Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/S7aLUGOnAeugZHzTu9c_XG9UUzU.roa
File: S7aLUGOnAeugZHzTu9c_XG9UUzU.roa (raw, json)
Hash identifier: IxokKmW8mlGpKTnV4kgey42WSRExJwcEKD2pFIvYpmc=
Subject key identifier: 4B:B6:8B:50:63:A7:01:EB:A0:64:7C:D3:BB:D7:3F:5C:6F:54:53:35
Certificate issuer: /CN=4405a22269e7c274423cdc83e1ea141d6cb29bf7
Certificate serial: 06B23453
Authority key identifier: 44:05:A2:22:69:E7:C2:74:42:3C:DC:83:E1:EA:14:1D:6C:B2:9B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWiImnnwnRCPNyD4eoUHWyym_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/S7aLUGOnAeugZHzTu9c_XG9UUzU.roa
Signing time: Sat 01 Jan 2022 00:59:07 +0000
ROA not before: Sat 01 Jan 2022 00:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8608
IP address blocks: 62.100.0.0/18 maxlen: 18
89.220.0.0/17 maxlen: 17
84.41.128.0/17 maxlen: 17
217.17.128.0/20 maxlen: 20
212.67.160.0/19 maxlen: 19
217.112.112.0/20 maxlen: 20
80.248.32.0/20 maxlen: 20
88.211.128.0/18 maxlen: 18
195.18.64.0/18 maxlen: 18
2a02:938::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112342099 (0x6b23453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4405a22269e7c274423cdc83e1ea141d6cb29bf7
Validity
Not Before: Jan 1 00:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bb68b5063a701eba0647cd3bbd73f5c6f545335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:46:51:3b:cb:c7:17:82:30:e0:5e:14:d7:
80:5c:83:fc:08:eb:2d:9c:65:77:58:95:e2:90:50:
a9:00:44:a8:56:05:95:c5:66:89:6a:f3:21:2a:38:
bb:af:fd:40:32:7a:d4:17:4e:30:ab:60:2c:d3:97:
f8:02:1c:c0:26:44:c1:67:f0:8b:a8:f7:b9:7c:5f:
10:e1:8f:15:83:6b:7e:6a:f4:ec:4f:ce:40:49:e2:
d2:91:10:50:a5:4a:68:98:38:3e:76:ab:42:6d:53:
fb:1d:b2:54:0a:12:8f:2e:52:94:1a:3c:56:d6:6f:
2f:9f:a5:8c:ba:b9:39:d9:01:db:45:2f:11:00:d7:
8d:93:65:5a:a1:30:e7:75:02:2c:a6:fb:20:eb:c8:
74:81:85:d9:de:6a:56:e4:57:4d:51:72:e9:0a:d0:
f8:57:46:9d:b8:51:30:53:83:dc:27:f1:91:15:88:
5d:fe:f9:ab:0e:36:e3:dc:bb:85:e0:b3:9e:4f:8a:
bf:09:77:9e:96:59:b4:6e:0d:af:c8:3a:76:41:3b:
82:39:a6:de:d2:1a:df:f4:ef:4e:8f:be:b7:df:8e:
4e:62:d1:62:90:cd:bf:a3:4f:9f:0d:9e:39:66:d9:
3a:1e:8c:29:f7:84:fd:6f:bc:20:91:a3:4d:f2:ac:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:8B:50:63:A7:01:EB:A0:64:7C:D3:BB:D7:3F:5C:6F:54:53:35
X509v3 Authority Key Identifier:
keyid:44:05:A2:22:69:E7:C2:74:42:3C:DC:83:E1:EA:14:1D:6C:B2:9B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWiImnnwnRCPNyD4eoUHWyym_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/S7aLUGOnAeugZHzTu9c_XG9UUzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/94adfb-1219-4f37-b05b-6fa0ed3f5e5c/1/RAWiImnnwnRCPNyD4eoUHWyym_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.0.0/18
80.248.32.0/20
84.41.128.0/17
88.211.128.0/18
89.220.0.0/17
195.18.64.0/18
212.67.160.0/19
217.17.128.0/20
217.112.112.0/20
IPv6:
2a02:938::/29
Signature Algorithm: sha256WithRSAEncryption
58:43:a2:5c:48:a7:b3:f6:91:5d:86:5f:39:d6:64:aa:b6:d3:
74:dc:6f:da:72:0b:97:04:5d:13:50:a7:3b:30:48:a0:3b:b8:
58:a6:6b:bf:ac:c1:94:11:9d:eb:d0:9a:32:bb:65:03:ba:7b:
e2:cc:b6:e3:5a:fc:26:6b:f2:be:ef:73:e5:e7:04:43:b5:bf:
ec:d0:90:a2:b6:09:72:6c:23:5c:68:65:2b:71:9e:d5:1e:b8:
fe:2f:48:b5:fe:3d:b1:fe:3a:46:7c:35:18:d2:8f:b6:ee:2f:
08:14:34:d3:50:24:46:77:48:68:5b:db:e2:ca:31:ff:4f:ca:
3e:b3:0f:90:22:8f:04:ff:8c:61:7c:51:85:54:b9:7c:36:7d:
a2:47:26:f4:b6:65:2c:55:36:5d:8c:14:0a:3b:c8:7d:07:51:
b9:e3:e7:f7:3b:62:8f:68:c1:b1:32:eb:b8:40:f6:c4:bc:fa:
01:e1:aa:65:f5:ec:f7:26:59:87:cc:70:11:89:ca:c9:6a:1d:
b8:3a:b8:9a:1b:c8:8b:10:0f:36:cc:6c:c9:47:c8:03:c0:c4:
7b:0f:ee:4f:a8:68:cc:5b:eb:5c:a2:b2:65:d3:55:27:27:c7:
5e:9e:d2:c6:65:03:7c:b7:a0:65:ff:d6:a6:48:fb:be:31:ec:
8c:c8:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:31 2024 by rpki-client on console-fra.rpki-client.org