Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/vAgI05UP4n1M6lPZ43wF1SzYG9g.roa
File: vAgI05UP4n1M6lPZ43wF1SzYG9g.roa (raw, json)
Hash identifier: kA7yjIF2CtAnnKrZndZ7pnrTVjfsEJ9GuUBI3+Qq0dk=
Subject key identifier: BC:08:08:D3:95:0F:E2:7D:4C:EA:53:D9:E3:7C:05:D5:2C:D8:1B:D8
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 01856DD4066C2D5100130AF58858C5B2FFD7
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/vAgI05UP4n1M6lPZ43wF1SzYG9g.roa
Signing time: Sun 01 Jan 2023 14:54:49 +0000
ROA not before: Sun 01 Jan 2023 14:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25525
IP address blocks: 83.98.201.0/24 maxlen: 24
89.30.169.0/24 maxlen: 24
213.189.0.0/19 maxlen: 24
89.30.174.0/23 maxlen: 24
213.247.32.0/19 maxlen: 24
213.247.37.0/24 maxlen: 24
89.18.160.0/19 maxlen: 24
85.92.128.0/19 maxlen: 24
83.98.128.0/18 maxlen: 24
89.30.193.0/24 maxlen: 24
93.175.176.0/20 maxlen: 24
195.234.173.0/24 maxlen: 24
2001:16f8::/32 maxlen: 32
2001:4198::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:06:6c:2d:51:00:13:0a:f5:88:58:c5:b2:ff:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 14:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc0808d3950fe27d4cea53d9e37c05d52cd81bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:88:44:54:dd:2f:dd:70:c0:c1:bc:15:cb:
88:fc:0c:42:b3:6c:06:5f:67:7b:29:31:69:d2:22:
d9:fb:33:57:73:48:e8:a6:51:0f:bc:36:74:51:d7:
4c:75:5c:61:25:73:d0:ca:1f:f9:2e:21:de:8e:59:
d3:62:f7:a6:5b:41:a0:c5:0d:f0:9b:b6:a5:8f:dc:
4d:20:ea:5a:83:52:34:fe:0a:ec:be:0e:a9:17:bd:
a8:84:ba:db:5d:9f:6f:fa:c5:09:44:99:59:f5:5d:
f3:e4:e2:6a:8f:06:19:87:8d:bb:8b:81:75:dd:1b:
ce:93:e8:7d:88:bb:5d:2a:5e:89:8e:45:45:9f:67:
0e:bc:c5:ac:7c:60:f9:1a:d1:11:94:e3:d1:e9:4d:
a5:70:d6:53:85:6c:d9:ed:ed:a2:23:60:11:2a:be:
e2:27:e6:7a:0a:ac:e8:a9:bc:c4:6d:05:ff:d6:cc:
c4:f3:a9:fd:b1:38:ca:34:50:09:10:28:f6:ba:fe:
45:1d:a1:d9:2d:92:a4:3a:d8:dd:00:2e:c9:16:f9:
d6:f8:5b:b7:61:70:6b:5c:f5:d1:f9:ff:46:48:e3:
3e:6c:1a:32:35:db:21:72:4f:37:91:be:a4:aa:8c:
d2:34:f4:42:1e:11:b6:9c:5b:dd:17:32:33:ac:1f:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:08:08:D3:95:0F:E2:7D:4C:EA:53:D9:E3:7C:05:D5:2C:D8:1B:D8
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/vAgI05UP4n1M6lPZ43wF1SzYG9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.128.0/18
83.98.201.0/24
85.92.128.0/19
89.18.160.0/19
89.30.169.0/24
89.30.174.0/23
89.30.193.0/24
93.175.176.0/20
195.234.173.0/24
213.189.0.0/19
213.247.32.0/19
IPv6:
2001:16f8::/32
2001:4198::/32
Signature Algorithm: sha256WithRSAEncryption
38:c7:e1:2e:65:38:73:c3:67:9a:e2:76:ab:d9:c3:fb:81:43:
fa:30:b5:3a:b6:76:79:28:f3:da:25:d2:28:0d:09:04:16:9b:
5d:67:ff:d0:fc:6f:4d:16:06:02:cb:6d:78:27:9f:75:a7:cb:
47:c4:bb:88:f8:e4:18:b0:d8:99:ce:a8:0b:5d:57:da:12:31:
f3:0a:53:fe:89:6d:13:80:2c:0b:46:9a:50:99:c2:6f:07:d7:
22:dd:c0:07:9f:4e:28:2f:00:a1:ea:a3:6a:10:db:6c:1c:e1:
e8:41:4d:db:94:c3:8d:83:bc:62:09:c3:c1:3a:e8:7e:d8:4a:
43:75:a6:d8:98:c0:b7:4f:7d:74:98:12:33:c7:24:75:72:22:
d9:28:db:3b:5d:d1:30:ba:15:98:b5:3a:28:ae:41:48:3e:06:
21:65:ef:8c:c6:2d:1a:74:3f:ef:04:8b:46:d6:77:52:b6:b1:
fa:23:35:72:4e:40:74:80:4e:9d:58:4c:c9:19:28:bc:12:3e:
b6:5e:33:ad:54:5d:f2:d2:7a:44:53:70:61:21:2c:ca:7d:68:
e7:30:d5:78:53:4c:ec:a3:34:7b:3b:bf:b1:53:94:5a:b0:61:
77:17:0d:f7:ce:cd:8d:3b:29:e8:70:92:32:99:e1:e6:3f:5e:
85:fa:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org