Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/pDEicimXeu-FwNnkIrBiwUmJ864.roa
File: pDEicimXeu-FwNnkIrBiwUmJ864.roa (raw, json)
Hash identifier: asIOeeszrg/Mo8LhvEhocjyx1XiPbbTW0EKsBz71W9o=
Subject key identifier: A4:31:22:72:29:97:7A:EF:85:C0:D9:E4:22:B0:62:C1:49:89:F3:AE
Certificate issuer: /CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Certificate serial: 0185707079B009B3E4177AEA36C8BCAC3535
Authority key identifier: 0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/pDEicimXeu-FwNnkIrBiwUmJ864.roa
Signing time: Mon 02 Jan 2023 03:04:57 +0000
ROA not before: Mon 02 Jan 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44646
IP address blocks: 93.93.80.0/21 maxlen: 24
185.40.204.0/24 maxlen: 24
185.40.204.0/22 maxlen: 22
185.40.206.0/24 maxlen: 24
185.40.205.0/24 maxlen: 24
185.40.207.0/24 maxlen: 24
2a02:2b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:79:b0:09:b3:e4:17:7a:ea:36:c8:bc:ac:35:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Validity
Not Before: Jan 2 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a431227229977aef85c0d9e422b062c14989f3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:3f:c9:4c:dc:62:a8:68:10:ff:12:bd:d2:
b7:c4:e0:85:56:f9:d0:9e:37:08:3f:40:ea:fe:24:
58:bb:d8:86:09:35:62:4e:ef:14:54:b4:e6:84:45:
5f:c6:d4:6e:8d:a8:7a:cc:bf:ef:4e:0e:f9:2f:1d:
64:90:2e:94:4b:ca:c4:df:99:77:c2:9b:f3:78:73:
fd:78:fd:44:86:6b:cb:f8:a5:94:8d:94:5a:8a:52:
2e:6f:eb:89:ce:ad:bb:f1:bb:02:44:62:19:a5:6c:
b2:d2:de:bc:79:41:65:2e:9a:bc:6f:db:94:e7:73:
b2:d7:cb:dd:33:e9:6a:7e:df:2b:28:b5:89:75:61:
22:97:85:44:44:23:7c:ca:83:51:2b:87:46:0c:bd:
77:a9:89:06:73:86:9e:94:09:61:f6:07:08:42:e5:
66:eb:0d:bd:99:4a:44:ee:04:18:e6:85:38:1d:6f:
a9:ba:31:8d:f4:f4:98:55:5f:9b:4c:06:a1:14:95:
35:e7:02:b6:a4:9e:9f:e5:ae:65:ae:e7:2b:1b:df:
d5:9f:a0:36:15:94:8d:b1:3a:06:c0:10:f0:4f:c4:
c5:43:65:86:0d:06:aa:a0:7d:e4:1f:26:e2:df:f5:
ca:77:83:44:aa:44:75:f8:0c:58:62:2f:d8:90:00:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:31:22:72:29:97:7A:EF:85:C0:D9:E4:22:B0:62:C1:49:89:F3:AE
X509v3 Authority Key Identifier:
keyid:0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/pDEicimXeu-FwNnkIrBiwUmJ864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/Cr6v1VZZXohAyo69GbvSrFkbTKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.80.0/21
185.40.204.0/22
IPv6:
2a02:2b0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:1d:28:bf:08:e2:40:96:83:8f:1c:de:9f:71:a1:f8:c2:2c:
e2:91:c1:28:75:8a:e1:2b:43:44:8a:11:d0:36:dc:69:9a:ee:
e4:28:fb:6b:42:56:31:e6:ba:47:c1:44:bb:19:71:03:91:f1:
c1:3f:7f:8e:55:62:ee:e7:b2:28:0a:4a:c3:bd:34:10:e8:d1:
2d:4f:3f:ac:78:85:2a:7d:78:0c:f0:c1:b6:26:ea:fd:bf:5b:
f0:50:33:a8:d0:a1:bc:dc:57:5f:2b:66:56:83:15:50:e6:d9:
30:9b:2b:54:b4:c1:a5:95:68:14:62:4f:10:ac:a7:99:93:a2:
cb:af:5b:e6:e1:38:a5:4f:d1:8f:72:5b:bf:a3:58:7b:12:52:
9f:1e:fa:1f:ad:f8:33:b6:1e:d2:c8:84:54:01:ea:7f:d6:ae:
0d:b0:35:c5:c0:ff:95:70:37:af:f8:e8:56:87:52:5d:14:83:
7b:84:29:be:7a:59:c6:a7:ab:75:6e:96:e8:d8:f1:b1:6e:16:
33:f1:bc:66:5a:d0:2b:fa:b8:7b:fc:98:76:e4:96:b8:aa:c4:
78:80:b2:ad:8e:cc:61:f3:e9:75:2f:7c:0d:9b:0f:1c:69:9b:
65:55:19:40:2e:37:e1:5e:93:a1:4c:c3:b1:d8:9f:62:93:5b:
bf:c7:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org