Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/16jXxeAGMBD6UbqJvVY1SODY_fc.roa
File: 16jXxeAGMBD6UbqJvVY1SODY_fc.roa (raw, json)
Hash identifier: zfu7vYew9b7B+C3XlC+YA7qDIUxLvmeUDebyJPxoXVM=
Subject key identifier: D7:A8:D7:C5:E0:06:30:10:FA:51:BA:89:BD:56:35:48:E0:D8:FD:F7
Certificate issuer: /CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Certificate serial: 0D0C4D72
Authority key identifier: D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/16jXxeAGMBD6UbqJvVY1SODY_fc.roa
Signing time: Tue 18 Jan 2022 10:29:26 +0000
ROA not before: Tue 18 Jan 2022 10:29:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 185.240.240.0/24 maxlen: 24
185.240.242.0/23 maxlen: 23
185.240.241.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
185.230.160.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
2a0c:2500::/32 maxlen: 32
2a09:6301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218910066 (0xd0c4d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Validity
Not Before: Jan 18 10:29:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7a8d7c5e0063010fa51ba89bd563548e0d8fdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:ea:d6:8f:9f:94:77:20:b5:88:86:42:c9:
02:c9:28:b5:62:4f:c1:db:e8:ea:22:d2:b0:54:6d:
6d:7f:4b:b7:e4:ca:b2:e1:d5:ba:7b:a6:1d:3e:0d:
55:84:39:d9:95:a8:7f:c5:a9:5e:f1:a5:e4:76:ed:
51:51:01:86:eb:5e:30:9e:96:af:72:25:8a:35:dc:
58:a4:6a:b1:66:82:84:d2:83:16:9e:f1:f7:7b:94:
6c:05:6f:e7:c0:e0:21:62:51:b2:7f:80:32:1e:fb:
f7:6f:53:7b:e9:90:ae:99:4e:4f:06:70:34:5e:84:
80:41:c5:4c:ce:41:35:64:06:88:22:6b:c5:ce:d9:
2e:1a:5d:df:87:e8:ac:48:05:b2:15:b2:8c:73:92:
bf:ac:bc:d7:53:18:12:c7:04:16:fe:cd:5a:6e:ac:
f3:6c:a2:fe:46:4a:c8:8e:ba:a4:5a:ba:b7:fd:d2:
2a:0b:45:ce:c9:7f:1a:40:78:da:46:08:e2:5f:99:
59:95:db:0d:22:3b:14:52:bb:1a:4c:61:b8:b0:97:
31:2c:84:b4:1a:61:db:be:9a:10:e9:de:31:86:58:
af:f4:4b:38:3f:03:3c:9e:d0:88:8c:2c:be:55:06:
70:81:38:ed:26:00:68:79:b3:17:60:f7:3c:6e:89:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A8:D7:C5:E0:06:30:10:FA:51:BA:89:BD:56:35:48:E0:D8:FD:F7
X509v3 Authority Key Identifier:
keyid:D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/16jXxeAGMBD6UbqJvVY1SODY_fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.120.0/22
185.230.160.0/22
185.240.240.0/22
IPv6:
2a09:6301::/32
2a0c:2500::/32
Signature Algorithm: sha256WithRSAEncryption
2b:23:7b:5c:14:1b:88:0a:f2:45:5b:23:1b:55:63:eb:71:8c:
18:8d:87:be:a4:93:9b:cf:c2:7f:45:e5:2d:87:9a:e5:d4:ef:
44:66:54:14:a9:fd:c7:25:32:12:47:ed:56:28:5f:2c:d0:f4:
9a:ba:38:75:77:a9:63:ed:1b:c2:94:6c:7e:86:f2:ec:b7:0f:
51:0b:b1:df:ec:e6:c0:95:4f:36:b8:06:44:12:26:38:7f:69:
bf:95:94:a4:5a:d9:3c:2e:5c:4d:f9:1b:5f:38:41:be:6d:14:
6d:61:7f:14:b1:8c:39:30:0d:bf:61:47:03:a8:8e:ee:c5:81:
17:50:1f:09:04:2c:a1:87:c9:2e:56:82:df:e2:30:ad:03:01:
c6:fa:5b:5d:86:49:13:63:3c:20:18:b0:2c:4e:d8:ac:18:bf:
d9:20:28:47:1e:e4:63:eb:88:f7:c9:a5:c0:2e:88:8a:08:39:
0f:1d:26:c3:1d:b3:1e:76:5e:4f:e6:5b:f4:8e:48:e4:45:64:
e7:f2:6b:5e:0f:bb:82:04:dc:fe:d3:64:a7:20:06:51:43:88:
22:ae:f9:7d:73:ca:7e:26:4a:74:39:3c:e2:b3:75:98:cc:24:
d2:28:71:1d:61:0b:5b:3a:41:e6:5c:ec:8b:9d:6e:5f:2f:25:
39:a3:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:23 2023 by rpki-client on console-ams.rpki-client.org