Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/8svuL-uOljSJqts8bpglOQXVRfk.roa
File: 8svuL-uOljSJqts8bpglOQXVRfk.roa (raw, json)
Hash identifier: nrcH4brtaNvJb9XpK0FQSqF+cSJTA2syohQscQ760NE=
Subject key identifier: F2:CB:EE:2F:EB:8E:96:34:89:AA:DB:3C:6E:98:25:39:05:D5:45:F9
Certificate issuer: /CN=9e2bb9d60c74478ed29dd0e0d10d685ceb7c1573
Certificate serial: 37D74794
Authority key identifier: 9E:2B:B9:D6:0C:74:47:8E:D2:9D:D0:E0:D1:0D:68:5C:EB:7C:15:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niu51gx0R47SndDg0Q1oXOt8FXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/8svuL-uOljSJqts8bpglOQXVRfk.roa
Signing time: Sat 01 Jan 2022 14:56:06 +0000
ROA not before: Sat 01 Jan 2022 14:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43451
IP address blocks: 31.24.176.0/21 maxlen: 21
31.24.176.0/22 maxlen: 22
31.24.180.0/22 maxlen: 22
93.174.176.0/22 maxlen: 22
93.174.176.0/21 maxlen: 23
78.41.172.0/22 maxlen: 22
78.41.168.0/22 maxlen: 22
93.174.180.0/22 maxlen: 23
93.174.180.0/23 maxlen: 23
78.41.168.0/21 maxlen: 21
185.22.212.0/22 maxlen: 22
185.22.212.0/23 maxlen: 23
185.22.214.0/23 maxlen: 23
185.213.144.0/23 maxlen: 23
185.213.144.0/22 maxlen: 22
185.213.146.0/23 maxlen: 23
81.92.248.0/21 maxlen: 21
81.92.248.0/22 maxlen: 22
81.92.252.0/22 maxlen: 22
188.121.160.0/20 maxlen: 20
188.121.160.0/19 maxlen: 19
185.134.212.0/22 maxlen: 22
188.121.176.0/20 maxlen: 20
188.121.184.0/22 maxlen: 22
2a03:a200:ffff::/64 maxlen: 64
2001:67c:2670::/48 maxlen: 48
2a03:a200::/32 maxlen: 126
2a0b:f104::/30 maxlen: 30
2a03:a200:2::4/126 maxlen: 126
2a0b:f100::/30 maxlen: 30
2a0b:f100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936855444 (0x37d74794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2bb9d60c74478ed29dd0e0d10d685ceb7c1573
Validity
Not Before: Jan 1 14:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2cbee2feb8e963489aadb3c6e98253905d545f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:b5:2e:76:08:e3:04:dd:f6:1f:d7:bd:9e:
da:23:4b:87:93:09:ee:7b:fd:02:15:8a:c8:5d:2d:
ba:27:3f:1a:9c:32:e2:87:21:55:c5:04:4f:11:dd:
06:19:f9:00:f8:9b:52:48:fb:99:c9:bb:98:95:fa:
f2:45:36:34:74:2c:07:22:fd:bb:d8:3b:73:6b:aa:
9b:0d:c7:1a:b8:e3:17:5e:1e:25:b0:24:8e:a4:bc:
d9:e4:b7:18:eb:b5:60:a4:69:8b:09:56:65:1c:fb:
75:4f:88:83:71:56:e6:73:92:14:26:80:e9:1f:b4:
4e:dd:b2:25:7e:8e:6e:9a:33:57:ed:7a:67:af:81:
d7:74:89:95:2d:a1:48:57:27:21:b5:22:25:37:dc:
39:d5:9f:43:fb:83:e0:3b:2e:bc:2f:0a:c6:d6:33:
7b:0e:7e:1c:e8:f5:c8:6b:a7:ef:52:1b:80:42:10:
09:a6:ee:12:2a:49:60:e7:f0:3e:63:59:da:57:38:
13:e0:78:df:28:c9:64:04:b7:78:6f:cf:2f:e2:b0:
ca:f9:96:17:d4:a0:3f:1a:41:64:9c:20:85:43:1a:
e7:57:07:31:0b:e7:d0:8f:cd:a9:3e:1f:9b:56:9e:
c1:f8:55:34:20:f9:18:02:d5:b3:dd:af:ac:5e:fc:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CB:EE:2F:EB:8E:96:34:89:AA:DB:3C:6E:98:25:39:05:D5:45:F9
X509v3 Authority Key Identifier:
keyid:9E:2B:B9:D6:0C:74:47:8E:D2:9D:D0:E0:D1:0D:68:5C:EB:7C:15:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niu51gx0R47SndDg0Q1oXOt8FXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/8svuL-uOljSJqts8bpglOQXVRfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.176.0/21
78.41.168.0/21
81.92.248.0/21
93.174.176.0/21
185.22.212.0/22
185.134.212.0/22
185.213.144.0/22
188.121.160.0/19
IPv6:
2001:67c:2670::/48
2a03:a200::/32
2a0b:f100::/29
Signature Algorithm: sha256WithRSAEncryption
66:5a:26:48:c6:c6:d0:e7:b0:db:7c:35:59:1c:75:af:b6:20:
fa:2b:8e:e1:e8:33:f5:d5:4e:bf:31:45:e0:31:7a:85:8d:c1:
f2:38:ae:ff:49:54:dd:22:e2:80:8f:55:9b:e5:e7:96:b9:3f:
06:2a:0e:c7:04:98:10:b2:b2:f8:e9:fe:91:98:0a:8d:c3:04:
fc:1c:62:bc:5c:30:1a:c3:17:be:45:1a:fc:4c:1b:74:48:35:
0d:63:12:fc:3e:d5:ed:32:6c:bc:d6:d7:f8:5d:72:dc:f7:ef:
e4:bc:db:9f:89:94:4c:29:0c:37:b7:10:97:5c:69:b2:ab:f4:
53:62:3c:f0:d3:ea:74:29:5b:50:48:da:18:8c:ae:96:bf:9c:
7d:eb:61:31:75:70:52:f8:f6:86:6a:ca:ef:ad:4a:c6:e4:06:
ba:6c:70:aa:15:cb:35:6b:79:cf:24:80:17:68:d9:22:ce:ef:
5a:d5:ad:b1:12:df:c4:af:e0:d3:41:bb:2f:22:b5:12:b3:b6:
66:c0:d1:5e:c7:83:16:39:e0:6a:f5:48:be:05:db:51:d1:8e:
ea:bf:18:72:06:ca:48:87:e3:ce:5a:3b:3d:c6:61:25:10:44:
91:37:b3:bf:2d:b5:b6:9d:74:65:a1:44:2d:e5:a8:a8:28:1a:
ab:2d:73:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:12 2024 by rpki-client on console-fra.rpki-client.org