Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/GoxoO7cKGfcaTXE-K-R8UX5PeI4.roa
File: GoxoO7cKGfcaTXE-K-R8UX5PeI4.roa (raw, json)
Hash identifier: bmNK7daUv2BcIofbeTJt+ueslMq3QWLMba8jcrM7jxo=
Subject key identifier: 1A:8C:68:3B:B7:0A:19:F7:1A:4D:71:3E:2B:E4:7C:51:7E:4F:78:8E
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 01856DD4087A6C4FD7A31A8877EABD573AF2
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/GoxoO7cKGfcaTXE-K-R8UX5PeI4.roa
Signing time: Sun 01 Jan 2023 14:54:50 +0000
ROA not before: Sun 01 Jan 2023 14:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30870
IP address blocks: 89.30.150.0/23 maxlen: 24
89.30.154.0/23 maxlen: 24
83.98.209.0/24 maxlen: 24
83.98.216.0/22 maxlen: 24
83.98.218.0/23 maxlen: 24
83.98.217.0/24 maxlen: 24
83.98.220.0/23 maxlen: 24
83.98.136.0/23 maxlen: 24
83.98.148.0/24 maxlen: 24
83.98.154.0/23 maxlen: 24
83.98.167.0/24 maxlen: 24
83.98.182.0/24 maxlen: 24
213.247.55.0/24 maxlen: 24
213.247.57.0/24 maxlen: 24
213.247.62.0/23 maxlen: 23
2001:16f8:15::/48 maxlen: 48
2001:16f8:666::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:08:7a:6c:4f:d7:a3:1a:88:77:ea:bd:57:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 14:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a8c683bb70a19f71a4d713e2be47c517e4f788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:22:19:9a:29:1c:06:75:44:b2:7c:41:24:
42:71:6b:e3:f9:e8:70:46:31:57:ba:23:0b:da:22:
20:c3:64:39:9a:76:14:a0:a6:e2:7e:14:00:97:d6:
03:67:21:6a:5c:eb:46:ca:d9:0d:fb:b3:ae:ea:80:
e9:85:bb:59:41:ba:f4:39:80:66:f3:d1:51:4d:1e:
25:49:37:a5:4f:fb:a4:18:73:19:10:b3:6e:c4:2c:
ac:ab:bb:90:1e:6d:0c:f8:d7:06:c3:65:85:1a:24:
0f:34:bf:47:9f:b3:0c:c9:ae:56:06:a1:5e:9e:a5:
3f:35:28:ac:d9:e5:9e:84:e0:e1:06:c6:89:e3:55:
87:a2:e1:0b:4c:cf:5d:1a:e7:f5:08:1a:0f:36:cd:
4c:f7:7f:ca:9d:a1:d5:d8:c5:55:64:f7:41:e1:ea:
d7:57:17:07:00:a0:93:92:05:99:89:10:98:7a:44:
e4:21:37:7b:94:d9:48:c2:6c:25:17:f3:7f:d9:2a:
db:aa:c7:68:1d:b3:ed:57:07:46:d7:ac:90:09:f2:
28:f3:d7:f8:32:44:db:b0:44:63:2d:e4:75:e8:f1:
7d:6c:fb:19:fb:af:b9:e3:98:c5:10:a8:f2:bd:14:
c3:77:41:4d:26:25:cf:1c:21:2a:e3:3d:1c:1d:e2:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:68:3B:B7:0A:19:F7:1A:4D:71:3E:2B:E4:7C:51:7E:4F:78:8E
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/GoxoO7cKGfcaTXE-K-R8UX5PeI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.136.0/23
83.98.148.0/24
83.98.154.0/23
83.98.167.0/24
83.98.182.0/24
83.98.209.0/24
83.98.216.0-83.98.221.255
89.30.150.0/23
89.30.154.0/23
213.247.55.0/24
213.247.57.0/24
213.247.62.0/23
IPv6:
2001:16f8:15::/48
2001:16f8:666::/48
Signature Algorithm: sha256WithRSAEncryption
47:a8:2c:e5:f5:7f:9b:8a:1c:a2:dc:0e:c6:da:ed:fa:95:7c:
cf:d4:07:ce:fc:27:4b:03:f2:01:2f:6b:ab:00:fd:d1:bf:44:
89:5c:f1:30:84:9e:f3:15:4c:97:76:16:51:78:26:6f:7e:c2:
a2:f3:07:60:04:47:82:48:29:47:0b:fb:00:d4:64:e5:0e:5c:
c2:2d:cb:d6:f0:1c:f5:80:1e:e6:43:f2:aa:91:66:0c:c9:3d:
dd:20:c6:0b:06:69:61:d5:a2:e3:1d:3c:f9:f0:32:40:fe:5a:
1b:ed:11:71:c5:1c:6b:1f:3b:30:cf:bf:57:9c:ff:58:1b:4a:
9f:43:a1:a3:66:63:23:2f:e6:e7:f7:ae:05:3c:e7:17:31:4b:
df:af:03:46:7c:7c:4e:c1:c7:e0:0a:dd:21:3d:02:39:10:5b:
85:80:c0:b5:2f:68:6f:42:2f:ae:2f:21:fd:4b:8a:ba:43:19:
9a:cb:ed:40:f4:a5:e8:58:69:88:f3:86:21:f8:8f:8f:1d:fc:
ed:39:81:9c:66:a6:57:be:94:b1:e6:d0:c9:45:f8:fe:0e:74:
27:ee:f9:a9:ad:99:12:47:bc:1a:15:c8:5e:24:59:c2:48:23:
59:1e:dc:a6:64:79:76:c6:bc:01:19:d6:20:e7:ad:f8:8c:7a:
60:b8:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org