Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/db6c90-6a90-499a-8f63-9c7f907e4671/1/9JEH9nYMcOr0vpORh3kedBVyQ4I.roa
File: 9JEH9nYMcOr0vpORh3kedBVyQ4I.roa (raw, json)
Hash identifier: Wc2QF5ld7fkOCgJwz/yJzS3apXlvZ+Rge/exONYrvYY=
Subject key identifier: F4:91:07:F6:76:0C:70:EA:F4:BE:93:91:87:79:1E:74:15:72:43:82
Certificate issuer: /CN=079fbf3bd9bd6c9cf86b6bc956427672e795a948
Certificate serial: 08C8FADA
Authority key identifier: 07:9F:BF:3B:D9:BD:6C:9C:F8:6B:6B:C9:56:42:76:72:E7:95:A9:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5-_O9m9bJz4a2vJVkJ2cueVqUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/db6c90-6a90-499a-8f63-9c7f907e4671/1/9JEH9nYMcOr0vpORh3kedBVyQ4I.roa
Signing time: Sat 01 Jan 2022 10:56:35 +0000
ROA not before: Sat 01 Jan 2022 10:56:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49419
IP address blocks: 185.224.56.0/22 maxlen: 22
84.19.128.0/20 maxlen: 20
84.19.144.0/21 maxlen: 21
2a0b:fd80::/48 maxlen: 48
2a0b:fd87:ffff::/48 maxlen: 48
2a0b:fd81::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147389146 (0x8c8fada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079fbf3bd9bd6c9cf86b6bc956427672e795a948
Validity
Not Before: Jan 1 10:56:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f49107f6760c70eaf4be939187791e7415724382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:ce:fc:a7:ce:f1:95:48:46:79:1d:49:e5:
84:57:7e:8c:ae:36:52:7a:32:f1:fd:e9:2b:ce:67:
d6:7d:18:84:80:6d:1c:22:d2:03:f1:62:78:b3:88:
fe:60:75:62:e6:6d:3d:75:13:30:a8:7d:b3:fd:2c:
f5:8e:0b:3f:c4:da:5e:08:db:da:28:e5:09:56:27:
36:65:ea:a9:6d:dc:8a:3d:4d:0a:88:a4:42:f3:b8:
81:36:bb:51:c0:45:a4:85:52:b1:dc:7b:ea:1f:00:
29:4e:b1:9f:0a:8b:ba:40:25:f6:d4:b5:dd:65:e7:
25:56:3c:da:4b:48:19:c6:a9:f0:dd:7f:fd:7d:11:
de:b5:a0:b2:d7:1d:39:34:8d:7a:51:53:01:b4:a4:
ab:60:61:7c:4a:d3:37:e7:71:df:b5:47:97:93:19:
fe:91:de:85:76:9f:06:8a:3f:51:57:b1:04:48:2a:
53:94:ac:75:e0:be:a2:03:03:06:72:e8:03:da:ce:
75:cb:d6:c8:c1:b0:69:4f:fc:fa:1b:43:a4:4b:a2:
0d:8f:97:e9:30:bb:dc:05:47:2b:c9:af:16:01:16:
84:2d:81:2f:6d:cc:61:bd:01:bc:4e:59:db:81:6c:
c0:0f:89:ff:4f:b7:5c:c8:37:38:e5:5b:68:72:8b:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:07:F6:76:0C:70:EA:F4:BE:93:91:87:79:1E:74:15:72:43:82
X509v3 Authority Key Identifier:
keyid:07:9F:BF:3B:D9:BD:6C:9C:F8:6B:6B:C9:56:42:76:72:E7:95:A9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5-_O9m9bJz4a2vJVkJ2cueVqUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/db6c90-6a90-499a-8f63-9c7f907e4671/1/9JEH9nYMcOr0vpORh3kedBVyQ4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/db6c90-6a90-499a-8f63-9c7f907e4671/1/B5-_O9m9bJz4a2vJVkJ2cueVqUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.128.0-84.19.151.255
185.224.56.0/22
IPv6:
2a0b:fd80::/48
2a0b:fd81::/48
2a0b:fd87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
69:5b:1a:18:38:c7:7c:7b:63:2a:ca:a8:e2:11:3a:aa:0d:ad:
0a:30:94:79:db:72:df:4c:c9:a1:3c:79:f7:3d:8c:9a:00:d5:
5f:b5:2f:7b:7e:70:0f:5f:f9:55:52:02:51:b3:5a:50:38:57:
41:40:d6:2d:b6:ba:4e:03:79:cf:bc:52:3b:d0:ea:7b:e5:07:
af:4c:99:9c:c8:13:03:f6:52:9d:43:3f:c6:c7:f7:02:d6:a9:
55:10:da:9d:de:3f:a2:3b:f9:bb:b6:5a:1b:52:15:e7:a4:15:
ca:0a:a5:89:43:8b:e2:f9:e5:ce:57:96:97:1e:87:ed:39:0f:
08:d8:00:9d:dd:ea:28:f3:2f:c9:9f:2b:8c:87:3c:cd:a7:0a:
d9:cb:67:87:62:3a:32:cb:60:83:7f:26:97:0b:ac:e7:d7:c2:
6c:bd:f5:b1:c9:2c:6b:29:37:03:28:7d:95:2e:7e:15:69:d1:
f7:54:10:5f:af:dd:05:39:6d:68:93:2b:f6:f7:66:41:5d:d0:
e5:ba:1d:29:aa:64:26:33:dd:eb:b2:3f:29:46:2b:67:66:ff:
8f:17:c9:bc:d1:99:b9:6b:b8:21:4a:ab:65:54:32:1a:21:3f:
9c:56:4e:d8:60:28:3a:7d:fa:7f:a5:42:39:1b:f7:bb:13:e2:
80:fe:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org