Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/4Bnj_0Vao_-5FisP_MtuW5EFa_w.roa
File: 4Bnj_0Vao_-5FisP_MtuW5EFa_w.roa (raw, json)
Hash identifier: LSad/t6XHduTIBM8OfE/Oc7h/oNh5E2DE7NxrPy6cz4=
Subject key identifier: E0:19:E3:FF:45:5A:A3:FF:B9:16:2B:0F:FC:CB:6E:5B:91:05:6B:FC
Certificate issuer: /CN=185228c77144d945c51633cecb94c02a434e1db6
Certificate serial: 01838329A7DB6CE50662EB5EA2DC43EE90AE
Authority key identifier: 18:52:28:C7:71:44:D9:45:C5:16:33:CE:CB:94:C0:2A:43:4E:1D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFIox3FE2UXFFjPOy5TAKkNOHbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/4Bnj_0Vao_-5FisP_MtuW5EFa_w.roa
Signing time: Wed 28 Sep 2022 08:14:48 +0000
ROA not before: Wed 28 Sep 2022 08:14:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62235
IP address blocks: 86.107.56.0/24 maxlen: 24
188.213.80.0/22 maxlen: 24
92.119.0.0/22 maxlen: 24
89.39.167.0/24 maxlen: 24
85.204.200.0/21 maxlen: 24
37.156.108.0/22 maxlen: 24
89.46.247.0/24 maxlen: 24
188.212.16.0/22 maxlen: 24
185.41.244.0/22 maxlen: 24
195.82.98.0/23 maxlen: 24
185.228.244.0/22 maxlen: 24
87.247.128.0/22 maxlen: 24
185.87.128.0/22 maxlen: 24
194.124.56.0/22 maxlen: 24
89.36.169.0/24 maxlen: 24
45.14.204.0/22 maxlen: 24
5.183.56.0/22 maxlen: 24
37.156.76.0/22 maxlen: 24
139.28.88.0/22 maxlen: 24
89.45.220.0/22 maxlen: 24
94.177.0.0/22 maxlen: 24
89.46.35.0/24 maxlen: 24
89.46.37.0/24 maxlen: 24
89.46.32.0/24 maxlen: 24
89.46.39.0/24 maxlen: 24
185.56.76.0/22 maxlen: 24
188.212.253.0/24 maxlen: 24
45.86.184.0/22 maxlen: 24
89.35.231.0/24 maxlen: 24
89.35.227.0/24 maxlen: 24
89.44.82.0/24 maxlen: 24
188.214.112.0/21 maxlen: 24
2a01:54a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:29:a7:db:6c:e5:06:62:eb:5e:a2:dc:43:ee:90:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185228c77144d945c51633cecb94c02a434e1db6
Validity
Not Before: Sep 28 08:14:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e019e3ff455aa3ffb9162b0ffccb6e5b91056bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:64:c2:9a:06:13:64:50:7c:e0:ca:fc:e1:
d5:09:72:3a:67:b9:25:68:29:60:12:b7:e3:48:90:
83:3f:aa:70:28:ce:5f:60:07:88:d2:46:c1:8b:e2:
3c:81:a7:d7:0e:d2:65:9e:09:2c:d0:cf:eb:7d:0f:
05:b1:cd:ce:61:00:f0:a2:81:6f:49:1b:12:d8:8c:
dc:41:c0:83:d0:3c:0c:e2:e1:1f:e9:e6:1f:91:c4:
4b:51:dc:a4:ee:7a:15:da:3d:79:1d:15:84:35:43:
36:25:03:da:59:61:5d:d1:8d:6c:ad:e8:37:7c:79:
69:ce:48:66:75:80:a6:1b:b4:65:88:70:13:62:b6:
69:7f:9d:0d:d0:6f:f3:4a:d0:82:80:b8:2b:ec:1f:
cf:72:b6:34:36:2a:74:23:08:5f:8f:3d:6f:13:8f:
2f:4e:5d:b4:11:1a:48:6a:b0:9e:1b:07:d0:f4:84:
79:d7:26:58:58:89:32:41:b4:3b:9f:51:9e:e8:33:
15:f4:90:75:9d:f7:8e:07:b1:f8:e5:f1:bc:f6:ce:
e1:bf:00:6b:00:a2:cb:21:a5:ef:56:68:58:80:f5:
d5:a0:81:9d:01:e6:ab:23:d2:bc:84:f3:8c:c9:d0:
44:83:16:5d:d1:a0:16:f5:2d:fb:42:4f:e3:fd:3f:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:19:E3:FF:45:5A:A3:FF:B9:16:2B:0F:FC:CB:6E:5B:91:05:6B:FC
X509v3 Authority Key Identifier:
keyid:18:52:28:C7:71:44:D9:45:C5:16:33:CE:CB:94:C0:2A:43:4E:1D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFIox3FE2UXFFjPOy5TAKkNOHbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/4Bnj_0Vao_-5FisP_MtuW5EFa_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/492e65-d225-432b-8d91-b9b4b0a5c97d/1/GFIox3FE2UXFFjPOy5TAKkNOHbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.56.0/22
37.156.76.0/22
37.156.108.0/22
45.14.204.0/22
45.86.184.0/22
85.204.200.0/21
86.107.56.0/24
87.247.128.0/22
89.35.227.0/24
89.35.231.0/24
89.36.169.0/24
89.39.167.0/24
89.44.82.0/24
89.45.220.0/22
89.46.32.0/24
89.46.35.0/24
89.46.37.0/24
89.46.39.0/24
89.46.247.0/24
92.119.0.0/22
94.177.0.0/22
139.28.88.0/22
185.41.244.0/22
185.56.76.0/22
185.87.128.0/22
185.228.244.0/22
188.212.16.0/22
188.212.253.0/24
188.213.80.0/22
188.214.112.0/21
194.124.56.0/22
195.82.98.0/23
IPv6:
2a01:54a0::/32
Signature Algorithm: sha256WithRSAEncryption
08:68:ba:31:c5:1e:c4:aa:51:c2:62:c8:fa:e9:04:ec:6e:c3:
08:cd:fd:9c:6f:40:2e:c4:cd:ae:2a:a1:e5:76:37:3e:c8:24:
42:63:ca:0e:c0:15:9a:f0:ee:10:55:ae:3e:b4:32:60:58:c2:
33:a8:dd:d7:d3:31:f6:ae:e5:9b:e2:42:5d:57:f0:00:28:05:
e6:42:fb:eb:c4:01:d6:d7:6f:b2:70:d3:33:1a:79:77:4b:f3:
31:fd:d4:a9:b4:39:3f:e4:26:72:f9:bf:4a:46:78:6d:97:01:
b9:53:ec:4d:45:94:8d:84:5c:e1:98:dd:6d:b8:96:97:e5:17:
27:bf:d9:49:91:a8:f0:a7:9f:ca:7c:37:10:5b:42:b5:10:79:
27:ab:32:c4:af:67:f3:10:31:95:9e:b1:8f:2c:2e:43:dc:6b:
27:10:44:98:99:d5:7d:ff:ed:42:c6:b2:7d:3a:92:ce:eb:51:
a5:e9:ce:85:b6:81:a3:74:78:cc:07:86:d5:bd:c2:86:af:c4:
bf:ec:e4:97:ec:a1:6f:4d:74:39:c5:fa:1a:af:48:ba:63:08:
35:3b:ce:60:41:bc:8d:95:9c:f6:cb:26:2d:60:2f:c0:a6:6a:
6c:3d:6a:74:0a:62:60:dc:81:b9:a1:ae:52:78:8b:3c:6b:cb:
13:24:03:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:16 2024 by rpki-client on console-ams.rpki-client.org