Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/evL09FurFYzuMQ9i5OAW8qVDazs.roa
File: evL09FurFYzuMQ9i5OAW8qVDazs.roa (raw, json)
Hash identifier: gNHobpp7nF6UcKBqkXQK8RrlYp2vZM0nMd6tRzqNgwE=
Subject key identifier: 7A:F2:F4:F4:5B:AB:15:8C:EE:31:0F:62:E4:E0:16:F2:A5:43:6B:3B
Certificate issuer: /CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Certificate serial: 17B8B602
Authority key identifier: 70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/evL09FurFYzuMQ9i5OAW8qVDazs.roa
Signing time: Wed 20 Apr 2022 13:43:44 +0000
ROA not before: Wed 20 Apr 2022 13:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34655
IP address blocks: 109.71.163.0/24 maxlen: 24
109.71.160.0/24 maxlen: 24
109.71.166.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
5.159.216.0/24 maxlen: 24
95.128.120.0/24 maxlen: 24
95.128.125.0/24 maxlen: 24
95.128.124.0/24 maxlen: 24
95.128.123.0/24 maxlen: 24
95.128.121.0/24 maxlen: 24
95.128.126.0/24 maxlen: 24
93.93.54.0/24 maxlen: 24
2a03:9c40::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397981186 (0x17b8b602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Validity
Not Before: Apr 20 13:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7af2f4f45bab158cee310f62e4e016f2a5436b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:7a:3c:8e:d2:c1:49:e1:dc:f7:fb:8a:54:
bc:aa:6f:74:3f:d8:c5:59:f4:4d:16:e8:9a:6e:25:
3c:cf:3d:5d:32:d1:ce:7b:f0:69:02:90:f4:77:31:
5e:6e:74:03:38:c9:8a:ef:27:42:44:7f:88:60:2d:
51:df:2f:a8:a3:0b:5f:c6:53:5a:45:5d:29:31:d8:
2d:35:ce:02:f4:4a:e8:21:26:12:90:94:c3:84:20:
49:8b:12:a9:8d:30:4c:a5:60:7b:5d:d9:22:c5:db:
05:c1:58:e3:be:32:33:23:a0:04:f9:5c:90:8e:5d:
a9:33:42:29:d0:f1:ac:00:ed:0a:e6:53:53:71:99:
4a:21:42:fc:1b:68:7d:cf:31:3a:43:ed:6d:55:99:
12:a8:d5:c9:3e:93:d3:73:0b:2d:65:9d:80:3a:37:
02:8c:ee:3d:f9:d6:4a:d0:ed:cc:3b:cd:76:08:1f:
10:e6:bb:3d:af:cb:3f:4f:5c:2e:21:cb:cc:8f:7c:
db:a4:f0:43:a1:f9:68:01:7c:6d:ab:1e:a5:33:49:
f4:b5:2b:68:49:60:24:47:6f:bc:1f:d9:9d:32:94:
f6:f9:fa:0d:18:0e:ea:4e:ca:dd:a1:cb:1d:6b:4a:
45:db:b8:52:66:ab:d7:43:69:53:aa:0a:a8:5c:83:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:F4:F4:5B:AB:15:8C:EE:31:0F:62:E4:E0:16:F2:A5:43:6B:3B
X509v3 Authority Key Identifier:
keyid:70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/evL09FurFYzuMQ9i5OAW8qVDazs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/cE6wMksWcpndYGTbvzQNL5nEAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.216.0/24
93.93.54.0/24
95.128.120.0/23
95.128.123.0-95.128.126.255
109.71.160.0/24
109.71.163.0/24
109.71.165.0-109.71.166.255
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
Signature Algorithm: sha256WithRSAEncryption
1a:fb:19:48:d4:a0:19:4d:4a:ec:28:f5:42:79:d4:74:46:cf:
04:2f:db:bc:aa:9f:e2:6d:8c:97:dd:84:e5:18:53:54:ef:b1:
6d:e3:7a:56:12:48:29:e3:0e:39:b6:92:54:ba:51:ef:32:9d:
97:99:54:a0:be:0d:fa:fd:37:c1:cb:2a:db:f8:13:2b:e1:d5:
44:96:c8:7a:ec:53:0d:6f:46:3c:6c:20:c8:fc:b8:6b:8b:85:
bd:df:95:8e:dd:de:6e:d3:21:8e:20:50:09:19:01:35:a0:cc:
9d:4d:9b:8a:36:78:34:66:7b:3b:b7:0b:bd:ee:1c:c0:c7:59:
ef:0d:c1:90:06:b7:ab:72:7e:ab:77:a2:61:44:a5:e3:47:ec:
2b:a4:09:6d:5e:9b:39:b8:f3:12:17:27:55:9b:fa:ee:c1:1b:
f8:de:18:04:fc:6a:f2:16:ed:69:12:12:7e:51:2d:c1:58:6c:
7f:01:da:aa:e7:47:29:0b:4d:c0:ec:6c:24:dc:f0:1e:52:9c:
39:d2:ba:8f:43:28:a9:48:af:05:b6:ee:a0:49:39:eb:41:3b:
16:98:fd:41:2f:a3:ec:42:76:10:c8:3a:31:5e:8a:1a:c8:6f:
b7:40:6d:ce:2a:fc:04:df:9f:ee:84:b9:0c:1b:cd:40:b5:20:
8f:9b:6b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org