Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/F-1nJqXhFPj8rCLIo5_tYyyHxkw.roa
File: F-1nJqXhFPj8rCLIo5_tYyyHxkw.roa (raw, json)
Hash identifier: v+NQU8/2bl/D0dcLE8daZfcQTTFc5rppwfzvGmSBhJA=
Subject key identifier: 17:ED:67:26:A5:E1:14:F8:FC:AC:22:C8:A3:9F:ED:63:2C:87:C6:4C
Certificate issuer: /CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Certificate serial: 01857102CC8428FF6BA93209A02D9305F0C1
Authority key identifier: 5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/F-1nJqXhFPj8rCLIo5_tYyyHxkw.roa
Signing time: Mon 02 Jan 2023 05:44:46 +0000
ROA not before: Mon 02 Jan 2023 05:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205053
IP address blocks: 185.226.64.0/24 maxlen: 24
185.226.64.0/22 maxlen: 22
185.226.66.0/24 maxlen: 24
185.226.65.0/24 maxlen: 24
185.226.67.0/24 maxlen: 24
2a0c:5e00::/64 maxlen: 64
2a0c:5e00::/32 maxlen: 32
2a0c:5e00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:cc:84:28:ff:6b:a9:32:09:a0:2d:93:05:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Validity
Not Before: Jan 2 05:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17ed6726a5e114f8fcac22c8a39fed632c87c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:dd:9d:ab:1b:42:f2:5c:e0:11:d0:e9:78:
50:e6:15:01:b4:ae:74:07:1a:a3:e3:a2:44:83:94:
8e:b7:64:1e:21:42:37:fa:31:3f:76:ed:79:da:1b:
2a:57:8b:b8:9f:d1:72:5c:7b:9d:c1:a5:70:be:bd:
ec:ad:ad:e6:5a:90:f1:73:d2:06:66:a6:85:bf:12:
bb:55:61:5e:3e:8c:d3:32:b0:76:2e:11:e6:ea:35:
d2:ba:78:19:cc:87:89:e0:26:ba:be:36:fe:b0:ee:
55:7e:b3:86:86:5a:18:bb:ca:04:db:bc:af:f9:ca:
ba:9f:62:56:61:11:f7:ee:c3:b5:eb:c3:6f:8f:7f:
a4:46:bf:00:eb:3b:80:3f:12:de:11:cc:99:51:d6:
d8:51:03:a1:dd:2d:16:52:aa:0d:92:1b:69:24:6e:
b7:9c:b5:50:88:b3:3e:17:17:a1:a1:d4:20:ac:bf:
9f:19:0e:64:94:ed:d5:45:f9:af:95:e0:9a:15:5f:
f9:23:65:ee:9e:b8:2a:d6:37:3f:7c:be:7b:a3:0a:
43:7f:35:62:e7:22:27:fd:d4:b3:37:35:56:22:61:
ea:83:81:8d:2d:c4:1d:c7:32:97:66:e1:f4:50:8e:
29:61:e2:f1:8d:fa:c5:c1:1e:ac:91:09:a8:58:c3:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:ED:67:26:A5:E1:14:F8:FC:AC:22:C8:A3:9F:ED:63:2C:87:C6:4C
X509v3 Authority Key Identifier:
keyid:5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/F-1nJqXhFPj8rCLIo5_tYyyHxkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.64.0/22
IPv6:
2a0c:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
28:27:fd:57:a0:65:b4:29:8e:a6:c3:b3:ae:28:cd:13:a8:3a:
78:4d:0b:b0:18:9a:7a:9b:3f:68:e2:07:59:7d:41:1f:ec:23:
ce:48:95:df:53:e6:e7:bd:86:ec:9a:09:40:e9:27:2c:44:f0:
13:22:23:40:4d:84:d6:5b:ae:91:6c:d7:fe:13:5a:5e:c5:ef:
64:44:40:60:6f:ec:d0:f0:3d:37:a7:ee:9c:88:38:59:6b:77:
15:68:45:af:2a:7d:72:66:30:e9:b2:c8:13:4b:e4:0c:da:6a:
2c:98:b2:ca:35:a6:7d:c7:ce:56:f6:78:80:c4:28:69:f1:68:
d6:61:0d:76:97:f6:ce:33:1d:c7:f7:aa:53:2b:64:f8:cd:85:
99:1e:f1:8c:bf:e9:e8:4f:a7:3c:2c:ce:ca:99:9b:65:54:4c:
45:50:10:e3:36:ac:96:d6:a5:55:6a:0c:4b:1d:3b:89:49:cb:
e0:40:60:a8:16:1f:31:6b:1a:3a:a2:70:26:79:69:6d:3d:4f:
55:7f:4c:f0:59:e1:6b:59:61:93:bf:b1:b2:1c:39:8f:8e:15:
ec:94:65:45:32:68:27:63:a3:80:c5:69:ed:ce:3f:a2:e9:c4:
ef:b8:57:6a:0f:ea:46:80:de:b3:27:ec:7b:2b:72:95:c7:9c:
9d:99:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:21 2024 by rpki-client on console-ams.rpki-client.org