Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/JvV7r3PHPXz4YMON03U7WWLA8Ac.roa
File: JvV7r3PHPXz4YMON03U7WWLA8Ac.roa (raw, json)
Hash identifier: wgxGF4tf3LSbdwNBh6MfEVUPLgdeahaRpE/du84oJEw=
Subject key identifier: 26:F5:7B:AF:73:C7:3D:7C:F8:60:C3:8D:D3:75:3B:59:62:C0:F0:07
Certificate issuer: /CN=ac89582220b58417a3a9459f55c5b947cc357c25
Certificate serial: 32DD9EA9
Authority key identifier: AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/JvV7r3PHPXz4YMON03U7WWLA8Ac.roa
Signing time: Sat 01 Jan 2022 13:58:42 +0000
ROA not before: Sat 01 Jan 2022 13:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28717
IP address blocks: 195.93.176.0/23 maxlen: 23
195.93.182.0/23 maxlen: 23
188.120.64.0/19 maxlen: 19
91.143.112.0/20 maxlen: 20
94.18.0.0/16 maxlen: 16
109.202.128.0/19 maxlen: 19
88.212.64.0/18 maxlen: 18
78.111.160.0/20 maxlen: 20
5.83.24.0/21 maxlen: 21
176.222.232.0/21 maxlen: 21
212.60.96.0/19 maxlen: 19
2a01:4f0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853384873 (0x32dd9ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89582220b58417a3a9459f55c5b947cc357c25
Validity
Not Before: Jan 1 13:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26f57baf73c73d7cf860c38dd3753b5962c0f007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:bf:18:a5:b0:d7:da:12:26:b4:ab:58:b2:
ec:8e:79:27:99:65:03:87:a5:6c:c4:32:95:e7:2f:
af:9e:21:3b:77:3f:5b:1d:97:ea:05:cb:75:c9:af:
f2:28:df:e7:c0:3c:cf:86:80:23:f5:4d:98:4e:08:
28:29:a0:42:98:41:c2:8a:9a:56:0c:b8:09:fa:84:
a3:73:ad:5e:65:ba:8c:1e:da:59:87:57:f2:2a:5b:
a5:56:83:a7:2f:15:92:41:99:a9:8e:62:d4:64:7f:
f4:90:20:be:cb:c7:9c:cb:04:8e:b5:5e:20:99:cf:
22:89:49:ef:54:b4:19:1b:d7:75:38:d2:8e:aa:9e:
06:bd:b3:a4:29:cf:95:8e:b6:c3:4b:4e:46:61:60:
26:c0:f1:11:5c:0f:e2:dd:95:fc:60:7a:c4:e5:84:
43:26:0c:10:31:bb:df:d3:38:bc:78:90:a3:9d:c0:
be:fb:9f:29:22:8c:4c:18:a7:26:2d:74:9a:0e:7d:
ea:43:d0:23:bc:9f:5d:cf:34:98:70:ff:e5:77:e0:
d4:2a:85:e1:86:2f:13:cc:b6:c8:36:93:81:19:3c:
de:1b:41:9c:49:83:05:0f:28:07:18:99:dd:6f:fe:
1b:65:4e:b0:11:8a:7f:0e:eb:04:cd:03:be:4f:65:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:7B:AF:73:C7:3D:7C:F8:60:C3:8D:D3:75:3B:59:62:C0:F0:07
X509v3 Authority Key Identifier:
keyid:AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/JvV7r3PHPXz4YMON03U7WWLA8Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.24.0/21
78.111.160.0/20
88.212.64.0/18
91.143.112.0/20
94.18.0.0/16
109.202.128.0/19
176.222.232.0/21
188.120.64.0/19
195.93.176.0/23
195.93.182.0/23
212.60.96.0/19
IPv6:
2a01:4f0::/32
Signature Algorithm: sha256WithRSAEncryption
33:7a:03:6d:fe:c4:2e:bd:33:04:4f:d7:33:d1:df:52:99:28:
22:b3:82:c0:1d:b3:b7:52:1a:41:34:8c:9d:d1:e1:b4:5b:33:
a8:f7:e5:0d:a9:b3:ba:87:50:41:82:49:ed:06:bd:64:74:4b:
70:5a:24:04:13:69:df:5f:1b:9a:f0:1e:f7:5a:bf:74:8c:64:
3c:95:e7:99:31:05:13:28:dd:64:3b:04:21:0c:d6:88:cc:ef:
7b:20:5f:54:ba:ca:76:f8:54:5e:97:43:70:30:dd:1f:e0:fa:
5f:7b:ef:22:fb:95:b6:b1:58:ed:12:b0:29:af:75:f2:11:c2:
f7:c9:20:69:0b:2d:b2:e7:22:33:f1:1b:fb:08:a5:3f:e4:69:
6f:20:53:b2:11:37:6b:7f:42:83:02:bb:4a:8f:87:60:a4:57:
9e:fd:a4:1c:1e:29:68:d4:7b:88:85:e5:ef:7f:78:54:7d:08:
bf:6b:4b:68:f1:07:5d:50:0c:88:04:8e:f4:9f:ca:86:6c:cd:
7c:65:b8:fd:74:32:3a:19:33:81:ab:32:47:6f:71:29:ea:58:
97:62:40:8f:c4:df:ef:c7:a7:a0:c1:ad:c5:17:f8:23:2e:8d:
3b:7a:23:6f:a6:69:72:41:5e:83:3b:bd:c0:96:1a:ab:39:53:
b1:55:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:46 2024 by rpki-client on console-fra.rpki-client.org