Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/900e80-05a4-4a80-8a22-80f3f4411f18/1/aBupWUHNo5CyUNJDvTMk1s2LCtI.roa
File: aBupWUHNo5CyUNJDvTMk1s2LCtI.roa (raw, json)
Hash identifier: 1Rsvfb488+2unTclTpL+H8qOm6LebCVras7Mn0aMMjA=
Subject key identifier: 68:1B:A9:59:41:CD:A3:90:B2:50:D2:43:BD:33:24:D6:CD:8B:0A:D2
Certificate issuer: /CN=5dd11893ff3b9f2ce2d1e5b3391f9830c55a813b
Certificate serial: 085DD039
Authority key identifier: 5D:D1:18:93:FF:3B:9F:2C:E2:D1:E5:B3:39:1F:98:30:C5:5A:81:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdEYk_87nyzi0eWzOR-YMMVagTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/900e80-05a4-4a80-8a22-80f3f4411f18/1/aBupWUHNo5CyUNJDvTMk1s2LCtI.roa
Signing time: Sat 01 Jan 2022 03:54:02 +0000
ROA not before: Sat 01 Jan 2022 03:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57395
IP address blocks: 176.98.165.0/24 maxlen: 24
176.98.166.0/24 maxlen: 24
176.98.160.0/24 maxlen: 24
176.98.161.0/24 maxlen: 24
176.98.162.0/24 maxlen: 24
176.98.163.0/24 maxlen: 24
176.98.164.0/24 maxlen: 24
176.98.167.0/24 maxlen: 24
185.181.169.0/24 maxlen: 24
185.181.170.0/24 maxlen: 24
185.181.171.0/24 maxlen: 24
185.181.168.0/24 maxlen: 24
193.150.64.0/24 maxlen: 24
2a0b:33c0:5::/48 maxlen: 48
2a0b:33c0:116::/48 maxlen: 48
2a0b:33c0:114::/48 maxlen: 48
2a0b:33c0:118::/48 maxlen: 48
2a0b:33c0:113::/48 maxlen: 48
2a0b:33c0:51::/48 maxlen: 48
2a0b:33c0:107::/48 maxlen: 48
2a0b:33c0:2::/48 maxlen: 48
2a0b:33c0:50::/48 maxlen: 48
2a0b:33c0:10::/48 maxlen: 48
2a0b:33c0:6::/48 maxlen: 48
2a0b:33c0:3::/48 maxlen: 48
2a0b:33c0:1::/48 maxlen: 48
2a0b:33c0:117::/48 maxlen: 48
2a0b:33c0:112::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140365881 (0x85dd039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd11893ff3b9f2ce2d1e5b3391f9830c55a813b
Validity
Not Before: Jan 1 03:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=681ba95941cda390b250d243bd3324d6cd8b0ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:0a:97:85:5f:f1:fc:d7:a1:bc:f6:f3:77:
77:52:b2:42:33:5c:5e:6a:a6:5d:23:6f:16:e5:03:
46:cf:14:3f:7c:44:99:db:5d:cc:80:97:01:83:2a:
b9:d1:0c:12:26:6c:5c:09:d7:bd:43:d7:49:70:14:
53:dc:24:f2:af:8c:34:25:07:fe:20:36:53:17:11:
c1:87:47:7f:d0:4f:fe:a5:d7:2b:6d:44:25:11:07:
a3:82:b1:ea:af:44:5a:eb:56:2a:5c:7c:7e:40:92:
9a:c3:b5:f9:a9:9e:28:62:6d:e4:99:d0:f5:df:8b:
a0:d2:09:0d:8f:8d:7b:6c:9f:d4:37:4f:89:ec:4b:
0a:6e:51:17:04:34:cd:99:ab:d5:94:bd:8e:33:21:
9e:86:df:bd:b9:9d:e1:01:60:21:82:04:80:d2:c1:
9e:f0:fb:7f:e2:35:cb:1f:f2:cb:46:ca:bd:56:4b:
7f:74:ad:3b:6d:ba:e2:7d:6a:ca:da:61:63:71:17:
12:36:1b:79:ad:73:84:be:30:69:1e:4d:d5:70:d3:
e0:fb:62:6d:f9:94:11:02:c3:62:68:8b:3c:4a:60:
46:bd:85:5a:68:53:ad:23:34:1c:a2:1d:0c:58:b5:
11:e2:36:32:86:fa:5b:a9:df:03:00:13:53:0f:8e:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:A9:59:41:CD:A3:90:B2:50:D2:43:BD:33:24:D6:CD:8B:0A:D2
X509v3 Authority Key Identifier:
keyid:5D:D1:18:93:FF:3B:9F:2C:E2:D1:E5:B3:39:1F:98:30:C5:5A:81:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdEYk_87nyzi0eWzOR-YMMVagTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/900e80-05a4-4a80-8a22-80f3f4411f18/1/aBupWUHNo5CyUNJDvTMk1s2LCtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/900e80-05a4-4a80-8a22-80f3f4411f18/1/XdEYk_87nyzi0eWzOR-YMMVagTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.160.0/21
185.181.168.0/22
193.150.64.0/24
IPv6:
2a0b:33c0:1::-2a0b:33c0:3:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:5::-2a0b:33c0:6:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:10::/48
2a0b:33c0:50::/47
2a0b:33c0:107::/48
2a0b:33c0:112::-2a0b:33c0:114:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:116::-2a0b:33c0:118:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:30:de:b3:20:0c:44:01:31:41:0b:ba:bd:ce:5f:bc:77:e9:
74:03:1c:df:4d:a7:b4:f7:71:bc:91:85:5c:25:10:09:60:f4:
fe:f3:e2:01:44:ae:d4:7d:1b:c5:66:14:a0:22:eb:7d:ec:a8:
a2:1f:b4:90:b0:b1:80:97:c3:4a:6f:65:9e:cc:cd:72:3a:ed:
27:6b:c8:f4:d7:64:d3:21:ec:69:34:27:6a:58:26:dd:ad:4b:
72:84:1a:f9:75:17:6e:7d:a4:fd:6d:a3:5b:7e:ff:5e:44:4e:
16:58:f9:b7:22:da:3d:49:b2:e8:ff:64:e2:92:f9:cc:59:fc:
dd:d9:ee:40:bc:d3:0a:e6:a6:85:8f:91:93:00:16:2e:e6:c8:
8e:35:7d:f9:1a:fd:a3:fb:75:9e:b0:52:16:a0:18:a4:55:60:
8e:8c:9e:9d:61:83:9c:d5:5b:d4:71:fa:03:b6:00:bb:7b:9a:
fc:55:0d:96:c6:75:ec:aa:ea:d4:1a:6b:89:3f:b4:e5:65:54:
27:de:03:3b:e6:9f:cf:62:73:40:7e:3d:89:a4:cb:6d:8b:de:
25:09:f6:23:59:7f:57:64:36:dd:fd:ac:42:77:ee:8b:d7:f3:
98:4f:c9:26:4a:ba:54:d4:fa:30:56:1d:5e:34:85:db:c9:33:
69:76:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:23 2024 by rpki-client on console-ams.rpki-client.org