Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/24rPX8fdxqIjI71PSPwbJYRlFmE.roa
File: 24rPX8fdxqIjI71PSPwbJYRlFmE.roa (raw, json)
Hash identifier: t+B9Z7mS/5ND5GtDx2Rj/YeW+Vj3n2hy8Pno1i/6ITM=
Subject key identifier: DB:8A:CF:5F:C7:DD:C6:A2:23:23:BD:4F:48:FC:1B:25:84:65:16:61
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 16259DD0
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/24rPX8fdxqIjI71PSPwbJYRlFmE.roa
Signing time: Mon 04 Jul 2022 12:27:25 +0000
ROA not before: Mon 04 Jul 2022 12:27:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25525
IP address blocks: 83.98.201.0/24 maxlen: 24
89.30.169.0/24 maxlen: 24
213.189.0.0/19 maxlen: 24
89.30.174.0/23 maxlen: 24
213.247.32.0/19 maxlen: 24
213.247.37.0/24 maxlen: 24
89.18.160.0/19 maxlen: 24
85.92.128.0/19 maxlen: 24
83.98.128.0/18 maxlen: 24
89.30.193.0/24 maxlen: 24
93.175.176.0/20 maxlen: 24
195.234.173.0/24 maxlen: 24
2001:16f8::/32 maxlen: 32
2001:4198::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371563984 (0x16259dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jul 4 12:27:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db8acf5fc7ddc6a22323bd4f48fc1b2584651661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:c4:58:78:08:4e:09:a1:69:63:2e:c7:3b:
f5:41:3d:9c:50:9a:02:9b:51:37:94:4d:74:7f:fb:
f8:fd:79:48:1f:34:ae:5d:19:84:f9:02:9c:99:ce:
56:61:c7:85:71:69:bb:43:72:56:49:5f:fd:06:e5:
71:3a:93:ce:62:f0:b0:65:8e:58:30:b2:fc:e4:10:
d0:fb:89:f0:0d:35:29:94:b8:47:ef:bf:1b:ef:c4:
17:4e:c0:3a:3d:dd:21:47:49:12:6a:6b:8c:f6:bb:
a3:f3:a7:ec:db:3f:0f:7c:84:fe:75:4b:af:58:76:
28:35:ac:ed:73:af:ea:89:1a:bd:ad:5f:6d:7f:28:
06:6d:23:20:6b:cf:9c:49:d5:de:c3:5a:00:d1:82:
62:4b:0e:3a:69:74:00:3c:e7:2c:9f:45:37:f8:44:
cf:34:89:cf:c8:fd:0c:84:25:2e:47:d7:d3:f3:dd:
ac:9c:50:9a:e2:85:c0:90:94:85:ad:94:5a:32:54:
b1:81:8b:ca:d1:dc:2e:b3:5d:03:65:af:2e:69:22:
fd:c2:eb:96:14:fd:3a:7e:ca:8f:e1:64:c8:49:78:
db:f3:dc:c2:8a:38:52:5d:80:e3:ae:7e:f6:87:9e:
b4:dd:6f:f8:95:0a:fb:73:82:12:3b:30:9b:c0:79:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:CF:5F:C7:DD:C6:A2:23:23:BD:4F:48:FC:1B:25:84:65:16:61
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/24rPX8fdxqIjI71PSPwbJYRlFmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.128.0/18
83.98.201.0/24
85.92.128.0/19
89.18.160.0/19
89.30.169.0/24
89.30.174.0/23
89.30.193.0/24
93.175.176.0/20
195.234.173.0/24
213.189.0.0/19
213.247.32.0/19
IPv6:
2001:16f8::/32
2001:4198::/32
Signature Algorithm: sha256WithRSAEncryption
53:6e:cd:09:82:f0:86:32:55:89:50:f0:48:0c:28:da:be:dc:
4d:47:b0:e6:28:b0:19:9a:2e:53:ae:fe:30:3d:2e:4b:7d:3c:
91:31:ba:b2:ae:d5:9d:98:a5:2a:1b:9c:35:fd:1f:16:8b:5b:
83:4a:f7:c2:39:db:32:4e:f2:a3:0c:2e:55:84:55:4f:a2:08:
2a:05:01:17:a8:06:de:b2:ed:ba:1c:13:2d:1e:e1:08:46:8b:
7c:e4:80:06:8a:c4:d7:1c:1e:82:5a:f4:d4:a7:cb:e7:db:aa:
97:4c:b1:bd:ef:ba:2f:02:3d:51:f7:ed:de:cd:7a:47:f5:60:
da:d9:37:24:f6:a6:69:ab:0b:cd:ff:82:14:20:ca:f3:9d:a9:
9e:63:e3:d8:c3:47:b4:22:b7:ed:bd:ea:73:19:27:45:dc:41:
f1:50:51:c9:7f:89:ef:f7:db:46:f6:66:6f:c0:d6:8a:59:12:
2d:23:68:45:e6:4b:bf:e9:42:d7:0d:d9:a5:5d:dd:d1:1c:2a:
9c:29:e9:42:bc:e5:0c:6a:41:89:49:7b:67:3a:c6:38:59:32:
2f:56:68:5d:a7:7b:30:9c:1f:b2:7f:63:e1:12:bc:6e:58:90:
d1:4f:85:36:eb:fb:5d:76:e0:ad:79:6c:fa:b2:cc:85:b5:fe:
90:93:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org