Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e5e0ce-4a06-4341-a367-763f5ba2eab1/1/1BgvqVrj4f9SVO5Z52-4GzFpq2o.roa
File: 1BgvqVrj4f9SVO5Z52-4GzFpq2o.roa (raw, json)
Hash identifier: NvnrJVv8Pjb0hexgNVgYf87q6LZWjV1R9fXH2lwrAd8=
Subject key identifier: D4:18:2F:A9:5A:E3:E1:FF:52:54:EE:59:E7:6F:B8:1B:31:69:AB:6A
Certificate issuer: /CN=38040937b018e3b40697e82151b588b2809dae60
Certificate serial: 1A86CEBA
Authority key identifier: 38:04:09:37:B0:18:E3:B4:06:97:E8:21:51:B5:88:B2:80:9D:AE:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAQJN7AY47QGl-ghUbWIsoCdrmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e5e0ce-4a06-4341-a367-763f5ba2eab1/1/1BgvqVrj4f9SVO5Z52-4GzFpq2o.roa
Signing time: Sat 01 Jan 2022 10:05:18 +0000
ROA not before: Sat 01 Jan 2022 10:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202169
IP address blocks: 185.240.80.0/23 maxlen: 23
185.240.82.0/23 maxlen: 23
185.19.190.0/24 maxlen: 24
185.19.191.0/24 maxlen: 24
185.19.188.0/23 maxlen: 23
91.215.48.0/22 maxlen: 22
2a00:4920::/32 maxlen: 34
2a00:4920::/33 maxlen: 34
2a00:4920:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445042362 (0x1a86ceba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38040937b018e3b40697e82151b588b2809dae60
Validity
Not Before: Jan 1 10:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4182fa95ae3e1ff5254ee59e76fb81b3169ab6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:d4:93:da:e2:52:2a:4d:27:2f:76:62:ea:
f6:c9:e2:c0:f0:4c:40:fc:3a:90:73:24:1d:c2:15:
13:b0:60:9b:8d:c2:cd:0c:a8:a2:8e:62:18:43:09:
b0:54:0c:af:55:e6:94:a1:1a:9b:aa:35:3b:e7:dd:
f8:dc:40:36:dd:8d:df:53:9c:fb:20:44:cf:01:98:
b5:9f:18:71:1c:6b:16:6a:ae:b7:e0:9c:49:0d:f2:
05:fb:2d:2f:e4:72:05:c7:fd:d4:91:f9:34:00:6c:
07:ef:a0:f9:08:ed:46:3c:5f:8b:fb:d8:ab:54:d6:
83:f5:ed:bc:ec:7e:db:51:67:e0:84:d0:15:56:71:
43:bd:d5:0b:b0:3c:b4:ca:4f:ba:d1:25:9a:35:e3:
26:d4:4e:13:c9:14:e1:cb:a8:be:c5:42:12:53:f9:
86:e3:a0:ca:e0:3b:02:ff:aa:02:61:b6:58:b8:f6:
0d:aa:a9:8b:05:69:fd:5c:7a:54:3e:3f:e3:e2:7a:
61:14:c6:36:0a:18:aa:ee:bf:c2:af:06:56:43:58:
c3:66:98:aa:04:41:8e:79:bf:30:13:80:6a:a8:95:
ea:e2:cc:8e:e8:3f:e6:57:ad:1f:9e:eb:19:17:f9:
bf:a5:9c:6a:70:67:72:7c:57:f5:fa:a5:9b:a1:3e:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:2F:A9:5A:E3:E1:FF:52:54:EE:59:E7:6F:B8:1B:31:69:AB:6A
X509v3 Authority Key Identifier:
keyid:38:04:09:37:B0:18:E3:B4:06:97:E8:21:51:B5:88:B2:80:9D:AE:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAQJN7AY47QGl-ghUbWIsoCdrmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e5e0ce-4a06-4341-a367-763f5ba2eab1/1/1BgvqVrj4f9SVO5Z52-4GzFpq2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e5e0ce-4a06-4341-a367-763f5ba2eab1/1/OAQJN7AY47QGl-ghUbWIsoCdrmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.48.0/22
185.19.188.0/22
185.240.80.0/22
IPv6:
2a00:4920::/32
Signature Algorithm: sha256WithRSAEncryption
92:2b:a3:ba:c4:37:4f:d1:9b:cd:a5:a0:43:7d:9b:89:e2:4c:
a5:04:3e:75:d0:df:89:ac:32:0a:ec:8d:06:3f:87:2c:30:0a:
ad:ef:3d:6c:2c:9a:5a:e4:ed:12:97:c9:fc:f3:de:99:05:47:
5e:8a:2a:0f:f7:25:39:70:6a:e3:64:d7:0c:50:79:4c:82:a2:
1b:3b:31:64:d6:70:6b:3e:eb:bc:b2:ba:91:8e:d5:f4:ee:38:
6b:14:d6:13:9f:1f:03:69:c0:d1:a8:9a:85:eb:aa:90:34:14:
23:6e:45:c2:71:a6:6d:56:55:7c:d3:7b:74:4f:22:8f:05:4d:
7c:fb:03:47:7f:42:95:b2:a2:0f:eb:99:1b:68:9c:15:b2:fe:
af:26:20:39:c9:89:3b:f6:ef:c0:31:28:14:6e:5e:70:a6:be:
b1:34:d9:91:85:a1:f2:29:5d:6e:31:54:47:25:44:a4:a1:0a:
b4:d9:8a:74:a9:36:dc:87:1f:27:a0:73:12:0f:e2:d9:13:71:
5c:f4:86:09:f1:54:87:9d:c9:09:38:4e:40:a7:7b:3d:5f:21:
ff:4b:24:ec:22:b7:80:f0:17:7b:68:c0:8e:78:63:1c:15:9b:
c7:9f:6e:9b:a0:8f:44:f8:ad:1e:f7:99:b4:86:a1:e2:b7:1e:
99:c0:72:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:42 2024 by rpki-client on console-ams.rpki-client.org