Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/o1WuenqZHljuDnb_8ZF9TL6F-iM.roa
File: o1WuenqZHljuDnb_8ZF9TL6F-iM.roa (raw, json)
Hash identifier: l/DZhWSQQIvtQsapkabnk4Y7g54ui8NxqFAp00Q+wwE=
Subject key identifier: A3:55:AE:7A:7A:99:1E:58:EE:0E:76:FF:F1:91:7D:4C:BE:85:FA:23
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 0181D8CC1944097E9EFC4CC172C6D26F489A
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/o1WuenqZHljuDnb_8ZF9TL6F-iM.roa
Signing time: Thu 07 Jul 2022 13:14:23 +0000
ROA not before: Thu 07 Jul 2022 13:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34304
IP address blocks: 86.107.58.0/23 maxlen: 23
86.107.57.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
86.107.63.0/24 maxlen: 24
86.107.60.0/23 maxlen: 23
193.138.192.0/22 maxlen: 22
89.47.0.0/24 maxlen: 24
89.47.14.0/24 maxlen: 24
89.47.12.0/24 maxlen: 24
89.35.224.0/24 maxlen: 24
89.35.229.0/24 maxlen: 24
89.35.232.0/24 maxlen: 24
89.35.236.0/24 maxlen: 24
89.35.234.0/23 maxlen: 23
89.35.238.0/24 maxlen: 24
89.35.238.0/23 maxlen: 23
2a05:8880::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:cc:19:44:09:7e:9e:fc:4c:c1:72:c6:d2:6f:48:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jul 7 13:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a355ae7a7a991e58ee0e76fff1917d4cbe85fa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:79:f9:c0:28:cb:55:ce:ba:56:f7:05:ef:
59:4c:31:3b:62:60:b6:c9:20:fe:0e:f1:f2:3a:81:
d0:7f:6d:58:73:d0:78:02:36:1c:0d:7e:bd:e4:ca:
67:d3:0d:c9:2a:05:03:44:ea:80:e1:ac:48:0c:07:
2f:d0:e3:c6:75:ad:1d:d9:17:96:8a:26:1e:32:7f:
bb:63:88:32:ac:35:29:ab:3d:ad:97:e0:4e:1b:1a:
56:cc:aa:b6:a3:04:5b:11:9d:91:fe:e8:9b:6c:98:
bf:41:18:8b:30:72:41:01:db:ee:02:4d:a0:ba:ba:
16:3b:e4:49:48:f0:d1:99:46:37:76:3d:9e:2b:6d:
c0:8b:2f:a2:d1:63:0f:2f:05:bb:69:bb:f7:2d:9c:
19:26:4d:08:48:7d:95:ea:85:23:ae:a9:51:a4:62:
82:62:7e:41:a7:69:0c:f2:08:82:fb:8c:89:e0:2e:
2c:d3:1c:1c:d5:fe:7b:48:5e:2d:80:7a:a8:6f:12:
3a:7b:64:d1:7a:06:ff:e6:f9:11:e7:f2:40:ab:50:
d3:c5:fb:9e:d2:77:36:48:d1:6c:c3:b9:e4:bd:32:
18:41:03:de:45:d0:fa:60:42:ef:2a:72:a0:9e:0e:
34:f5:99:fe:f5:0b:86:ca:43:b8:39:81:f6:e4:bf:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:AE:7A:7A:99:1E:58:EE:0E:76:FF:F1:91:7D:4C:BE:85:FA:23
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/o1WuenqZHljuDnb_8ZF9TL6F-iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.57.0-86.107.61.255
86.107.63.0/24
89.35.224.0/24
89.35.229.0/24
89.35.232.0/24
89.35.234.0-89.35.236.255
89.35.238.0/23
89.47.0.0/24
89.47.12.0/24
89.47.14.0/24
188.211.164.0/23
193.138.192.0/22
IPv6:
2a05:8880::/30
Signature Algorithm: sha256WithRSAEncryption
70:83:3e:08:82:02:4a:9a:5d:0c:86:24:b3:83:c8:8e:a5:5f:
b3:04:b7:70:e1:ba:3c:41:97:7e:ac:67:e9:9b:09:4b:eb:b7:
3b:cc:8f:80:a2:3b:cc:0e:e1:09:22:d6:31:a4:62:3d:f8:8f:
fe:6c:b5:21:66:35:dc:a4:9b:1d:b9:a1:cf:29:b6:66:1b:20:
f5:0e:6d:f4:22:09:c1:6c:de:ad:fe:eb:52:7a:18:e3:77:fe:
a9:ec:58:5e:69:81:47:26:6f:e8:06:b1:af:e3:dc:ec:45:17:
7e:22:df:e9:9d:e7:c1:ef:2d:5c:8f:20:c1:bf:70:c0:28:cb:
90:96:92:77:57:85:75:95:25:9f:1a:f4:18:1d:32:c3:37:f5:
7a:8c:2b:f6:37:12:8c:6b:28:36:da:d2:b8:62:be:31:64:75:
70:b0:99:5d:2b:44:07:72:19:1b:9a:0d:5a:32:e2:b2:62:57:
cb:27:e7:15:fc:aa:56:5d:27:63:5f:27:1b:55:c7:40:c5:3a:
87:62:46:65:a4:a2:df:64:de:af:60:b8:bb:c7:82:73:52:6e:
46:b6:bb:94:12:39:9f:11:ee:28:f5:90:a4:96:96:a6:7a:0e:
e7:cf:7e:59:3f:9f:03:ae:96:53:94:11:b1:a6:e8:8a:24:ae:
d1:0d:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org