Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/sFxhm-wkh5Q4DCF7LD9REMoia7E.roa
File: sFxhm-wkh5Q4DCF7LD9REMoia7E.roa (raw, json)
Hash identifier: JBRrmNKqritZfN75VN/WrB1D7kWQFGsEpsgU25MMyK8=
Subject key identifier: B0:5C:61:9B:EC:24:87:94:38:0C:21:7B:2C:3F:51:10:CA:22:6B:B1
Certificate issuer: /CN=df18c5f6675368706b08cc27139aedf7210faf47
Certificate serial: 328C27F1
Authority key identifier: DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/sFxhm-wkh5Q4DCF7LD9REMoia7E.roa
Signing time: Sat 01 Jan 2022 03:53:28 +0000
ROA not before: Sat 01 Jan 2022 03:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12570
IP address blocks: 212.96.160.0/19 maxlen: 19
80.78.144.0/20 maxlen: 20
89.190.40.0/21 maxlen: 21
109.105.32.0/19 maxlen: 19
212.4.128.0/19 maxlen: 19
89.190.48.0/20 maxlen: 20
185.8.188.0/22 maxlen: 22
88.83.224.0/19 maxlen: 19
213.211.32.0/19 maxlen: 19
2001:4ba8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848046065 (0x328c27f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df18c5f6675368706b08cc27139aedf7210faf47
Validity
Not Before: Jan 1 03:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b05c619bec248794380c217b2c3f5110ca226bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:6b:63:46:bf:1f:ca:85:28:13:fe:1d:7e:
92:7e:ec:2e:29:f4:c8:ba:02:2b:fc:a7:c2:a4:cd:
67:50:4a:19:7c:4f:38:dc:33:9e:5f:3c:96:e3:05:
4b:9d:da:41:c6:90:23:3d:fa:a9:51:4b:07:39:73:
09:44:53:52:c4:b8:2d:24:d5:98:8f:83:ce:5e:6b:
b6:45:6b:45:00:db:e7:a0:e9:94:3a:ee:00:26:12:
26:60:f7:6c:ef:bf:ae:e7:61:fc:95:2a:23:2d:2d:
3b:13:25:cc:71:0d:15:d6:96:77:98:2e:0c:ca:72:
55:2b:f0:37:a5:b2:6f:fe:3b:1c:dc:3b:7c:e6:da:
c8:d7:f8:5a:e6:6c:ce:bc:2a:b4:d1:dc:a0:36:60:
76:8b:1e:e3:df:d2:ec:32:04:21:85:ba:98:46:18:
b1:59:f4:c5:5f:47:44:d0:1d:0a:12:6e:fe:1c:3e:
d2:6e:52:ce:77:06:c1:8e:7e:86:fd:83:f3:98:02:
bf:39:c6:15:3c:e6:ad:2f:51:ba:c8:a7:9b:be:23:
9f:e8:a7:2a:9e:9d:75:fe:42:22:65:06:fa:90:7e:
fb:70:29:9f:12:56:0e:ac:35:83:2a:78:23:67:9f:
0d:70:bb:59:1d:56:30:70:b1:81:e1:c6:a1:fc:4d:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5C:61:9B:EC:24:87:94:38:0C:21:7B:2C:3F:51:10:CA:22:6B:B1
X509v3 Authority Key Identifier:
keyid:DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/sFxhm-wkh5Q4DCF7LD9REMoia7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.144.0/20
88.83.224.0/19
89.190.40.0-89.190.63.255
109.105.32.0/19
185.8.188.0/22
212.4.128.0/19
212.96.160.0/19
213.211.32.0/19
IPv6:
2001:4ba8::/29
Signature Algorithm: sha256WithRSAEncryption
4e:19:6e:8e:ed:56:3e:4e:e4:44:41:9e:71:4b:84:aa:df:66:
54:02:1e:85:cb:ec:d1:21:cb:77:04:61:f9:37:82:c0:b9:54:
3d:02:1f:3e:6d:0f:66:7a:dd:03:be:c8:ec:fe:52:ac:ea:e9:
7a:2d:e2:19:ac:be:cc:c9:9b:23:3d:b7:d5:12:8c:dd:df:4d:
cf:c5:5a:86:bc:fc:b9:21:22:90:ff:f1:5c:01:af:2d:92:9a:
fc:d6:d6:91:34:b1:b8:21:ed:6b:a4:4d:2d:5b:95:3a:e8:0c:
20:9d:ac:31:28:8a:f6:69:4c:15:b3:7c:28:c4:36:16:9e:e9:
4f:22:33:39:62:c0:52:47:5e:fb:80:11:6b:8c:40:99:42:6f:
ba:03:f2:11:ff:c5:ac:11:ca:a3:fd:14:70:99:2d:1f:04:86:
98:f6:b5:20:9d:03:41:cc:ef:fa:c2:ad:aa:45:f9:72:f3:32:
7e:8b:c0:7d:ff:2b:76:c8:a6:3a:69:9e:ab:ac:5d:fa:09:17:
3a:c7:95:91:f7:63:36:14:fc:6e:36:08:ae:47:ee:8b:95:ec:
ea:25:ba:a9:08:2f:3c:e8:63:82:c8:28:f0:7c:66:46:03:97:
d1:2b:b8:40:78:f6:c3:ab:a2:5a:51:9e:9f:86:01:9e:9b:55:
bb:be:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:46 2023 by rpki-client on console-ams.rpki-client.org