Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/jFwXsqVr50dDtqs1O4hRUxK5J3c.roa
File: jFwXsqVr50dDtqs1O4hRUxK5J3c.roa (raw, json)
Hash identifier: j18KlLrNRS+1jWkjsCQbqrM7S7oPJ7mA33GymOQHCdc=
Subject key identifier: 8C:5C:17:B2:A5:6B:E7:47:43:B6:AB:35:3B:88:51:53:12:B9:27:77
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 1475D7BA
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/jFwXsqVr50dDtqs1O4hRUxK5J3c.roa
Signing time: Sat 01 Jan 2022 03:59:00 +0000
ROA not before: Sat 01 Jan 2022 03:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42158
IP address blocks: 94.198.28.0/22 maxlen: 24
85.158.164.0/22 maxlen: 22
85.158.160.0/22 maxlen: 24
94.198.24.0/22 maxlen: 24
2a00:1290:20::/48 maxlen: 48
2a00:1290:10::/48 maxlen: 48
2a00:1290:30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343267258 (0x1475d7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c5c17b2a56be74743b6ab353b88515312b92777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:81:02:70:90:07:7c:84:33:7f:f8:32:d2:
a6:41:b1:9b:0c:ef:b3:2d:91:a0:39:01:0d:cd:60:
6e:e8:b1:22:01:d4:a4:c4:c8:1a:c6:73:6b:2c:49:
2a:38:7d:4d:ee:42:6e:20:88:c1:0d:64:31:f1:08:
d8:30:6c:bb:12:06:d2:7d:5b:b6:d9:4e:5d:5d:c7:
52:ea:ea:9c:81:97:5e:60:69:7c:84:80:eb:66:db:
07:2c:05:4d:89:b4:6d:94:94:a5:c0:ff:39:0d:d5:
30:7b:41:2b:45:8a:10:73:94:0a:a4:6c:9e:aa:7e:
36:5a:47:00:c0:52:c5:1f:b7:e8:74:68:a8:46:4e:
c5:45:02:5e:6e:78:13:98:f0:18:4b:b6:1b:f6:09:
cc:28:0f:95:86:94:dc:98:a7:27:cd:5a:46:e8:a7:
8c:f0:48:af:c9:b8:04:eb:b9:1f:7a:44:84:cb:16:
05:64:e2:6e:65:ac:4e:31:15:5d:18:ff:a1:53:05:
df:66:ef:9c:f5:a4:47:7d:07:8f:d7:73:31:18:0c:
4c:44:70:68:ee:47:4e:52:70:d8:81:25:6d:ba:3c:
7f:70:f6:72:c5:d9:2c:ab:59:3a:8a:7d:37:f2:22:
ee:c4:3b:37:8f:e4:47:69:ca:90:f4:a0:a0:ad:77:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:17:B2:A5:6B:E7:47:43:B6:AB:35:3B:88:51:53:12:B9:27:77
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/jFwXsqVr50dDtqs1O4hRUxK5J3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.160.0/21
94.198.24.0/21
IPv6:
2a00:1290:10::/48
2a00:1290:20::/48
2a00:1290:30::/48
Signature Algorithm: sha256WithRSAEncryption
7a:15:11:d6:67:de:01:ca:d6:1f:0d:5f:39:80:7d:1f:ce:05:
02:02:e3:1d:18:f7:7c:40:d5:60:c1:10:fd:a6:ee:a3:d4:5e:
54:81:a8:60:e3:63:96:b9:99:16:4f:0e:3b:a2:92:65:c7:19:
a8:55:e6:7e:93:ab:36:48:54:0d:fa:1e:91:ba:b9:7b:5e:93:
0b:c5:1d:22:0b:c5:e5:66:64:e7:db:fb:7d:37:75:4c:70:35:
40:d6:43:dd:51:a5:2d:08:b9:ff:a6:3c:e9:8b:3b:03:29:7d:
1a:19:13:db:e5:6a:45:ed:cf:23:21:32:f1:03:cf:75:96:e7:
fb:90:69:d1:60:cb:f1:45:f1:5e:35:8b:a6:20:d0:5a:42:5c:
39:c5:f5:48:a3:81:b4:5b:65:a4:7e:8e:d2:96:b6:70:9c:2e:
48:a3:4a:65:4f:bb:2a:b2:c7:fd:18:78:a8:f3:ef:80:d8:e0:
96:62:b8:ab:fd:c5:8c:c5:08:0b:c0:47:17:17:92:45:fe:a3:
f8:aa:6c:5f:fe:6f:6f:8d:25:07:0c:61:13:65:6d:c7:b6:d2:
9a:64:7a:5b:e8:f0:d3:ab:52:ce:c2:7f:20:be:19:e6:7c:d7:
b9:2d:46:c0:be:7a:3e:12:d2:86:fa:c3:af:87:86:cf:81:f5:
f1:25:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org