Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/Gi5PCh1fCwtAQwWw6oaGQlW0gwY.roa
File: Gi5PCh1fCwtAQwWw6oaGQlW0gwY.roa (raw, json)
Hash identifier: ntmKN/wWAEubaMEjhnxrpBbOvOHmJGwQRdqKtHvvgsY=
Subject key identifier: 1A:2E:4F:0A:1D:5F:0B:0B:40:43:05:B0:EA:86:86:42:55:B4:83:06
Certificate issuer: /CN=8f1b7edf827db1366de571f00b4a5cfdb239cc61
Certificate serial: 1A7783C7
Authority key identifier: 8F:1B:7E:DF:82:7D:B1:36:6D:E5:71:F0:0B:4A:5C:FD:B2:39:CC:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxt-34J9sTZt5XHwC0pc_bI5zGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/Gi5PCh1fCwtAQwWw6oaGQlW0gwY.roa
Signing time: Sat 01 Jan 2022 13:00:15 +0000
ROA not before: Sat 01 Jan 2022 13:00:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15782
IP address blocks: 89.236.0.0/18 maxlen: 18
94.245.0.0/18 maxlen: 18
81.186.240.0/20 maxlen: 20
81.88.0.0/20 maxlen: 20
85.235.16.0/20 maxlen: 20
213.185.0.0/19 maxlen: 19
217.72.48.0/20 maxlen: 20
2001:7a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444040135 (0x1a7783c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1b7edf827db1366de571f00b4a5cfdb239cc61
Validity
Not Before: Jan 1 13:00:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a2e4f0a1d5f0b0b404305b0ea86864255b48306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:ed:d9:e7:8b:ab:a2:1c:68:16:0e:d3:bd:
2c:e0:f0:f4:d7:d5:13:11:fc:2e:7e:97:96:cb:f7:
d6:da:58:78:90:1b:f7:7e:f7:d5:c0:3b:6b:02:77:
ca:8a:3a:fa:15:2f:5a:d0:c7:59:03:70:7e:9d:28:
e9:6d:c0:73:13:82:79:5c:a0:54:b0:07:cb:4b:a5:
f8:67:8d:1d:f3:bc:06:eb:5f:ff:01:f7:c5:e2:6a:
e1:ba:18:68:8a:44:bf:06:aa:bd:25:22:f4:e2:30:
b9:58:0f:32:ab:fa:c1:d0:b2:fd:59:dd:48:25:89:
7f:7c:04:81:ac:cf:5a:7c:39:2a:8c:97:61:72:56:
45:6b:9a:ef:ae:2d:e8:0f:38:25:8e:4b:6e:55:55:
2d:5d:35:04:84:35:ba:f4:15:ef:36:e0:92:e7:15:
b4:4f:0b:c2:45:42:73:c2:7d:e8:0d:98:cc:bf:ea:
bc:1f:44:d4:d9:7f:ec:87:fa:21:ca:8e:e6:ff:22:
f8:c7:10:8f:06:ec:61:a2:67:61:90:bc:27:4d:01:
69:a6:0d:35:b5:f8:b8:e0:b6:44:3a:4e:72:b1:ef:
ad:4e:82:d8:d1:15:7c:6e:71:f2:9e:58:7c:be:f9:
92:24:0f:6d:b3:87:88:84:d1:1d:33:3d:93:9a:24:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2E:4F:0A:1D:5F:0B:0B:40:43:05:B0:EA:86:86:42:55:B4:83:06
X509v3 Authority Key Identifier:
keyid:8F:1B:7E:DF:82:7D:B1:36:6D:E5:71:F0:0B:4A:5C:FD:B2:39:CC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxt-34J9sTZt5XHwC0pc_bI5zGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/Gi5PCh1fCwtAQwWw6oaGQlW0gwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/jxt-34J9sTZt5XHwC0pc_bI5zGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.0.0/20
81.186.240.0/20
85.235.16.0/20
89.236.0.0/18
94.245.0.0/18
213.185.0.0/19
217.72.48.0/20
IPv6:
2001:7a0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:c1:f2:b3:70:50:1e:54:4d:44:5d:3b:1b:9d:eb:85:0e:28:
0d:f2:1b:e6:5a:8c:92:e7:7b:8b:1d:8f:b3:0f:c3:7c:a4:9f:
24:67:5e:3b:32:b1:5f:8f:9d:f8:e4:8a:f4:1e:77:54:08:46:
5b:28:50:15:f8:2f:29:a6:c2:ed:a5:87:0c:4d:79:25:1f:40:
fd:1c:ca:85:54:d0:f1:ce:c4:49:88:cb:1c:85:4c:b1:07:80:
c3:36:a0:de:0e:66:ac:67:6c:c2:94:29:09:bd:1b:39:be:fd:
60:7b:77:00:91:14:ea:49:58:76:90:d6:25:2e:1d:92:be:d6:
9a:eb:05:45:14:36:69:b2:a8:75:c3:10:75:6e:b2:53:64:18:
48:59:6c:be:40:6c:f9:a1:86:10:29:fb:0c:9d:c8:49:46:3e:
78:40:6f:aa:05:c7:c5:8e:a2:b7:64:33:72:e8:e1:7d:e3:e3:
0f:79:12:af:dc:50:04:96:af:ae:f3:df:94:9c:9b:13:5d:ba:
2f:52:be:bd:5b:4d:ed:37:5b:87:83:b9:8b:f5:2a:b0:5c:92:
95:3b:49:26:67:83:31:e4:0a:d5:0e:e4:43:ab:25:64:e8:1c:
71:63:b4:ca:f4:61:92:a9:5d:7b:42:87:4c:05:c5:c0:0b:1c:
84:b0:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:11 2024 by rpki-client on console-fra.rpki-client.org