Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/4g4zNWWgq6AMZvnZbT0nQ9XOy7g.roa
File: 4g4zNWWgq6AMZvnZbT0nQ9XOy7g.roa (raw, json)
Hash identifier: xtBT0mc0u50La00WQhkr6RmBjJhKDDcOlQHFNU7WDlQ=
Subject key identifier: E2:0E:33:35:65:A0:AB:A0:0C:66:F9:D9:6D:3D:27:43:D5:CE:CB:B8
Certificate issuer: /CN=3862e6de0e31e8d28a937c012b602885ac935d15
Certificate serial: 018CC3491CF9117035188BCFAB1F102B1764
Authority key identifier: 38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/4g4zNWWgq6AMZvnZbT0nQ9XOy7g.roa
Signing time: Mon 01 Jan 2024 04:29:57 +0000
ROA not before: Mon 01 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29608
IP address blocks: 185.170.80.0/22 maxlen: 22
79.143.240.0/20 maxlen: 24
37.60.152.0/21 maxlen: 24
193.30.224.0/22 maxlen: 24
2a01:678::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1c:f9:11:70:35:18:8b:cf:ab:1f:10:2b:17:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3862e6de0e31e8d28a937c012b602885ac935d15
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e20e333565a0aba00c66f9d96d3d2743d5cecbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bc:8a:59:58:24:73:aa:cd:9c:0e:ad:97:e4:
2b:4a:47:a3:63:f0:14:c5:f1:d5:ce:cd:3f:ef:28:
72:61:89:bb:e4:a6:16:a4:40:3a:c4:6c:5e:e7:62:
1d:b6:43:bb:62:27:c3:7c:92:dc:47:8a:12:45:a3:
ab:65:1b:2c:d9:1d:d2:36:ab:10:fe:b9:99:5e:2f:
52:af:31:44:9a:b7:09:4a:09:37:2e:8b:89:2e:92:
9e:64:d3:3e:ab:51:96:d1:c3:03:31:34:da:34:75:
66:c3:72:0c:6a:64:e3:f8:2f:f0:a7:c1:37:c9:01:
ef:41:9a:f1:0c:63:c9:be:98:79:59:03:0b:68:4c:
63:d9:1a:38:29:8f:f2:37:af:a1:2b:59:3a:c1:46:
b8:52:c3:35:9f:7b:e7:78:60:5e:4d:6e:90:de:ea:
a0:cc:ac:13:a5:91:fc:e2:ad:1b:80:ff:d5:81:ea:
57:b5:36:bf:3c:37:94:14:19:32:c5:7c:5e:3b:c6:
86:fa:12:05:f1:41:f7:50:01:4d:a6:43:6d:20:d7:
3d:0a:3a:d8:62:6d:31:ca:04:82:67:1e:1b:10:e2:
0f:2b:0f:1b:a3:60:4f:58:8f:d1:1d:37:03:4c:c3:
5d:49:5e:9a:11:5a:69:23:6f:d2:40:c0:ac:9e:f1:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0E:33:35:65:A0:AB:A0:0C:66:F9:D9:6D:3D:27:43:D5:CE:CB:B8
X509v3 Authority Key Identifier:
keyid:38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/4g4zNWWgq6AMZvnZbT0nQ9XOy7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.152.0/21
79.143.240.0/20
185.170.80.0/22
193.30.224.0/22
IPv6:
2a01:678::/29
Signature Algorithm: sha256WithRSAEncryption
78:20:ae:25:69:a2:ca:58:2c:aa:2a:12:4d:2b:55:8f:6f:72:
13:bc:62:70:c5:4d:4b:6f:39:12:f7:6b:e1:df:50:c1:ac:96:
ae:14:db:8e:76:de:dd:47:9d:24:82:16:0c:e0:1f:45:d5:fd:
4a:60:90:82:fc:7f:8f:42:9c:8f:cd:e7:c2:4b:9b:f2:ce:33:
4f:82:85:f4:fb:3e:1e:db:3a:f2:34:5c:60:f2:14:b9:60:bc:
37:c3:e0:f8:2b:04:ee:ae:76:4f:57:81:88:ac:05:d5:ac:04:
54:8c:97:e5:fa:88:6a:87:cd:27:f7:59:63:76:28:63:88:33:
86:ef:1b:59:fd:31:cf:d6:fe:a7:bc:a7:7e:9c:cd:79:d3:09:
3d:d8:be:39:8e:57:a1:dd:1b:c0:7e:f0:8e:39:09:9d:51:0d:
c1:d8:65:bc:e1:57:94:46:e6:7f:b0:5c:45:e7:f9:d4:ef:92:
33:dc:cb:5e:dd:43:27:53:fe:89:94:fd:68:1c:c8:7b:5f:eb:
b7:83:86:11:66:40:5a:c9:81:af:dc:21:cc:5a:a7:54:df:e6:
27:54:ee:11:64:b4:c5:81:7c:a2:7e:3e:26:98:3f:30:af:e0:
ea:2b:88:23:5a:b4:5a:2e:f7:6e:9a:56:d7:74:a5:b1:1e:39:
7d:bf:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 13:29:06 2024 by rpki-client on console-fra.rpki-client.org