Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f25e2-872e-4b69-9656-16629e3360cf/1/h3zC-m5eyIKucaOOksOWX3nq-WU.roa
File: h3zC-m5eyIKucaOOksOWX3nq-WU.roa (raw, json)
Hash identifier: j7ghaAPUy6gNtDWWN5XQtzILXb7o1zFmY8rDAFMn2IU=
Subject key identifier: 87:7C:C2:FA:6E:5E:C8:82:AE:71:A3:8E:92:C3:96:5F:79:EA:F9:65
Certificate issuer: /CN=5dd7a881bc0eabc3758da3e84bfaafbb97829596
Certificate serial: 05C3E193
Authority key identifier: 5D:D7:A8:81:BC:0E:AB:C3:75:8D:A3:E8:4B:FA:AF:BB:97:82:95:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdeogbwOq8N1jaPoS_qvu5eClZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f25e2-872e-4b69-9656-16629e3360cf/1/h3zC-m5eyIKucaOOksOWX3nq-WU.roa
Signing time: Sat 01 Jan 2022 02:01:18 +0000
ROA not before: Sat 01 Jan 2022 02:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205262
IP address blocks: 89.40.74.0/24 maxlen: 24
37.122.218.0/24 maxlen: 24
37.122.219.0/24 maxlen: 24
37.122.216.0/23 maxlen: 23
185.205.252.0/22 maxlen: 22
185.84.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96723347 (0x5c3e193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7a881bc0eabc3758da3e84bfaafbb97829596
Validity
Not Before: Jan 1 02:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=877cc2fa6e5ec882ae71a38e92c3965f79eaf965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:ef:e7:75:21:4d:8d:53:18:4f:05:7b:47:
45:5f:37:af:99:03:55:1e:99:a1:91:ad:f7:1a:5d:
8f:a4:c1:08:cf:ef:2c:c1:c1:c9:ad:62:b5:9c:ee:
f5:5c:d1:e2:f0:13:dc:17:dc:65:b5:f9:f1:43:fd:
52:02:2a:3c:14:eb:7e:a2:da:15:7c:c5:de:c1:07:
bd:d9:bb:ca:8b:34:5f:00:34:9c:66:c4:35:26:31:
9b:97:93:08:73:83:72:46:b5:fe:ad:ab:e2:fa:51:
04:40:a0:73:56:86:eb:9c:58:57:f5:1a:ca:aa:bd:
ca:99:4a:01:a2:27:9d:8f:13:35:10:fa:c4:45:8b:
57:ff:3c:e1:57:3e:24:16:19:bc:ac:f1:06:e6:54:
a6:f9:41:36:e9:66:01:63:1a:fd:52:09:e5:ba:7f:
44:1e:0d:97:20:86:6d:3f:b7:9e:4f:d0:30:8e:b3:
01:8b:5d:5b:f7:63:b3:dc:19:f2:7b:7d:b5:e3:cf:
2b:d9:80:c3:16:9c:89:7a:4e:cc:3e:0a:4e:98:24:
3f:27:5f:16:7c:11:47:4e:e4:73:8c:3c:ac:07:ff:
54:1a:ff:ec:31:c8:04:5f:d9:66:b8:8e:1e:5c:0c:
d0:80:5d:d8:aa:92:33:eb:a3:d7:52:11:fe:26:8e:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:C2:FA:6E:5E:C8:82:AE:71:A3:8E:92:C3:96:5F:79:EA:F9:65
X509v3 Authority Key Identifier:
keyid:5D:D7:A8:81:BC:0E:AB:C3:75:8D:A3:E8:4B:FA:AF:BB:97:82:95:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdeogbwOq8N1jaPoS_qvu5eClZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f25e2-872e-4b69-9656-16629e3360cf/1/h3zC-m5eyIKucaOOksOWX3nq-WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f25e2-872e-4b69-9656-16629e3360cf/1/XdeogbwOq8N1jaPoS_qvu5eClZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.216.0/22
89.40.74.0/24
185.84.204.0/22
185.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:03:06:96:e1:b1:24:ac:3e:7a:b9:6d:56:6a:04:e0:11:ac:
fb:fc:5e:d5:bb:e5:ca:df:56:21:a3:01:11:6d:62:e5:dd:bd:
73:97:52:01:b9:c6:54:70:63:2c:66:23:9e:3e:8b:e1:28:61:
e3:71:fc:8b:ab:28:a0:75:00:0e:9d:bc:fc:6e:3b:dc:df:6f:
b7:ce:da:89:52:6e:d5:d4:68:03:2e:30:4e:93:80:76:51:f3:
3c:ef:52:5a:fc:81:54:86:2a:3b:ce:ee:98:7a:6c:21:60:c6:
30:00:f1:aa:28:f6:f9:59:ab:09:c9:bd:1c:d4:52:ca:a2:f8:
a1:f1:23:64:c9:62:65:cd:32:cb:04:a6:f9:15:e8:e2:69:3b:
36:74:bb:ec:03:4a:9d:6d:21:0a:45:85:69:88:3b:ca:04:e5:
5f:5d:ff:53:7a:64:37:30:30:82:27:96:34:42:49:3c:25:12:
27:37:b1:f7:91:db:37:1f:18:14:7a:0d:cc:e0:fd:03:aa:c8:
44:d3:bf:42:b7:f2:3e:4f:c2:2c:f5:dd:75:86:7c:fd:d1:1b:
f5:0c:7b:e9:e6:bc:10:8f:76:bf:9b:67:54:db:01:cf:99:d5:
7b:ff:be:17:02:12:a5:84:db:b4:4b:3a:4f:c5:d7:5b:90:ad:
f5:99:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:22 2024 by rpki-client on console-fra.rpki-client.org