Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/5C6_J9ZikYxrWy2P1nyZqymIlQE.roa
File: 5C6_J9ZikYxrWy2P1nyZqymIlQE.roa (raw, json)
Hash identifier: vq79wNdp/LIoVMcANxPhsLRyz/xRU+3iaskbb2uRWPk=
Subject key identifier: E4:2E:BF:27:D6:62:91:8C:6B:5B:2D:8F:D6:7C:99:AB:29:88:95:01
Certificate issuer: /CN=4405a22269e7c274423cdc83e1ea141d6cb29bf7
Certificate serial: 01870E8939EEDEBD7DD0F1B62B0210FB4674
Authority key identifier: 44:05:A2:22:69:E7:C2:74:42:3C:DC:83:E1:EA:14:1D:6C:B2:9B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWiImnnwnRCPNyD4eoUHWyym_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/5C6_J9ZikYxrWy2P1nyZqymIlQE.roa
Signing time: Thu 23 Mar 2023 12:54:46 +0000
ROA not before: Thu 23 Mar 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 89.220.0.0/17 maxlen: 17
62.100.0.0/18 maxlen: 18
84.41.128.0/17 maxlen: 17
217.17.128.0/20 maxlen: 20
212.67.160.0/19 maxlen: 19
217.112.112.0/20 maxlen: 20
80.248.32.0/20 maxlen: 20
88.211.128.0/18 maxlen: 18
2a02:938::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:89:39:ee:de:bd:7d:d0:f1:b6:2b:02:10:fb:46:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4405a22269e7c274423cdc83e1ea141d6cb29bf7
Validity
Not Before: Mar 23 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e42ebf27d662918c6b5b2d8fd67c99ab29889501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:8f:da:82:e0:43:a1:d2:f7:d1:0e:31:39:
86:ea:e1:4a:6d:f5:7c:2c:e6:6a:4f:df:d5:bc:aa:
0b:11:7e:57:18:78:3c:26:23:9f:64:8f:0d:95:c9:
a5:ab:5c:6e:99:a5:86:53:f7:7e:7d:76:9e:bd:a3:
9a:37:4b:1c:b0:56:1b:43:b7:63:b8:81:80:0c:f0:
03:92:77:77:df:3f:2f:6c:d9:75:7f:40:3d:39:56:
32:36:58:00:0c:25:73:b4:76:58:8f:4c:f0:22:47:
95:ab:f5:8f:24:8a:c4:30:e8:37:eb:af:63:e2:95:
a2:56:53:ba:b4:c3:b8:89:b3:e5:64:c8:1e:1f:bd:
f1:a0:0d:53:b2:e9:fe:d5:b7:08:51:3a:e9:af:87:
a9:0a:04:1f:5e:d2:c6:14:2c:1a:bc:35:37:3e:c5:
87:7c:ff:0d:3b:57:d5:d3:a9:41:28:fe:5b:e2:ff:
a6:4c:06:cc:dd:3c:8a:7e:7e:23:58:a6:e0:dc:7f:
01:d1:53:99:43:03:40:a6:56:60:f2:1c:8d:e9:86:
9b:aa:45:58:fa:7b:17:5f:d4:a3:9a:8d:9c:a6:2c:
01:cc:2e:4f:8c:12:29:41:07:bb:33:08:a0:13:4b:
15:1d:a7:b6:6a:80:dc:7c:a1:a2:4f:20:93:5d:92:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:BF:27:D6:62:91:8C:6B:5B:2D:8F:D6:7C:99:AB:29:88:95:01
X509v3 Authority Key Identifier:
keyid:44:05:A2:22:69:E7:C2:74:42:3C:DC:83:E1:EA:14:1D:6C:B2:9B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWiImnnwnRCPNyD4eoUHWyym_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/5C6_J9ZikYxrWy2P1nyZqymIlQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/RAWiImnnwnRCPNyD4eoUHWyym_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.0.0/18
80.248.32.0/20
84.41.128.0/17
88.211.128.0/18
89.220.0.0/17
212.67.160.0/19
217.17.128.0/20
217.112.112.0/20
IPv6:
2a02:938::/29
Signature Algorithm: sha256WithRSAEncryption
50:0d:1d:35:8f:20:5b:e7:a7:fe:4d:85:6e:58:ec:98:ce:91:
3e:3f:8c:13:84:f9:d5:bc:63:23:70:ca:b0:e2:41:c6:99:dc:
c9:88:05:38:6e:cc:f3:35:77:54:91:c3:8f:be:f5:6d:9c:f5:
25:2e:a2:cc:9a:df:0c:01:c8:74:5d:20:8a:80:0a:d8:18:ad:
03:33:35:a4:0b:4e:50:b3:be:90:a6:30:e4:16:cf:97:eb:b2:
44:7c:21:f8:fb:32:1b:cc:ce:a1:b5:f3:7f:f6:bf:f2:53:9f:
59:a5:8a:c2:01:f4:cd:c3:d2:dd:39:e8:63:a4:a9:01:ba:54:
af:c0:5f:6d:3b:15:a7:a7:92:56:a3:86:da:e6:d8:ce:57:cd:
d9:16:43:92:79:fc:4b:92:4d:c8:e3:c6:c4:d7:5a:f0:17:7f:
ab:c6:a5:10:71:37:40:84:0d:0d:ca:27:71:27:d5:a3:50:0a:
bd:51:67:9c:5f:6b:fc:dc:01:6b:08:cd:bc:5e:86:48:01:0a:
e4:b1:a3:bd:cf:3d:56:78:3e:0c:62:b7:b2:5b:ab:d3:8a:b0:
34:6d:99:ce:e9:dd:04:ea:c3:1e:65:63:dd:ce:72:5a:73:4e:
91:36:24:06:d6:3b:f5:df:25:45:f6:3e:69:ce:d8:f6:f1:82:
19:95:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:43 2024 by rpki-client on console-ams.rpki-client.org