Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Q1BaBoWo4pkbbhJ7_lmrPGwjVDw.roa
File: Q1BaBoWo4pkbbhJ7_lmrPGwjVDw.roa (raw, json)
Hash identifier: sawCvkjj6VjXfLdWWPmXnSR0s4OvDnbxSRItzwpwuLs=
Subject key identifier: 43:50:5A:06:85:A8:E2:99:1B:6E:12:7B:FE:59:AB:3C:6C:23:54:3C
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 1478EFAD
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Q1BaBoWo4pkbbhJ7_lmrPGwjVDw.roa
Signing time: Sat 01 Jan 2022 03:59:02 +0000
ROA not before: Sat 01 Jan 2022 03:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199522
IP address blocks: 89.30.156.0/24 maxlen: 24
89.30.157.0/24 maxlen: 24
83.98.216.0/24 maxlen: 24
2001:16f8:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343469997 (0x1478efad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43505a0685a8e2991b6e127bfe59ab3c6c23543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:b0:44:9f:cc:7c:08:cd:1b:4c:77:cf:48:
20:e1:c2:76:81:b1:20:5e:c1:62:2d:6d:27:5a:98:
54:6f:7b:36:5a:f2:42:79:53:d4:95:19:c5:ac:6a:
39:1e:c3:cc:f4:68:de:6e:6e:ce:52:75:4f:fe:5f:
f8:b2:cb:54:fd:f5:c5:52:14:81:0e:98:1c:36:12:
14:79:8a:23:16:cd:9d:62:f8:04:88:3f:6b:b2:a7:
74:c3:69:2b:42:0c:91:87:a3:8d:c6:70:df:85:f6:
19:79:d7:80:30:eb:52:02:09:c5:bb:21:f8:8e:ce:
96:f6:cb:9c:f8:c6:f8:5d:cf:23:5d:87:93:33:5c:
a6:6d:64:e6:f5:29:a5:22:4f:f7:83:52:e8:68:b3:
c5:e8:51:82:ba:32:0e:34:76:1a:41:d7:04:fd:98:
4d:bd:e7:4e:6c:ff:7c:4d:52:90:0b:6f:db:02:aa:
63:b5:42:b3:c4:a2:70:82:6b:e0:20:64:d1:bc:fc:
6e:36:f4:cb:ab:2e:71:09:74:08:ff:bf:cc:05:6c:
ae:91:4f:c9:5e:fc:b9:da:6b:31:b4:c3:81:08:21:
f4:9c:70:a4:15:f5:3b:cf:b8:5d:1f:f4:5f:f7:c5:
d5:fc:4a:1b:62:a6:4c:48:7e:ef:b4:6b:6c:e0:46:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:50:5A:06:85:A8:E2:99:1B:6E:12:7B:FE:59:AB:3C:6C:23:54:3C
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Q1BaBoWo4pkbbhJ7_lmrPGwjVDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.216.0/24
89.30.156.0/23
IPv6:
2001:16f8:4000::/48
Signature Algorithm: sha256WithRSAEncryption
97:48:5f:b6:83:6d:4c:f8:32:00:ac:93:1e:85:3f:1a:6d:44:
c8:e0:10:c6:f3:8b:98:07:78:e7:b0:23:2a:ec:b4:72:42:2d:
09:02:20:7c:2c:62:9c:68:5e:24:cd:e5:72:6b:e1:47:17:59:
be:7e:96:02:41:19:7a:3f:88:20:a1:7c:27:33:b7:dd:d8:49:
18:70:13:34:3d:5c:5e:d8:dd:44:b4:12:b1:33:a3:d5:0d:8c:
2b:8a:12:40:4c:7b:96:43:c4:86:c4:fe:2c:4e:11:45:e7:91:
2e:96:e1:d6:65:17:d7:13:f9:4a:49:bd:a8:9a:16:1e:c6:94:
76:8b:39:af:f8:05:a5:88:d7:0a:cf:a6:28:dc:2c:76:42:c9:
cd:08:bd:45:4a:8d:3c:a8:0b:0e:26:01:19:ed:09:97:b0:ed:
a1:a9:92:3b:f3:4d:f3:a7:31:07:12:3f:ef:ce:6e:47:65:3b:
7b:4a:a1:a1:9a:6c:ad:95:b2:25:99:ac:d5:dc:4e:45:9f:a5:
ce:5f:df:18:98:bb:e1:cd:f7:a0:63:80:8b:3c:32:78:7a:42:
68:47:1c:37:9a:a6:73:fd:00:69:5a:e8:7b:f3:a7:96:29:8f:
50:b1:72:6d:17:b8:74:a1:75:8a:f3:14:0c:7a:dd:02:0f:0e:
e3:f1:5c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org