Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/FWSaAlMV_qwwDYmoakoxTN9OYOo.roa
File: FWSaAlMV_qwwDYmoakoxTN9OYOo.roa (raw, json)
Hash identifier: L+LM906a4TO8uivj/puXTY6Rt7b2BQw25dk08uWiFOo=
Subject key identifier: 15:64:9A:02:53:15:FE:AC:30:0D:89:A8:6A:4A:31:4C:DF:4E:60:EA
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 14734997
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/FWSaAlMV_qwwDYmoakoxTN9OYOo.roa
Signing time: Sat 01 Jan 2022 03:59:00 +0000
ROA not before: Sat 01 Jan 2022 03:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34762
IP address blocks: 94.198.26.0/23 maxlen: 24
94.198.28.0/22 maxlen: 24
85.158.160.0/22 maxlen: 24
85.158.164.0/22 maxlen: 24
185.113.52.0/24 maxlen: 24
185.113.196.0/22 maxlen: 24
94.198.24.0/23 maxlen: 24
213.214.96.0/24 maxlen: 24
213.214.103.0/24 maxlen: 24
213.214.101.0/24 maxlen: 24
213.214.99.0/24 maxlen: 24
213.214.112.0/23 maxlen: 24
213.214.107.0/24 maxlen: 24
213.214.116.0/23 maxlen: 24
213.214.114.0/24 maxlen: 24
213.214.114.0/23 maxlen: 24
213.171.128.0/20 maxlen: 24
213.214.120.0/22 maxlen: 24
213.214.124.0/22 maxlen: 24
2a02:2858:400::/40 maxlen: 48
2a02:2858:200::/40 maxlen: 48
2a00:1bd8::/32 maxlen: 64
2a02:2858::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343099799 (0x14734997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15649a025315feac300d89a86a4a314cdf4e60ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:f5:32:0a:9b:e1:a6:7e:16:79:a3:e4:30:
72:5e:c0:22:c0:8c:92:28:49:86:be:a6:8d:96:64:
31:9c:6c:b4:e8:38:41:38:d9:b3:0e:05:c5:e6:09:
93:d1:4f:b3:92:a9:70:bf:62:d4:ff:95:1f:7a:78:
d8:2a:54:66:04:00:82:90:06:09:01:9f:1f:d8:d1:
b4:71:c1:f1:e9:b1:fd:92:c3:28:9c:b3:3b:df:10:
a6:f2:66:34:2d:23:23:9d:2f:97:40:ad:65:8c:06:
a7:d9:e6:fb:d1:d8:b3:6c:a6:2e:0b:35:8a:e9:26:
df:08:b0:a9:51:46:42:2a:b5:74:8b:c4:e8:fa:bf:
4a:9e:e1:0b:d7:31:80:c2:a3:46:3a:73:1d:a8:30:
7a:1b:bc:3c:ad:6b:3a:02:88:a2:e9:cc:4f:d6:c6:
bd:b7:ef:43:f2:86:34:3b:19:24:6f:cb:9d:ea:8d:
59:58:34:90:14:4b:65:8d:56:ab:fa:5e:33:a3:e4:
a6:03:49:35:ce:38:83:26:c5:97:10:34:8b:a2:92:
96:d4:a4:38:05:d8:2b:bb:09:ba:a6:c7:ca:82:0e:
95:fe:9d:b5:27:5c:b5:6b:71:f1:c9:53:9a:14:07:
81:09:63:4d:21:74:57:de:6d:a7:3c:6a:fa:6b:a4:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:9A:02:53:15:FE:AC:30:0D:89:A8:6A:4A:31:4C:DF:4E:60:EA
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/FWSaAlMV_qwwDYmoakoxTN9OYOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.160.0/21
94.198.24.0/21
185.113.52.0/24
185.113.196.0/22
213.171.128.0/20
213.214.96.0/24
213.214.99.0/24
213.214.101.0/24
213.214.103.0/24
213.214.107.0/24
213.214.112.0-213.214.117.255
213.214.120.0/21
IPv6:
2a00:1bd8::/32
2a02:2858::/29
Signature Algorithm: sha256WithRSAEncryption
18:50:a6:ba:fc:0e:32:81:05:21:c1:21:80:af:0b:46:f2:ef:
31:6c:e6:0e:00:78:8c:65:46:64:9d:c9:b3:56:ec:d5:70:e0:
36:07:e8:84:2e:7f:6c:9c:d8:b2:7b:f2:41:4e:0a:16:00:30:
d8:d8:96:6d:7b:80:8c:a4:83:59:50:72:ff:45:f2:2b:00:07:
86:7d:05:c8:29:c2:52:82:f1:d0:63:ff:ee:2f:56:b7:d0:dc:
46:35:4d:67:89:4d:ec:39:c1:0c:2b:c7:4b:a2:81:ac:f9:b5:
b3:90:ae:3d:14:46:e2:43:05:50:ef:7c:81:bf:2b:a3:6c:04:
74:74:05:bc:68:9a:e8:2e:4f:32:9a:cb:f4:02:ee:c3:f7:bf:
ed:a3:4f:0c:ad:be:37:4e:5d:37:78:51:5d:c3:7b:14:6a:63:
08:75:bd:68:1b:ce:35:86:33:cb:5c:44:0d:3a:00:f6:db:64:
22:0d:9c:ab:a6:81:e2:b9:74:74:4e:1a:c4:a8:c2:39:32:50:
2a:70:fa:d8:ea:3e:cb:2f:dd:4c:fb:88:d2:5f:9e:c9:7b:16:
1e:5b:b1:a1:07:d3:01:07:5f:fe:f9:88:23:86:8c:8b:84:0e:
e4:09:45:31:c2:e1:b3:a3:08:bf:cd:cd:3b:a7:75:f1:06:bc:
57:4a:05:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org