Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/x2lCbKboWAxf_tydzpys05P1YvA.roa
File: x2lCbKboWAxf_tydzpys05P1YvA.roa (raw, json)
Hash identifier: xZfGLB6K4bLrNLK0dUH3Wf6evlE6Nz/b9sYg37xTJ90=
Subject key identifier: C7:69:42:6C:A6:E8:58:0C:5F:FE:DC:9D:CE:9C:AC:D3:93:F5:62:F0
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 1470AB73
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/x2lCbKboWAxf_tydzpys05P1YvA.roa
Signing time: Sat 01 Jan 2022 03:58:58 +0000
ROA not before: Sat 01 Jan 2022 03:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27257
IP address blocks: 83.98.187.0/24 maxlen: 24
89.30.141.0/24 maxlen: 24
85.92.159.0/24 maxlen: 24
213.247.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342928243 (0x1470ab73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c769426ca6e8580c5ffedc9dce9cacd393f562f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:97:a5:f4:76:08:75:24:41:27:9a:8b:3c:
ba:ab:27:1b:a9:14:7c:b7:e5:68:3b:ac:c5:bb:7d:
3f:92:e7:5c:ab:98:20:a6:3f:f3:e1:2d:1f:6d:8b:
5d:ca:be:73:41:b7:35:ff:ff:55:22:4c:e1:35:e4:
60:ac:7a:d5:ac:5f:eb:24:39:db:cb:2c:0f:1b:d8:
0d:e2:96:c8:ff:cd:c6:a1:19:af:c4:ea:be:a1:72:
29:70:85:3f:6d:44:a5:1f:9b:06:ed:e6:ba:96:88:
44:c9:d5:5b:e4:af:68:73:c2:94:21:45:32:e6:a8:
ad:d8:cf:1c:4d:b7:b8:93:57:9e:4f:41:d1:8d:d6:
bb:aa:12:0f:39:76:b3:b0:7d:8c:63:f2:a0:e6:cd:
2d:88:0d:e0:2d:e2:ae:fe:79:b1:30:5f:22:47:34:
a2:fe:fb:8d:24:fa:53:55:31:0d:72:9e:73:3b:c9:
a7:68:c2:53:58:f9:ba:13:11:ee:15:6a:64:6e:31:
c8:bc:b2:8b:07:f9:3d:76:98:82:74:ce:2c:a0:04:
07:c2:b7:2b:c9:f8:b4:9e:6f:68:61:bf:a3:b1:12:
9a:5d:a2:a3:9e:73:0a:4b:ae:ad:23:7d:46:7e:8d:
90:33:6a:f3:2b:89:bc:38:eb:e0:9d:e6:54:01:c4:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:42:6C:A6:E8:58:0C:5F:FE:DC:9D:CE:9C:AC:D3:93:F5:62:F0
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/x2lCbKboWAxf_tydzpys05P1YvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.187.0/24
85.92.159.0/24
89.30.141.0/24
213.247.46.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:0e:41:dd:1b:15:ac:c3:cf:12:91:87:63:be:2e:bb:27:71:
88:20:f4:e1:1d:4b:81:78:67:7d:4e:7b:c1:26:29:76:35:b5:
43:05:1f:1f:3f:10:f4:61:6d:97:22:86:77:01:ca:7e:f5:27:
6a:24:55:6a:14:c7:14:e4:30:f5:43:95:a1:ca:80:ce:d7:40:
fb:53:a8:cd:b2:8d:37:48:af:d3:35:b8:ac:1e:49:73:94:55:
62:dd:2e:6a:92:6a:ed:4d:51:c8:2c:61:b6:4a:a3:04:a6:da:
64:64:2c:04:5e:be:2f:e8:2d:3f:d6:02:63:b4:00:ae:4f:05:
79:bc:cf:24:76:58:4d:8f:42:8f:ec:af:fb:e6:ce:eb:4d:fe:
e3:a2:2e:2c:0e:7f:86:dc:40:17:2f:97:41:31:2d:36:65:b5:
a5:a1:6a:f0:13:dc:f8:08:8e:f0:bc:f2:84:1e:bb:49:27:97:
3a:8a:37:c0:75:8f:1f:31:43:38:50:bf:30:a0:6c:d1:f8:86:
69:bd:6d:02:5b:04:03:4d:d3:73:d1:21:bf:7c:57:5a:d2:9e:
18:d9:e2:d4:aa:a0:2d:9e:02:99:98:96:6c:3f:72:4d:a8:93:
5a:06:3d:a0:d7:6e:f1:da:ac:04:c6:e2:ee:c2:17:5a:97:0e:
ae:57:b6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org