb:27:3c:75:69:6b:38:b1:
c8:f5:0f:ae:64:f2:b6:f6:7b:4f:6f:8d:44:8e:8f:73:49:b9:
54:2c:d6:42:e8:d8:e1:cf:5b:38:35:1d:d8:5b:a2:22:b9:a1:
29:91:7e:8b:85:76:c9:01:14:32:e9:bf:36:f1:fe:31:05:3c:
8e:81:be:d3:2b:fc:c9:d2:dd:68:d6:1a:93:2d:3e:80:3d:59:
51:aa:08:06:a4:77:fd:f0:27:3b:46:ed:fa:6a:22:0f:27:1b:
19:70:5c:89:f4:02:62:12:86:1b:03:b4:35:53:e8:72:ba:f1:
14:a6:57:0e:ff:4c:55:bf:05:7d:01:f7:6a:e2:03:66:d6:b1:
8c:34:2e:b5:fb:95:61:87:4a:69:67:a3:c8:87:a8:32:6a:ba:
ae:97:28:2b:f4:9b:c6:eb:09:1d:33:56:0a:37:26:c9:37:5a:
9f:8c:27:01:7a:62:82:25:ac:50:89:d1:3e:9d:59:7f:00:16:
c8:85:da:2c:dd:53:6d:16:c0:14:f6:b0:f6:a1:7a:d4:f5:4d:
81:39:33:fe:16:9a:59:6e:ce:62:0e:a3:2e:0d:56:c0:63:a6:
ff:a7:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:10 2024 by rpki-client on console-ams.rpki-client.org