Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b666e4-b405-4c07-bb89-59eaa8670ffa/1/a1VR1U9LLNRVFjtZ9nObvvUgiBc.roa
File: a1VR1U9LLNRVFjtZ9nObvvUgiBc.roa (raw, json)
Hash identifier: LAxpa62Xb1VSBv1++y+74O8hsgS+E3nLoyoEopaiE0Y=
Subject key identifier: 6B:55:51:D5:4F:4B:2C:D4:55:16:3B:59:F6:73:9B:BE:F5:20:88:17
Certificate issuer: /CN=a1479239d443985876b0859d33b1a0e7114d1a20
Certificate serial: 09AAEA82
Authority key identifier: A1:47:92:39:D4:43:98:58:76:B0:85:9D:33:B1:A0:E7:11:4D:1A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUeSOdRDmFh2sIWdM7Gg5xFNGiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b666e4-b405-4c07-bb89-59eaa8670ffa/1/a1VR1U9LLNRVFjtZ9nObvvUgiBc.roa
Signing time: Thu 03 Feb 2022 13:25:06 +0000
ROA not before: Thu 03 Feb 2022 13:25:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34993
IP address blocks: 185.57.148.0/22 maxlen: 22
37.148.252.0/22 maxlen: 22
141.98.220.0/22 maxlen: 22
89.248.208.0/24 maxlen: 24
89.248.210.0/23 maxlen: 23
185.151.188.0/22 maxlen: 22
2a0a:1580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162196098 (0x9aaea82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1479239d443985876b0859d33b1a0e7114d1a20
Validity
Not Before: Feb 3 13:25:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b5551d54f4b2cd455163b59f6739bbef5208817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:b3:e5:dd:0e:ee:c3:b9:37:70:b5:d3:ff:
dc:e4:81:28:49:75:dc:61:bb:c4:19:c1:62:8e:9d:
75:56:a7:25:04:b3:e6:ad:87:f1:ca:fd:da:9c:02:
cc:8f:21:47:d0:2b:0a:34:aa:39:7a:4d:1b:b9:b6:
a3:e3:0f:bb:ad:22:22:16:46:e5:f0:ed:44:3e:1a:
18:00:70:d7:47:e9:cf:47:4b:58:a9:df:5c:ed:89:
67:4b:9d:92:e1:ff:fa:a2:e2:cb:32:c2:ed:db:8c:
58:1b:d6:11:38:42:cd:59:ae:1a:1e:db:45:0b:0f:
96:b7:6b:2a:cd:04:aa:33:93:8d:f5:74:71:4f:a0:
2a:13:9f:f2:24:ec:3b:28:c6:1c:0e:7d:b9:2c:05:
5d:38:66:f2:c4:df:37:fd:e0:e7:83:b0:d0:6e:73:
a4:62:94:0b:00:77:fe:cd:d7:4d:8f:5c:4c:6e:00:
77:fb:a7:db:5b:b4:92:75:81:79:0e:a6:96:b3:21:
9c:2a:91:7b:83:ae:07:e4:79:3f:de:6e:f5:72:a0:
01:0e:75:84:60:4f:59:62:cd:07:29:0d:10:7b:2e:
56:ad:07:11:ed:c3:34:ca:46:7d:53:80:83:88:71:
c6:b3:53:e7:a4:c6:a7:b3:d8:ce:10:f1:70:a2:17:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:51:D5:4F:4B:2C:D4:55:16:3B:59:F6:73:9B:BE:F5:20:88:17
X509v3 Authority Key Identifier:
keyid:A1:47:92:39:D4:43:98:58:76:B0:85:9D:33:B1:A0:E7:11:4D:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUeSOdRDmFh2sIWdM7Gg5xFNGiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b666e4-b405-4c07-bb89-59eaa8670ffa/1/a1VR1U9LLNRVFjtZ9nObvvUgiBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b666e4-b405-4c07-bb89-59eaa8670ffa/1/oUeSOdRDmFh2sIWdM7Gg5xFNGiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.252.0/22
89.248.208.0/24
89.248.210.0/23
141.98.220.0/22
185.57.148.0/22
185.151.188.0/22
IPv6:
2a0a:1580::/29
Signature Algorithm: sha256WithRSAEncryption
48:7d:17:b8:15:17:29:da:e3:74:2c:a9:44:4a:9f:2c:3d:4a:
cb:4b:df:f2:5f:71:c8:68:a0:52:b0:f9:df:d0:ea:42:0f:4e:
7d:6f:38:b1:39:bc:42:de:92:35:fa:06:91:1f:08:e1:4f:18:
41:91:50:4f:66:e4:e2:e4:38:91:9d:7a:cb:39:09:2d:53:8a:
f7:06:f2:f3:31:13:d0:9b:8d:71:4d:16:ca:54:42:cf:28:bb:
86:4f:db:fc:da:f7:b8:a9:db:ae:91:57:7b:3b:07:84:fa:2b:
ce:fb:00:d5:09:4b:68:75:73:ab:3e:ff:c0:b4:30:29:c7:e4:
e8:9e:d6:bc:77:ba:cc:1d:66:b8:cc:26:ea:56:97:32:95:34:
cf:92:21:03:d4:a2:4c:3c:51:8a:96:b0:61:0c:66:41:4b:ba:
7b:81:ca:d3:32:ac:bf:41:a4:2c:44:5b:5a:28:6f:6c:1d:bc:
1f:4f:c1:af:3a:d5:0c:7a:32:e3:85:74:ec:a1:f8:f4:d8:52:
d7:af:c4:13:fd:9e:7e:99:98:1e:32:0f:88:b2:d2:10:35:24:
21:4f:01:56:0a:32:ee:a0:44:d8:04:1a:c1:4a:70:2d:f7:0f:
b1:fa:4c:71:05:b1:22:d4:08:94:cf:15:bf:77:a8:23:ec:29:
03:92:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:40 2024 by rpki-client on console-ams.rpki-client.org