Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/8dLBRmtLLAfnCtNmpkoxxFOxrr0.roa
File: 8dLBRmtLLAfnCtNmpkoxxFOxrr0.roa (raw, json)
Hash identifier: 0SriUWxJ9QSyyewX4UpHSvvFGR1jtq+KeCcwGDKpzzs=
Subject key identifier: F1:D2:C1:46:6B:4B:2C:07:E7:0A:D3:66:A6:4A:31:C4:53:B1:AE:BD
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 01856DD40C0E6A3E783D5F91F2900D70CC75
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/8dLBRmtLLAfnCtNmpkoxxFOxrr0.roa
Signing time: Sun 01 Jan 2023 14:54:51 +0000
ROA not before: Sun 01 Jan 2023 14:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48635
IP address blocks: 83.98.147.0/24 maxlen: 24
83.98.177.0/24 maxlen: 24
85.92.132.0/24 maxlen: 24
85.92.131.0/24 maxlen: 24
85.92.128.0/23 maxlen: 23
85.92.139.0/24 maxlen: 24
85.92.137.0/24 maxlen: 24
85.92.145.0/24 maxlen: 24
85.92.147.0/24 maxlen: 24
89.18.189.0/24 maxlen: 24
89.18.190.0/24 maxlen: 24
89.30.144.0/23 maxlen: 23
89.30.160.0/22 maxlen: 22
213.189.2.0/23 maxlen: 23
213.189.9.0/24 maxlen: 24
89.18.161.0/24 maxlen: 24
89.18.164.0/22 maxlen: 22
89.18.172.0/23 maxlen: 23
89.18.168.0/24 maxlen: 24
89.18.171.0/24 maxlen: 24
89.18.169.0/24 maxlen: 24
89.18.174.0/24 maxlen: 24
89.18.181.0/24 maxlen: 24
213.189.17.0/24 maxlen: 24
213.189.23.0/24 maxlen: 24
213.189.29.0/24 maxlen: 24
213.189.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:0c:0e:6a:3e:78:3d:5f:91:f2:90:0d:70:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 14:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1d2c1466b4b2c07e70ad366a64a31c453b1aebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:d4:04:45:ee:f1:7e:62:cf:dd:0e:3b:e0:
5d:ad:e0:05:9c:b4:b6:71:0a:93:72:9b:3d:87:61:
c1:99:ac:bd:b7:47:5b:c9:81:9e:ee:90:f8:94:12:
75:72:01:30:68:f0:ad:e6:76:07:9d:d6:ba:1e:f6:
e1:9b:0b:d5:be:01:8c:f7:a1:0a:6d:b0:86:1d:81:
af:c7:86:de:09:db:6f:f9:14:fd:3f:59:0f:eb:56:
9a:b6:86:da:2c:f8:c0:5d:28:e3:de:b9:00:9c:33:
7a:c8:b6:a3:32:17:6c:6b:8a:d0:b7:c8:26:71:12:
d0:0c:57:f2:1b:1b:94:5f:58:8b:ba:ad:b9:8d:b5:
0c:a4:39:8a:c3:28:a3:e5:c6:f0:5f:3e:b4:d1:5a:
28:d6:8c:ed:ae:a8:fb:10:95:75:a1:07:c4:e6:c4:
7c:b6:fc:c5:8e:00:23:03:a8:0c:c6:97:da:3a:5b:
fd:39:d5:57:7e:06:f2:bd:43:a6:41:9c:1c:ce:b2:
e0:a4:91:c7:af:67:78:2d:b5:12:5f:4f:ba:c0:1e:
3d:fa:1a:fb:f7:98:f8:e0:3b:a7:8b:84:92:20:99:
12:ce:98:fc:10:2c:8c:8e:6d:0b:a8:01:8e:ae:ee:
ef:49:bc:38:9e:c7:7d:e4:54:e5:41:f6:d9:b3:1d:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D2:C1:46:6B:4B:2C:07:E7:0A:D3:66:A6:4A:31:C4:53:B1:AE:BD
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/8dLBRmtLLAfnCtNmpkoxxFOxrr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.147.0/24
83.98.177.0/24
85.92.128.0/23
85.92.131.0-85.92.132.255
85.92.137.0/24
85.92.139.0/24
85.92.145.0/24
85.92.147.0/24
89.18.161.0/24
89.18.164.0-89.18.169.255
89.18.171.0-89.18.174.255
89.18.181.0/24
89.18.189.0-89.18.190.255
89.30.144.0/23
89.30.160.0/22
213.189.2.0/23
213.189.9.0/24
213.189.17.0/24
213.189.23.0/24
213.189.27.0/24
213.189.29.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9d:aa:43:e2:d2:14:3f:6b:b1:27:17:8f:14:23:90:5b:bd:
ab:a3:50:9a:a4:c4:80:27:22:c0:74:3b:8f:b0:fd:ca:65:7e:
4c:89:64:ef:27:9b:67:bc:7e:1b:79:4c:fa:96:f8:e0:b4:ad:
94:51:df:d4:98:5b:5c:68:4c:bc:28:14:20:fc:45:20:4b:74:
1f:ad:ef:69:28:fa:17:2d:5b:ae:39:c0:9b:64:8e:7d:16:38:
43:6c:ed:6c:a4:43:3e:16:31:bc:64:ca:1d:86:04:b1:69:03:
06:23:1e:e9:00:0d:41:f8:36:f9:7f:f7:e8:a7:e5:91:8b:5d:
17:f7:51:d5:db:26:f2:3b:c8:f9:80:15:5d:de:4d:4a:0c:55:
06:de:21:02:8e:64:5e:c7:fc:ae:94:47:58:bc:b3:cf:30:14:
9b:a2:48:33:32:2d:09:b6:7b:a6:ce:3c:89:8b:63:1d:60:29:
41:e0:65:49:0b:a5:3e:7a:d3:ae:53:9d:96:b0:7d:46:87:dc:
f4:0f:f3:a1:e4:81:15:29:cd:1c:d9:a9:74:9a:90:57:94:f7:
33:b6:3f:8e:b7:2b:27:31:69:41:f2:c3:0b:40:1d:c6:53:38:
09:36:84:74:bb:f4:5c:92:8d:46:0d:39:98:8a:83:6e:f3:5e:
49:5f:a2:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org