Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/uOO6Nli0aVXGCF01OLJrY2hZIu4.roa
File: uOO6Nli0aVXGCF01OLJrY2hZIu4.roa (raw, json)
Hash identifier: 7lJWbNPfN6qm4A2aVszjtUCqYoNp0uGSssHp3Cb8mvA=
Subject key identifier: B8:E3:BA:36:58:B4:69:55:C6:08:5D:35:38:B2:6B:63:68:59:22:EE
Certificate issuer: /CN=b361c46090869fbdfee22436ce8a94393aa1be64
Certificate serial: 018571958045652E0C7F487A051C0554BDE7
Authority key identifier: B3:61:C4:60:90:86:9F:BD:FE:E2:24:36:CE:8A:94:39:3A:A1:BE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/uOO6Nli0aVXGCF01OLJrY2hZIu4.roa
Signing time: Mon 02 Jan 2023 08:25:01 +0000
ROA not before: Mon 02 Jan 2023 08:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206576
IP address blocks: 185.247.202.0/23 maxlen: 23
185.247.200.0/23 maxlen: 23
185.247.200.0/22 maxlen: 22
5.181.72.0/22 maxlen: 22
83.150.252.0/22 maxlen: 22
83.150.252.0/24 maxlen: 24
45.137.44.0/22 maxlen: 22
45.137.44.0/24 maxlen: 24
185.229.4.0/22 maxlen: 22
185.229.4.0/23 maxlen: 23
185.248.252.0/24 maxlen: 24
185.248.254.0/24 maxlen: 24
185.246.132.0/22 maxlen: 22
185.246.132.0/24 maxlen: 24
2a0d:bf80::/29 maxlen: 29
2a09:2500::/48 maxlen: 48
2a0d:7680::/29 maxlen: 29
2a0d:7680::/48 maxlen: 48
2a0e:a1c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:80:45:65:2e:0c:7f:48:7a:05:1c:05:54:bd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b361c46090869fbdfee22436ce8a94393aa1be64
Validity
Not Before: Jan 2 08:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8e3ba3658b46955c6085d3538b26b63685922ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:c6:da:5f:65:a5:49:24:a1:ac:df:de:7a:
90:50:08:a0:be:82:77:21:6c:f0:46:d2:68:fd:ad:
50:ff:4f:68:8c:75:a2:5c:03:c5:ac:e0:a5:9c:f1:
49:31:2c:0d:b1:8f:4a:03:a9:ad:52:63:18:f5:55:
7d:c8:f4:c9:ce:b5:2a:e1:c4:d6:8d:c2:2e:11:27:
8d:b7:23:ee:ee:62:86:b1:e5:4c:11:a8:c7:57:1f:
85:61:b2:d7:4d:6e:a1:06:7b:a9:ce:fe:e8:e7:35:
3b:b4:48:6f:49:51:3f:6d:f1:4f:8a:2b:6b:51:ff:
bf:22:29:2e:6a:50:3d:89:a7:de:f9:cd:e9:61:78:
f5:57:d3:8f:c4:c7:a2:97:3e:bc:29:e2:97:a4:2e:
69:0f:f7:6f:77:d1:59:09:9e:4d:d0:25:ae:53:24:
91:94:16:b0:10:a2:07:e9:ef:4c:4f:29:e7:27:92:
42:ed:90:49:2f:db:01:fe:4e:fc:3a:47:71:04:38:
cb:9a:f7:51:98:09:aa:af:6c:2b:b3:95:41:6c:80:
72:71:ea:a3:ee:c0:c2:2b:ed:a7:e4:2d:c3:dd:2d:
f6:09:da:53:cd:ac:3e:b5:d6:a4:5f:5e:af:67:f5:
35:8f:d2:d9:32:e4:13:7f:d6:3d:ea:90:81:ba:6f:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:BA:36:58:B4:69:55:C6:08:5D:35:38:B2:6B:63:68:59:22:EE
X509v3 Authority Key Identifier:
keyid:B3:61:C4:60:90:86:9F:BD:FE:E2:24:36:CE:8A:94:39:3A:A1:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/uOO6Nli0aVXGCF01OLJrY2hZIu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.72.0/22
45.137.44.0/22
83.150.252.0/22
185.229.4.0/22
185.246.132.0/22
185.247.200.0/22
185.248.252.0/24
185.248.254.0/24
IPv6:
2a09:2500::/48
2a0d:7680::/29
2a0d:bf80::/29
2a0e:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:69:03:80:ef:3a:c3:6f:53:40:ec:05:c2:08:1f:f8:50:24:
2b:4d:8b:a0:38:fc:84:b7:e8:fc:7e:a3:5f:8b:c7:b6:bf:1c:
94:9e:c9:06:24:ba:2e:1c:c7:89:aa:a4:33:6a:a0:ed:58:d2:
fe:21:53:2b:e9:04:d4:63:bc:13:4e:e3:65:64:b2:69:4c:90:
97:25:2d:53:06:54:f2:ae:80:f9:9d:12:72:d1:85:35:33:76:
6d:b1:6f:58:15:8c:9e:57:b3:57:ab:d0:71:c8:90:d1:5f:0c:
4b:59:21:e9:54:0c:97:f6:38:07:8b:51:80:59:66:2f:bb:74:
bb:80:a5:19:31:52:ce:9d:89:32:3d:e0:60:58:fb:02:ca:21:
ac:ca:91:32:f9:d4:0c:43:32:6b:22:f5:4d:1e:2f:3e:69:36:
43:6a:bf:a8:0a:8e:98:a8:3e:a3:3d:f1:b2:96:0c:d4:29:98:
bb:25:7a:c1:d4:1b:1b:0f:e6:a1:b4:cd:7d:db:3e:52:33:2a:
ec:be:58:f3:4e:ba:f2:04:09:e6:12:de:c2:91:70:48:e3:5c:
21:39:80:03:a2:e9:18:73:eb:c4:68:ce:d8:78:b7:66:2f:09:
da:cb:ce:9a:a4:ec:19:7b:ec:65:41:f6:49:3d:3a:58:20:66:
39:f8:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:31 2024 by rpki-client on console-fra.rpki-client.org