Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/FzcXzM12FvswUFEraF9GiwO23BU.roa
File: FzcXzM12FvswUFEraF9GiwO23BU.roa (raw, json)
Hash identifier: taRp1h31/oD/cUiZGsis9vQns7IhPMgvqAIgYvKVW0A=
Subject key identifier: 17:37:17:CC:CD:76:16:FB:30:50:51:2B:68:5F:46:8B:03:B6:DC:15
Certificate issuer: /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial: 0559C17A
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/FzcXzM12FvswUFEraF9GiwO23BU.roa
Signing time: Tue 17 May 2022 18:59:29 +0000
ROA not before: Tue 17 May 2022 18:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207059
IP address blocks: 185.167.77.0/24 maxlen: 24
185.167.78.0/24 maxlen: 24
185.167.76.0/24 maxlen: 24
185.167.79.0/24 maxlen: 24
2a0b:4e00::/48 maxlen: 48
2a0b:4e00:3::/48 maxlen: 48
2a0b:4e00:1::/48 maxlen: 48
2a0b:4e00:4::/48 maxlen: 48
2a0b:4e00::/29 maxlen: 48
2a0b:4e00:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89768314 (0x559c17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Validity
Not Before: May 17 18:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=173717cccd7616fb3050512b685f468b03b6dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:8b:4f:40:c4:14:8b:db:9f:18:8f:5d:49:
03:b2:e6:8e:d1:be:10:d4:37:28:5e:78:81:35:7e:
50:71:9b:03:ee:e1:e1:36:00:6f:4c:4f:cc:52:a3:
2c:3c:fe:59:e2:1f:da:df:5b:a5:30:de:45:cf:84:
7b:f1:e3:4f:4b:aa:b2:83:1f:73:2f:2e:eb:7d:f8:
16:c2:af:52:85:d7:97:ac:e6:db:e1:97:0e:d4:9e:
a5:f4:c9:f7:2c:48:42:28:48:41:48:ed:9b:92:47:
a8:b4:44:2f:b4:28:d4:06:f7:a2:a0:41:e6:1a:78:
b8:8e:58:69:82:52:ca:d1:98:ed:da:e2:7a:37:b9:
8a:b6:2e:ed:bb:00:72:fe:cb:96:da:85:07:c2:f5:
23:e1:20:85:e8:f1:a4:42:89:28:2e:3a:b9:bd:4b:
e1:e1:cb:24:af:8c:45:a3:7c:e0:c0:34:21:49:52:
c5:55:d4:d7:d5:cd:7f:cb:1c:14:58:49:2e:25:4f:
cb:00:72:f6:f0:7b:d3:16:85:4e:11:0d:f2:95:b2:
bc:ca:21:cc:59:01:76:03:de:18:33:8b:f1:7d:e9:
e6:e6:91:83:9e:14:6f:38:65:2d:57:ed:90:e2:b3:
8e:d1:8e:7b:c1:b9:80:76:a0:03:20:66:0b:c7:b0:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:37:17:CC:CD:76:16:FB:30:50:51:2B:68:5F:46:8B:03:B6:DC:15
X509v3 Authority Key Identifier:
keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/FzcXzM12FvswUFEraF9GiwO23BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.76.0/22
IPv6:
2a0b:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
6b:f2:12:85:84:02:02:ab:d1:06:d5:fb:79:6b:5a:4d:6a:61:
32:ec:b5:40:17:04:99:2c:eb:f0:b5:ac:c0:69:a6:f6:c1:35:
6a:82:34:2e:06:a1:ae:0d:d6:63:8b:6c:24:b0:3a:d2:9a:90:
14:9c:10:b2:20:15:e7:f2:f0:6d:10:f0:d4:53:5b:77:f4:e4:
35:0b:cf:a8:0f:45:53:3a:9e:a5:0b:24:c2:87:00:68:f3:82:
21:97:84:7b:63:cd:65:16:ce:27:97:a3:9d:57:42:09:64:6c:
69:76:6e:4a:d2:d5:e1:1c:15:5d:ff:f2:7b:2d:35:47:c2:38:
a7:47:f3:8e:ad:fe:fe:88:8d:51:3f:ac:bf:6b:59:4a:e0:75:
fa:3e:7e:55:70:bc:b0:a7:d4:e2:03:ff:2d:e3:2e:a4:6f:0e:
44:84:a0:b5:5a:5a:e0:1a:44:ee:e9:c9:7b:f7:9a:0e:bd:1f:
e9:49:a8:1d:28:d3:c3:78:74:f9:8c:64:ba:a5:bb:a1:33:9f:
3d:ef:0c:ad:a6:35:12:2b:a7:2d:42:74:71:1d:9e:c5:33:c4:
62:8e:ff:56:7b:7b:59:21:dc:07:29:51:2d:5b:1f:9c:b8:aa:
dc:55:51:ae:3c:ad:1a:d7:4d:04:a3:e7:bb:f0:44:8d:80:d3:
4e:5b:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org