Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/l849rx94ZCHNK1ws29jxaJll9FU.roa
File: l849rx94ZCHNK1ws29jxaJll9FU.roa (raw, json)
Hash identifier: bhHIZD1swKnu9JjpaS7Yle0gA8rkSLZpTx3P0zuN77U=
Subject key identifier: 97:CE:3D:AF:1F:78:64:21:CD:2B:5C:2C:DB:D8:F1:68:99:65:F4:55
Certificate issuer: /CN=7b57e4599f2fb11f40ea85a8cc568d8a70f427ba
Certificate serial: 19762C37
Authority key identifier: 7B:57:E4:59:9F:2F:B1:1F:40:EA:85:A8:CC:56:8D:8A:70:F4:27:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1fkWZ8vsR9A6oWozFaNinD0J7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/l849rx94ZCHNK1ws29jxaJll9FU.roa
Signing time: Sat 01 Jan 2022 01:02:00 +0000
ROA not before: Sat 01 Jan 2022 01:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2586
IP address blocks: 145.14.32.0/20 maxlen: 22
85.253.0.0/16 maxlen: 18
82.131.0.0/17 maxlen: 19
185.125.136.0/22 maxlen: 22
62.65.192.0/18 maxlen: 22
94.246.224.0/19 maxlen: 21
145.14.16.0/20 maxlen: 22
2001:1bf0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427174967 (0x19762c37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b57e4599f2fb11f40ea85a8cc568d8a70f427ba
Validity
Not Before: Jan 1 01:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97ce3daf1f786421cd2b5c2cdbd8f1689965f455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:b3:8b:0c:98:be:b2:e9:aa:b5:25:23:67:
6a:6a:26:85:5b:71:74:8c:af:7c:da:c1:44:79:7d:
69:8e:e9:07:26:71:70:79:0d:e1:ae:a5:82:49:bb:
a9:cc:25:42:e6:92:05:0c:f1:b5:ad:88:fc:45:52:
17:f2:7f:c5:3c:de:e9:9e:f8:44:65:fd:01:78:3e:
e0:90:10:74:a8:55:ce:fa:f2:82:3d:20:1f:0b:67:
35:24:91:4a:81:04:30:58:0f:13:58:ff:ba:87:ef:
e1:f2:01:76:65:fd:24:49:3a:1e:6f:b8:10:43:10:
23:bb:f5:6b:80:d4:6f:a1:35:03:0e:72:0f:41:17:
d3:b7:35:d2:81:54:59:5c:e4:32:be:16:36:7f:fd:
94:e9:16:87:37:75:2d:55:53:4a:4c:ee:a8:54:3c:
b1:6f:4e:dd:8b:d2:49:f5:5a:db:0a:7a:62:7f:d1:
ea:a5:a9:16:76:cd:5c:b8:f1:0d:64:b5:37:cd:03:
91:59:be:4a:bd:67:1b:b4:b5:02:26:6c:33:4e:b5:
a9:a9:87:80:89:04:7a:2f:77:ed:b2:0d:2c:c7:fb:
20:ba:ff:e6:e8:14:5d:59:fa:f1:5e:52:9c:29:0c:
1a:2f:25:3c:25:fc:15:f0:5c:be:8f:4c:5f:dd:ab:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CE:3D:AF:1F:78:64:21:CD:2B:5C:2C:DB:D8:F1:68:99:65:F4:55
X509v3 Authority Key Identifier:
keyid:7B:57:E4:59:9F:2F:B1:1F:40:EA:85:A8:CC:56:8D:8A:70:F4:27:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1fkWZ8vsR9A6oWozFaNinD0J7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/l849rx94ZCHNK1ws29jxaJll9FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/e1fkWZ8vsR9A6oWozFaNinD0J7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.192.0/18
82.131.0.0/17
85.253.0.0/16
94.246.224.0/19
145.14.16.0-145.14.47.255
185.125.136.0/22
IPv6:
2001:1bf0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:5c:3a:a1:00:e9:eb:fc:f7:c5:85:85:36:07:cc:6c:f4:3e:
2b:bb:df:03:82:fa:fa:4c:da:f2:ac:34:5f:c1:0d:3d:35:d1:
84:10:a0:ae:1b:b8:fe:2a:13:30:7f:ae:21:5a:fc:b2:a0:76:
14:1f:48:7f:95:df:14:c5:9d:2d:ac:f2:f1:8e:f8:ca:bb:ae:
d9:28:81:9f:f0:8b:23:ad:cb:a0:04:26:7a:17:d7:89:bc:84:
8c:16:22:a3:66:c0:db:7d:21:1d:a1:5e:b4:23:28:9f:ad:0e:
f3:74:44:55:6c:d3:d5:db:0d:2e:02:a2:45:3b:7c:c7:fd:1a:
18:26:7d:63:fd:c5:d3:e7:66:81:29:29:62:7d:4a:ae:8d:d0:
a0:31:ff:e4:7b:44:25:b4:cb:9c:a8:31:d8:a0:a6:54:1f:d3:
21:aa:b1:2d:fb:73:3b:cb:3f:84:be:a9:67:d9:46:97:73:d9:
ff:95:a6:c3:87:38:39:d0:ed:eb:35:84:fe:60:61:b9:39:1c:
57:f1:b0:d4:91:53:9f:33:19:06:a8:e7:63:d4:c1:01:e1:c7:
25:f3:8b:72:a5:3d:c7:d3:04:89:09:10:65:b5:69:30:9c:c7:
67:18:6c:c4:69:2c:51:0e:cf:37:9f:13:2b:60:bb:ad:0b:a8:
fa:e1:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org