Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/IFxjK_Yg1wdOnZkoTSQnfKUPXmo.roa
File: IFxjK_Yg1wdOnZkoTSQnfKUPXmo.roa (raw, json)
Hash identifier: N5W9qrjN0BiFUlXIz09AFP9rlInL+lkUwfAooA52r7o=
Subject key identifier: 20:5C:63:2B:F6:20:D7:07:4E:9D:99:28:4D:24:27:7C:A5:0F:5E:6A
Certificate issuer: /CN=9c1927417d461755aefac39978a58be1d322d0c0
Certificate serial: 0AA91226
Authority key identifier: 9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/IFxjK_Yg1wdOnZkoTSQnfKUPXmo.roa
Signing time: Thu 31 Mar 2022 18:36:59 +0000
ROA not before: Thu 31 Mar 2022 18:36:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12345
IP address blocks: 185.23.200.0/23 maxlen: 23
185.251.44.0/23 maxlen: 23
185.251.46.0/23 maxlen: 24
193.8.80.0/22 maxlen: 22
185.247.228.0/24 maxlen: 24
185.247.229.0/24 maxlen: 24
185.247.230.0/23 maxlen: 23
91.193.100.0/22 maxlen: 22
185.251.248.0/22 maxlen: 22
185.251.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178852390 (0xaa91226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1927417d461755aefac39978a58be1d322d0c0
Validity
Not Before: Mar 31 18:36:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=205c632bf620d7074e9d99284d24277ca50f5e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:62:dd:e0:33:8d:7b:3a:e2:f8:79:b2:66:
9b:bc:56:19:1c:50:64:b4:b6:1c:6a:6e:7e:05:9b:
d3:57:c2:e7:e3:e0:23:1a:1f:bb:89:3c:5a:4c:d1:
2c:28:66:05:2c:09:5d:36:af:9b:9c:d9:32:4c:74:
e1:4d:d1:dc:ee:6b:7a:38:f3:88:c8:6a:d5:65:de:
14:bc:c6:3c:a2:01:f6:09:d4:ab:d9:07:2b:1c:fe:
5e:1b:62:7c:67:db:ae:ca:4d:d8:3b:2b:ec:27:6e:
e6:36:82:34:95:a7:15:60:24:4d:78:ce:e3:13:92:
6e:5c:f7:09:35:c3:4d:ea:c7:6a:8a:b3:fd:1e:d4:
2d:19:5d:30:bd:bf:66:d9:f7:38:20:c6:ad:19:8e:
83:7c:b5:f0:52:b2:ec:a9:83:e5:5f:25:a8:2b:90:
ec:9b:aa:55:91:7b:87:fa:19:3f:71:5a:e6:f1:36:
7c:b6:f2:b1:bd:5c:32:00:e6:db:39:a6:5a:9c:49:
6d:c7:ee:04:a6:3d:31:74:ff:9e:bd:58:db:9b:fe:
36:f5:14:b1:d8:dd:39:31:8e:bb:9f:a7:4c:a8:3a:
ed:1f:c1:a4:78:5e:24:72:92:ac:c9:25:48:06:a4:
66:6b:23:3f:9b:4b:60:7c:1e:4d:6f:d3:2c:21:f1:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:63:2B:F6:20:D7:07:4E:9D:99:28:4D:24:27:7C:A5:0F:5E:6A
X509v3 Authority Key Identifier:
keyid:9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/IFxjK_Yg1wdOnZkoTSQnfKUPXmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/nBknQX1GF1Wu-sOZeKWL4dMi0MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.100.0/22
185.23.200.0/23
185.247.228.0/22
185.251.44.0/22
185.251.248.0/22
193.8.80.0/22
Signature Algorithm: sha256WithRSAEncryption
92:5b:36:a9:c9:af:9b:92:5d:19:fc:e8:df:ac:12:62:ff:b0:
d3:e2:fc:5b:0d:2e:d6:0d:7f:fa:f7:4c:97:e5:de:b1:2b:7e:
23:a4:2c:0b:9e:8b:cb:3e:d3:ec:a9:ce:4e:2b:1f:92:14:a7:
00:bf:86:1a:aa:c6:73:84:04:29:32:00:6d:fe:86:5b:95:3b:
80:0f:32:f7:7d:73:9a:91:fe:ba:8d:f5:27:36:25:2b:fb:17:
54:37:b4:98:9d:d1:61:13:52:5c:1f:de:02:3b:0e:ba:5e:42:
15:16:ed:2f:34:4d:6e:10:b6:d3:ac:11:22:0f:c1:f5:ec:6f:
95:bc:26:b8:22:f4:d7:dc:36:15:26:32:54:61:d1:2b:64:97:
a0:27:86:3b:b9:64:42:24:b6:02:77:80:cd:5c:51:a8:6e:c3:
3b:f3:1a:43:84:c0:95:90:69:f2:8b:c3:59:ee:bc:06:52:13:
82:ee:d2:61:b0:42:46:a2:30:32:74:87:b7:f3:0c:e2:b4:e6:
ac:7d:1a:a9:8f:fa:59:be:50:d8:c8:a0:49:14:4a:85:9c:00:
9a:6d:2a:cb:fb:81:3e:df:48:12:46:71:56:5a:95:e8:4e:60:
6d:0e:4c:69:55:df:e8:53:34:a9:2e:13:9e:06:99:40:8f:c9:
53:0c:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org