Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/ejuRFoOHty1ublZN9K_JCMucEE0.roa
File: ejuRFoOHty1ublZN9K_JCMucEE0.roa (raw, json)
Hash identifier: D0V+s12ekgLBWaPig18C7jlgBYn1armMdsmRB3JdFpE=
Subject key identifier: 7A:3B:91:16:83:87:B7:2D:6E:6E:56:4D:F4:AF:C9:08:CB:9C:10:4D
Certificate issuer: /CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Certificate serial: 01857315C44DF7799B7C17BBEF244404A4AD
Authority key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/ejuRFoOHty1ublZN9K_JCMucEE0.roa
Signing time: Mon 02 Jan 2023 15:24:44 +0000
ROA not before: Mon 02 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207167
IP address blocks: 85.209.28.0/22 maxlen: 22
185.234.132.0/22 maxlen: 22
185.179.33.0/24 maxlen: 24
185.179.32.0/24 maxlen: 24
185.59.144.0/22 maxlen: 22
2a0a:7780::/29 maxlen: 29
2a02:6c20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c4:4d:f7:79:9b:7c:17:bb:ef:24:44:04:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Validity
Not Before: Jan 2 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3b91168387b72d6e6e564df4afc908cb9c104d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:01:18:55:ac:89:f2:82:31:9c:c0:0c:18:
88:64:cf:7a:f3:1e:7d:6c:01:8a:21:4f:ed:f6:40:
75:30:a3:b3:93:97:07:96:3d:37:e7:ae:3f:b9:6c:
bd:f9:6f:b2:52:4f:a3:73:3d:1e:88:0a:29:e5:0c:
ea:4a:f9:69:a9:c4:9a:0c:ea:ee:1c:b5:95:c3:9c:
a7:09:0d:9d:c7:0e:ec:b3:39:5a:f8:4e:21:75:f6:
37:68:af:8a:04:87:43:9d:5f:4e:7f:14:a2:ef:c0:
d0:c7:5f:0a:f5:1b:06:de:cf:bb:f1:c2:14:aa:96:
56:68:52:c2:4f:42:4e:02:e5:1c:7f:cb:30:24:53:
0b:9f:79:09:05:26:ec:7c:72:a7:79:a0:92:c4:a8:
ec:72:47:13:62:32:b7:67:2d:0f:57:35:d3:ae:66:
fc:0b:cf:1b:b1:94:18:57:6d:18:b1:26:bb:44:f7:
67:3c:d4:ec:30:dc:79:50:32:7d:17:69:ad:f6:9f:
9c:ba:04:50:4d:08:51:15:c3:82:b1:6e:9f:d2:35:
68:3a:00:fe:be:c7:1a:c8:e5:5d:74:7c:ee:05:95:
eb:85:28:bb:23:7c:6a:84:b3:ab:b1:d9:41:44:88:
c4:31:50:b8:b5:56:f0:5f:b4:5e:05:2e:a1:9c:8f:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3B:91:16:83:87:B7:2D:6E:6E:56:4D:F4:AF:C9:08:CB:9C:10:4D
X509v3 Authority Key Identifier:
keyid:E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/ejuRFoOHty1ublZN9K_JCMucEE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.28.0/22
185.59.144.0/22
185.179.32.0/23
185.234.132.0/22
IPv6:
2a02:6c20::/32
2a0a:7780::/29
Signature Algorithm: sha256WithRSAEncryption
3a:d1:c9:83:58:15:ee:6c:5d:d0:51:7b:7f:26:c3:f0:8d:cf:
43:41:73:9b:9c:49:5b:11:7c:e0:f8:9e:e2:8f:4b:61:b1:97:
56:64:32:50:98:45:8b:95:97:59:09:dd:f7:45:27:86:48:45:
04:f7:cc:50:a5:56:6b:52:28:f1:17:48:f2:b7:84:ca:37:75:
9e:20:b2:03:42:eb:88:35:a4:d1:b1:30:45:f2:42:42:2e:10:
f1:86:37:7d:6e:78:a7:27:de:d5:1c:c1:34:10:08:e0:c2:48:
20:ab:1e:c3:b3:90:80:3f:80:a5:65:e1:cb:b3:4a:02:3f:4a:
07:f7:61:72:b4:17:46:6e:2e:f9:60:23:77:de:90:17:52:50:
35:07:dd:c7:df:ea:49:76:de:d3:ec:c2:e4:6c:cd:e9:fb:57:
a5:bb:b1:19:6c:49:d4:d0:21:28:a1:08:50:9d:4f:8f:39:6e:
c2:9c:f4:63:14:d2:5c:19:4c:b1:f8:ac:84:f7:42:2a:31:a9:
e8:cb:80:78:ac:0b:55:17:9a:ec:ac:25:3e:de:0c:14:11:79:
2e:0c:f0:93:10:5e:ef:ec:d6:68:7f:9b:1e:01:3c:fb:1d:93:
42:de:a4:e4:8c:5a:2c:a5:30:37:59:ee:47:fa:55:03:44:68:
2f:36:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:34 2024 by rpki-client on console-ams.rpki-client.org