Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/ntenawpcLe0OB3W0_j3KKP-aeZw.roa
File: ntenawpcLe0OB3W0_j3KKP-aeZw.roa (raw, json)
Hash identifier: ifUGaRGUHPLFc3hm9qilROdWKpRDittjSNCVa3WgUiw=
Subject key identifier: 9E:D7:A7:6B:0A:5C:2D:ED:0E:07:75:B4:FE:3D:CA:28:FF:9A:79:9C
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 01870E599E0CA4F33203F883B49E68E34811
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/ntenawpcLe0OB3W0_j3KKP-aeZw.roa
Signing time: Thu 23 Mar 2023 12:02:46 +0000
ROA not before: Thu 23 Mar 2023 12:02:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25525
IP address blocks: 83.98.201.0/24 maxlen: 24
89.30.169.0/24 maxlen: 24
213.189.0.0/19 maxlen: 24
89.30.174.0/23 maxlen: 24
213.247.32.0/19 maxlen: 24
213.247.37.0/24 maxlen: 24
89.18.160.0/19 maxlen: 24
85.92.128.0/19 maxlen: 24
83.98.128.0/18 maxlen: 24
89.30.193.0/24 maxlen: 24
93.175.176.0/20 maxlen: 24
195.234.173.0/24 maxlen: 24
2001:4198::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:59:9e:0c:a4:f3:32:03:f8:83:b4:9e:68:e3:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Mar 23 12:02:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ed7a76b0a5c2ded0e0775b4fe3dca28ff9a799c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:fb:0a:7b:3d:84:d7:cf:02:75:81:57:d9:
ab:e4:35:6a:19:91:1c:de:5c:e9:31:c1:92:07:76:
f7:1d:b3:b9:91:80:4c:19:8f:02:7e:1a:ec:b0:d0:
d2:e0:8e:3f:7c:15:5f:e3:7b:a9:de:7a:4b:24:47:
a3:33:6a:b9:46:97:e8:b0:71:bf:a3:b8:5e:1e:d1:
48:3b:3f:bb:6d:75:d4:ab:2c:3d:ea:dd:42:62:cf:
43:85:81:2b:0e:c8:ff:43:a2:12:2c:c7:49:66:73:
59:77:57:b6:cc:24:59:9b:ee:cb:7e:d2:91:6b:8c:
cf:35:bb:6f:24:98:ae:46:79:80:4b:58:e4:fa:eb:
48:5d:13:88:46:03:f7:a2:bb:00:9c:1e:7b:b6:1a:
43:f2:6d:53:b8:83:ed:1f:0c:3b:29:a4:56:1c:7a:
4f:cf:ba:e6:3e:83:91:5a:00:34:cb:6e:92:db:94:
42:3a:a4:0b:df:51:49:bb:a3:86:d1:47:6f:ed:2a:
bb:7f:54:88:7b:d4:5c:2c:fc:47:2c:13:ec:5a:35:
60:78:46:7d:7c:ac:b4:27:e2:15:08:f4:e1:51:a9:
dd:37:d1:cc:9e:21:17:57:16:49:9a:dd:d1:ae:f2:
97:fc:d0:9f:95:b0:64:15:57:27:ff:99:8f:06:e1:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:A7:6B:0A:5C:2D:ED:0E:07:75:B4:FE:3D:CA:28:FF:9A:79:9C
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/ntenawpcLe0OB3W0_j3KKP-aeZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.128.0/18
83.98.201.0/24
85.92.128.0/19
89.18.160.0/19
89.30.169.0/24
89.30.174.0/23
89.30.193.0/24
93.175.176.0/20
195.234.173.0/24
213.189.0.0/19
213.247.32.0/19
IPv6:
2001:4198::/32
Signature Algorithm: sha256WithRSAEncryption
7a:1b:61:91:fa:3a:72:f2:4f:1f:48:99:1d:b0:d6:80:6e:f8:
fe:00:cf:42:d2:18:76:e7:61:cc:c9:2a:2b:9d:cb:70:83:14:
0d:5e:20:99:58:71:32:25:a2:83:8f:36:ef:d9:89:0d:2b:18:
f9:72:bb:c5:5c:c2:5f:80:10:db:ec:bd:b1:ca:b1:c4:dd:b0:
f7:65:1e:6d:98:f9:87:8d:3b:a3:c3:cd:bb:4e:5d:70:50:f3:
14:8c:09:bf:32:b1:af:a5:5f:82:89:3d:b4:78:2a:03:88:c9:
c6:8e:a1:d7:47:87:9d:ee:84:58:ee:13:fe:c9:13:88:40:5c:
2e:c9:02:8b:ae:87:0c:78:c1:7c:ac:aa:11:fd:fe:45:71:dc:
44:98:62:05:b5:81:52:c6:d3:f2:29:92:30:6a:d3:94:b1:dc:
3f:45:d7:9b:db:87:76:7c:c6:17:8c:47:67:ec:15:14:19:9b:
bb:6c:aa:4c:7f:99:57:55:4a:60:66:ee:d8:b6:20:46:47:77:
d6:31:8f:9b:7f:9f:a2:6f:e6:d8:13:93:36:f2:26:db:27:4b:
ad:8e:a3:a5:8d:20:8b:7a:f8:eb:e0:79:4c:08:e8:a2:88:9b:
2e:f7:e6:66:34:56:f4:eb:c0:1d:03:35:89:c5:2a:cc:5c:c5:
cd:5d:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org