Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/fabab9-658b-4d2f-8553-b431498c04c4/1/1-5hTLb1hb28u9cgk3DNPsNM4SbM.roa
File: 1-5hTLb1hb28u9cgk3DNPsNM4SbM.roa (raw, json)
Hash identifier: i4w0FobvO6znoNGT/HhquC5Iqm8Pc3Zi4WbHI1kDlCQ=
Subject key identifier: FB:98:53:2D:BD:61:6F:6F:2E:F5:C8:24:DC:33:4F:B0:D3:38:49:B3
Certificate issuer: /CN=903a7b98915c3ff52529046f8edb46c4217fb086
Certificate serial: 0A2D11B9
Authority key identifier: 90:3A:7B:98:91:5C:3F:F5:25:29:04:6F:8E:DB:46:C4:21:7F:B0:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDp7mJFcP_UlKQRvjttGxCF_sIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/fabab9-658b-4d2f-8553-b431498c04c4/1/1-5hTLb1hb28u9cgk3DNPsNM4SbM.roa
Signing time: Sat 01 Jan 2022 12:57:21 +0000
ROA not before: Sat 01 Jan 2022 12:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12453
IP address blocks: 2.56.160.0/22 maxlen: 22
195.93.174.0/23 maxlen: 23
194.59.177.0/24 maxlen: 24
91.223.248.0/24 maxlen: 24
185.31.52.0/22 maxlen: 22
185.224.24.0/22 maxlen: 22
185.85.32.0/22 maxlen: 22
185.155.124.0/22 maxlen: 22
2a0d:5dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170725817 (0xa2d11b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903a7b98915c3ff52529046f8edb46c4217fb086
Validity
Not Before: Jan 1 12:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb98532dbd616f6f2ef5c824dc334fb0d33849b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:be:50:f8:56:01:34:bc:53:00:76:4d:a9:
ea:bc:6f:f8:01:11:09:82:63:aa:5d:68:5d:18:be:
71:17:5d:b1:44:b1:04:2a:95:4b:0a:51:14:e0:8a:
82:46:38:fa:3c:da:75:7d:e3:ae:3e:79:c5:c3:93:
8f:a7:ed:04:57:fa:10:c2:2a:92:10:1c:95:ba:cc:
a2:0c:a1:b0:37:98:05:63:3a:cb:35:9b:f8:7b:b2:
48:ac:b2:a7:7d:78:3f:70:00:62:71:13:3a:aa:e6:
55:d1:db:1a:eb:ea:54:ad:5f:cc:7e:f9:b7:e0:e8:
80:3b:af:2c:69:38:99:1a:b8:ef:d5:5b:94:b4:14:
25:ff:b1:18:d4:4b:c5:ed:90:2d:e7:a4:1d:44:50:
01:d4:76:a5:d6:a7:f9:c5:db:3d:be:07:1e:b1:9c:
01:9e:4e:72:21:d5:5e:08:30:15:c7:d2:8a:54:3d:
91:95:46:5b:29:53:72:fa:fc:75:37:bc:ed:fc:59:
17:ce:04:a5:7a:58:f3:cd:d3:df:f2:f1:7a:00:61:
60:29:56:fd:ef:e5:1a:cd:ca:c9:ec:f0:ae:27:3b:
0d:62:14:8c:8c:22:c7:41:df:cd:54:a4:41:18:41:
1f:cb:f0:e9:e9:d9:72:87:71:22:ed:dc:b0:a0:44:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:53:2D:BD:61:6F:6F:2E:F5:C8:24:DC:33:4F:B0:D3:38:49:B3
X509v3 Authority Key Identifier:
keyid:90:3A:7B:98:91:5C:3F:F5:25:29:04:6F:8E:DB:46:C4:21:7F:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDp7mJFcP_UlKQRvjttGxCF_sIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/fabab9-658b-4d2f-8553-b431498c04c4/1/1-5hTLb1hb28u9cgk3DNPsNM4SbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/fabab9-658b-4d2f-8553-b431498c04c4/1/kDp7mJFcP_UlKQRvjttGxCF_sIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.160.0/22
91.223.248.0/24
185.31.52.0/22
185.85.32.0/22
185.155.124.0/22
185.224.24.0/22
194.59.177.0/24
195.93.174.0/23
IPv6:
2a0d:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:a1:3a:9f:9a:92:00:1b:bd:de:4c:a0:8b:bb:42:3f:1f:ec:
6d:55:f4:4b:9a:9c:1f:ba:9b:d8:ef:2a:7e:60:0f:b1:fe:19:
d5:2d:00:70:b5:8c:4c:3e:f4:a3:ab:d2:a7:30:39:95:fb:40:
f9:83:cf:d8:26:29:f9:17:34:6a:98:f0:94:80:26:46:c4:14:
ba:8b:ee:d3:34:99:53:cc:5c:eb:ed:48:05:f8:07:17:a2:4b:
2b:34:5c:33:96:c9:5b:e4:94:a9:55:ae:9f:51:a1:e3:ac:4d:
8a:25:9a:e1:2a:c2:f7:1c:b0:c3:37:97:54:cd:06:99:33:56:
93:b2:1f:03:bf:97:8e:b7:57:93:08:f0:1d:26:dc:ea:eb:82:
bd:6c:d5:83:ff:48:61:7b:c5:42:10:a2:3a:b3:87:40:3c:a9:
b6:e6:3f:65:7c:1e:ac:04:3d:a1:d6:06:93:44:fc:22:2e:25:
88:e9:18:ff:d5:05:55:f4:3f:04:b0:e4:df:b2:da:11:77:56:
70:d3:6b:96:1b:cc:63:42:ee:f7:f2:e2:da:57:4a:cd:74:eb:
c6:c7:e5:d5:10:e2:be:7d:da:15:aa:9b:96:e9:97:55:ee:47:
32:1e:20:dd:54:55:0b:81:d2:99:2a:ed:28:78:29:54:95:b1:
cf:f3:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:18 2024 by rpki-client on console-fra.rpki-client.org