Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/rOOUAUKaM0t-4VZM1akAtBFoxbo.roa
File: rOOUAUKaM0t-4VZM1akAtBFoxbo.roa (raw, json)
Hash identifier: 9s//STrrusWApujlUCFI82SjFdBSgZ+Ntq1gFTVQav0=
Subject key identifier: AC:E3:94:01:42:9A:33:4B:7E:E1:56:4C:D5:A9:00:B4:11:68:C5:BA
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 02F5250B
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/rOOUAUKaM0t-4VZM1akAtBFoxbo.roa
Signing time: Sat 01 Jan 2022 04:57:50 +0000
ROA not before: Sat 01 Jan 2022 04:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34304
IP address blocks: 86.107.58.0/23 maxlen: 23
86.107.57.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
86.107.63.0/24 maxlen: 24
86.107.60.0/23 maxlen: 23
193.138.192.0/22 maxlen: 22
89.47.0.0/24 maxlen: 24
89.47.8.0/24 maxlen: 24
89.47.11.0/24 maxlen: 24
89.47.9.0/24 maxlen: 24
89.47.14.0/24 maxlen: 24
89.47.12.0/24 maxlen: 24
89.35.224.0/24 maxlen: 24
89.35.229.0/24 maxlen: 24
89.35.232.0/24 maxlen: 24
89.35.236.0/24 maxlen: 24
89.35.234.0/23 maxlen: 23
89.35.238.0/23 maxlen: 23
2a05:8880::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49620235 (0x2f5250b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jan 1 04:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ace39401429a334b7ee1564cd5a900b41168c5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:8e:c1:0a:b9:57:44:a5:d0:be:0f:aa:98:
ce:69:75:3f:21:8c:85:1b:fd:e9:91:1c:be:fa:69:
50:2b:7d:bd:23:3c:1f:e6:0a:0e:ac:a2:22:dd:cb:
03:bd:91:1d:5e:55:66:e2:10:5b:5d:65:d2:b7:2c:
b9:ae:fe:4e:f1:da:87:28:09:69:44:45:c5:8f:0d:
0a:18:6d:67:ef:f6:8c:01:ab:54:1e:2d:87:4d:bb:
f9:21:8b:2e:7a:6a:df:28:60:c2:34:73:81:9b:f5:
94:80:18:8b:81:7e:29:bd:e4:c7:69:ce:84:d8:b4:
07:3d:2e:bc:c0:04:86:40:a5:d3:cf:7a:45:3b:4b:
ca:77:1a:83:fa:f2:cb:41:79:2a:b8:05:16:8f:97:
0b:e9:67:81:3f:21:fe:4b:a9:d9:95:64:4f:d8:5c:
77:4b:fb:d9:3b:48:d5:56:14:1f:b9:9b:80:db:ee:
45:77:bf:9c:b9:f1:71:61:3e:06:31:1a:59:d5:a1:
ba:cb:ab:02:f0:0b:ea:3b:c0:a4:e5:36:c3:9c:13:
c3:ed:24:13:f5:ad:68:1a:85:19:b0:67:16:7c:93:
f8:9b:e8:8e:62:11:ae:95:9e:25:5c:12:28:3e:ac:
b7:5d:ee:df:fc:46:46:97:0c:a0:95:0b:a4:c1:fa:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:94:01:42:9A:33:4B:7E:E1:56:4C:D5:A9:00:B4:11:68:C5:BA
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/rOOUAUKaM0t-4VZM1akAtBFoxbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.57.0-86.107.61.255
86.107.63.0/24
89.35.224.0/24
89.35.229.0/24
89.35.232.0/24
89.35.234.0-89.35.236.255
89.35.238.0/23
89.47.0.0/24
89.47.8.0/23
89.47.11.0-89.47.12.255
89.47.14.0/24
188.211.164.0/23
193.138.192.0/22
IPv6:
2a05:8880::/30
Signature Algorithm: sha256WithRSAEncryption
99:ca:4f:64:1c:0d:68:84:14:00:63:50:c4:87:1b:aa:f1:77:
36:7d:74:21:74:bd:c0:c8:5d:ae:55:08:0f:a2:16:10:34:a6:
85:54:0a:f5:1d:0e:e9:c3:29:14:97:1d:f8:56:5f:92:4c:fe:
5f:14:ac:52:e9:91:90:51:17:26:cd:14:ff:53:dd:97:be:cc:
a6:b8:12:8c:10:eb:72:9c:fb:f1:8e:74:ba:64:15:30:6d:a8:
41:7f:0f:56:5a:ee:d1:98:e0:c5:a6:e8:c5:b1:3f:d5:23:7d:
b8:2c:c3:43:6a:65:4c:43:7c:56:d5:fd:40:ba:98:12:89:8f:
26:5b:37:e7:fc:f6:8f:bc:30:ba:4f:c9:01:a8:35:97:28:a3:
a0:e8:d4:9a:db:8d:42:7b:1b:11:11:48:d5:15:49:4f:24:74:
c2:0c:5c:2d:f3:fc:07:b3:a3:fe:c5:a7:93:01:90:e4:16:ce:
0c:e1:94:41:38:f9:d5:ab:58:e0:7d:cf:fe:b8:e3:cc:27:40:
28:b6:a5:ff:4d:a3:d1:58:5d:24:03:83:0c:16:3e:10:f0:3f:
ac:1b:e9:d3:6c:ed:4c:64:48:77:22:86:14:1f:7d:24:f1:3a:
9b:84:5e:71:d9:3b:3f:3b:e0:5d:e8:df:3c:54:3c:a0:8a:50:
b5:79:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-fra.rpki-client.org