Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/xeuk6x1VcfXr8plO5MzR8ps1aHE.roa
File: xeuk6x1VcfXr8plO5MzR8ps1aHE.roa (raw, json)
Hash identifier: sl5iayfoOvKFuPup2OTAPJ2wAhCbmG4qirXCpfg+bTk=
Subject key identifier: C5:EB:A4:EB:1D:55:71:F5:EB:F2:99:4E:E4:CC:D1:F2:9B:35:68:71
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 1471E6BB
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/xeuk6x1VcfXr8plO5MzR8ps1aHE.roa
Signing time: Sat 01 Jan 2022 03:58:59 +0000
ROA not before: Sat 01 Jan 2022 03:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30870
IP address blocks: 89.30.150.0/23 maxlen: 24
89.30.154.0/23 maxlen: 24
83.98.209.0/24 maxlen: 24
83.98.216.0/22 maxlen: 24
83.98.218.0/23 maxlen: 24
83.98.217.0/24 maxlen: 24
83.98.220.0/23 maxlen: 24
83.98.136.0/23 maxlen: 24
83.98.148.0/24 maxlen: 24
83.98.154.0/23 maxlen: 24
83.98.167.0/24 maxlen: 24
83.98.182.0/24 maxlen: 24
213.247.55.0/24 maxlen: 24
213.247.57.0/24 maxlen: 24
213.247.62.0/23 maxlen: 23
2001:16f8:15::/48 maxlen: 48
2001:16f8:666::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343008955 (0x1471e6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5eba4eb1d5571f5ebf2994ee4ccd1f29b356871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:20:4c:23:60:f4:26:43:79:3d:1d:4a:87:
c0:32:43:fe:0d:4e:f0:24:75:3a:98:06:79:46:45:
07:8b:16:c9:23:7a:d6:11:98:36:d5:54:48:17:62:
8a:4e:dd:fb:9d:49:91:06:5c:71:96:75:1c:37:50:
41:0c:1c:33:f1:ce:c1:f2:ad:78:5a:40:b2:4e:6a:
24:20:7f:3f:6e:0b:93:f1:17:1b:17:45:c2:ad:66:
0d:38:13:97:15:37:eb:3d:bf:31:a8:56:65:9e:92:
1d:15:1b:f2:de:2f:21:55:e1:d8:91:7d:b6:42:cc:
6f:f5:ad:52:62:4a:4a:90:0a:bc:f2:91:a4:5e:5e:
b5:23:81:6c:63:b4:33:04:52:de:75:aa:73:d4:84:
93:15:18:88:91:ee:b6:ef:d3:ae:c8:c6:22:9a:25:
61:ea:0d:a7:be:a7:f1:da:2f:74:77:c8:46:64:62:
10:c5:17:d7:90:8d:8a:0e:27:82:25:d1:4d:f9:2c:
88:50:9f:26:1e:41:e7:3b:db:51:f7:64:ab:3c:16:
4f:94:c6:1c:a5:bf:67:0b:22:fd:e4:a5:a5:40:8c:
32:1e:9b:df:20:f2:ce:3d:07:be:3e:6b:02:f3:78:
19:0f:ac:be:35:9a:50:bb:93:e4:17:9e:56:08:d9:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:A4:EB:1D:55:71:F5:EB:F2:99:4E:E4:CC:D1:F2:9B:35:68:71
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/xeuk6x1VcfXr8plO5MzR8ps1aHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.136.0/23
83.98.148.0/24
83.98.154.0/23
83.98.167.0/24
83.98.182.0/24
83.98.209.0/24
83.98.216.0-83.98.221.255
89.30.150.0/23
89.30.154.0/23
213.247.55.0/24
213.247.57.0/24
213.247.62.0/23
IPv6:
2001:16f8:15::/48
2001:16f8:666::/48
Signature Algorithm: sha256WithRSAEncryption
98:95:38:ab:35:a2:cd:e6:75:40:31:bc:4b:7a:0c:cc:12:b6:
d2:fa:3e:b3:59:4f:23:66:08:92:bd:94:cf:2a:47:d0:a3:7a:
9c:74:d8:3e:6d:29:00:13:11:9c:98:d9:24:a4:6e:69:62:de:
56:b6:a3:c1:37:82:c0:1e:49:d9:46:4b:df:6b:c2:b8:43:ae:
d9:47:91:c5:f3:63:2d:44:72:0e:86:ad:72:7d:7e:9f:e9:7a:
46:c8:84:23:d1:16:94:b3:0f:93:25:58:6e:72:ce:4f:21:0d:
78:73:77:6f:0a:e5:04:ea:31:da:00:07:8b:cf:54:6a:38:fc:
3b:28:7c:8c:09:08:91:b4:ff:62:ca:f7:ec:a5:92:a9:12:6b:
6e:29:3f:40:14:74:57:dc:a8:12:d8:0a:08:33:54:19:34:f9:
56:6f:f1:8e:69:89:45:2e:64:8a:77:63:63:6e:29:4f:a9:e9:
8d:2b:f5:38:92:72:3e:62:88:a3:3c:9a:89:99:c1:9c:f0:0e:
db:92:3f:c4:65:bc:4f:d1:db:ef:66:76:e4:df:9a:33:f0:9e:
47:cf:0e:61:e9:bc:c0:14:42:51:48:41:75:4b:96:93:17:d5:
ac:33:01:82:ca:62:44:8f:ad:f0:2a:b2:4a:b3:5f:ff:1b:70:
a8:9c:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org