Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/anWkLyAhPhC4gQ4xQ51g0I8G760.roa
File: anWkLyAhPhC4gQ4xQ51g0I8G760.roa (raw, json)
Hash identifier: /2jBRZdDnDiYdmrvpwIYsKxwl230iejufaB3YHE3Jvw=
Subject key identifier: 6A:75:A4:2F:20:21:3E:10:B8:81:0E:31:43:9D:60:D0:8F:06:EF:AD
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 15F72142
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/anWkLyAhPhC4gQ4xQ51g0I8G760.roa
Signing time: Tue 14 Jun 2022 11:17:43 +0000
ROA not before: Tue 14 Jun 2022 11:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25525
IP address blocks: 83.98.201.0/24 maxlen: 24
89.30.169.0/24 maxlen: 24
213.189.0.0/19 maxlen: 24
89.30.174.0/23 maxlen: 24
213.247.32.0/19 maxlen: 24
213.247.37.0/24 maxlen: 24
89.18.160.0/19 maxlen: 24
89.30.128.0/17 maxlen: 24
85.92.128.0/19 maxlen: 24
83.98.128.0/18 maxlen: 24
89.30.193.0/24 maxlen: 24
93.175.176.0/20 maxlen: 24
195.234.173.0/24 maxlen: 24
2001:16f8::/32 maxlen: 32
2001:4198::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368517442 (0x15f72142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jun 14 11:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a75a42f20213e10b8810e31439d60d08f06efad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:7b:54:13:5b:5d:87:99:2b:65:d2:9b:2d:
9c:f6:64:96:96:0c:ea:5e:15:43:46:14:55:e8:b4:
e5:89:ac:6a:2e:ee:22:8c:9d:35:d1:eb:7e:0e:ea:
b2:9e:6d:63:5e:35:e2:a0:23:4c:d2:af:ab:fd:c1:
98:80:33:13:0e:19:20:fd:53:2f:13:fd:17:f6:3a:
2f:0d:c4:02:b0:e5:dd:7d:73:e7:44:4f:71:72:cc:
dc:93:b2:40:c0:74:01:bd:ae:0c:99:37:bd:3a:ca:
50:30:a6:4c:d3:b0:b9:dd:b5:92:af:60:3a:2b:ba:
1f:47:f3:26:17:f8:eb:36:b8:e5:52:7e:35:bd:d8:
b5:7c:1c:60:c8:8a:4d:9c:b3:e2:24:ea:e3:4e:89:
ad:0d:24:41:1e:cd:ff:b0:64:4d:62:5e:5b:f3:a2:
fa:0b:78:83:a9:d0:31:d6:de:6a:65:7f:3e:0e:37:
59:c4:b9:f2:69:60:85:6c:66:3f:6d:0f:01:0a:4b:
fc:b7:d0:f9:1f:7b:06:b4:97:46:a9:f4:b6:25:1d:
a6:cc:cf:f4:c0:33:6e:ac:16:48:5f:ea:8d:04:eb:
5d:d2:29:07:41:e2:d0:6e:44:02:7b:c5:da:db:a9:
e1:7c:f8:f2:4c:8e:40:c3:80:8f:10:d5:8d:05:4d:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:A4:2F:20:21:3E:10:B8:81:0E:31:43:9D:60:D0:8F:06:EF:AD
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/anWkLyAhPhC4gQ4xQ51g0I8G760.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.128.0/18
83.98.201.0/24
85.92.128.0/19
89.18.160.0/19
89.30.128.0/17
93.175.176.0/20
195.234.173.0/24
213.189.0.0/19
213.247.32.0/19
IPv6:
2001:16f8::/32
2001:4198::/32
Signature Algorithm: sha256WithRSAEncryption
50:2c:82:e4:02:d5:79:de:7e:e4:e0:e7:e2:54:05:90:6f:9b:
e1:00:f2:25:24:1e:a0:02:e7:56:de:02:91:38:c7:93:49:91:
c1:d5:bc:80:85:26:35:5a:6d:82:71:6f:ab:f9:25:81:d1:70:
14:18:88:70:cc:e5:22:28:a1:d3:86:be:07:be:95:ee:e5:5a:
44:f3:79:3f:92:ac:5c:3e:b1:6d:86:cf:b7:88:a3:36:10:21:
9c:94:c1:d3:3f:25:29:2c:fe:23:09:43:fb:86:e6:b5:99:38:
f3:59:ee:7f:10:c9:89:1b:c1:a1:e6:8a:7a:cf:27:da:23:da:
c2:60:62:58:84:bb:0b:1c:be:21:f1:6a:67:c4:78:e4:d2:15:
9b:5a:6f:b1:65:1e:d6:27:d1:02:d5:40:c1:95:21:0c:da:58:
e2:dd:f9:5c:e4:c7:e0:b4:fb:6e:e5:dd:35:69:65:4a:3f:f3:
88:83:87:85:58:b2:42:e0:f3:3b:77:5e:60:14:9e:bd:90:b2:
38:35:b0:18:8a:26:61:28:a6:c1:3a:41:33:ae:de:3f:61:ff:
c3:9e:89:a3:bf:96:64:fd:b6:c2:d2:2d:25:06:ea:da:72:5f:
a5:2a:23:dc:a9:b6:e9:f1:3c:e7:5c:29:3d:bd:c4:0c:d2:60:
3b:18:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org