Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/kQWTCiYQREuNOtCikGSHQygf_6Y.roa
File: kQWTCiYQREuNOtCikGSHQygf_6Y.roa (raw, json)
Hash identifier: wVrk+6YpZJV4noVbukPkGyeovwSzKZwCoviW7D6R+t0=
Subject key identifier: 91:05:93:0A:26:10:44:4B:8D:3A:D0:A2:90:64:87:43:28:1F:FF:A6
Certificate issuer: /CN=21b410a17440fcab1cdc90afa6fcb724c80c82a9
Certificate serial: 28CBAFE9
Authority key identifier: 21:B4:10:A1:74:40:FC:AB:1C:DC:90:AF:A6:FC:B7:24:C8:0C:82:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/kQWTCiYQREuNOtCikGSHQygf_6Y.roa
Signing time: Sat 01 Jan 2022 15:59:43 +0000
ROA not before: Sat 01 Jan 2022 15:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199380
IP address blocks: 188.208.24.0/23 maxlen: 23
188.208.24.0/22 maxlen: 22
188.208.26.0/24 maxlen: 24
188.208.27.0/24 maxlen: 24
185.16.120.0/24 maxlen: 24
185.16.120.0/22 maxlen: 22
185.16.121.0/24 maxlen: 24
185.16.122.0/24 maxlen: 24
185.16.123.0/24 maxlen: 24
89.37.80.0/22 maxlen: 22
89.37.80.0/24 maxlen: 24
89.37.81.0/24 maxlen: 24
89.37.82.0/24 maxlen: 24
89.37.83.0/24 maxlen: 24
188.247.171.0/24 maxlen: 24
188.247.168.0/24 maxlen: 24
188.247.168.0/22 maxlen: 22
188.247.169.0/24 maxlen: 24
188.247.170.0/24 maxlen: 24
89.32.194.0/24 maxlen: 24
89.32.194.0/23 maxlen: 23
89.32.195.0/24 maxlen: 24
89.36.42.0/24 maxlen: 24
89.36.43.0/24 maxlen: 24
89.36.40.0/24 maxlen: 24
89.36.40.0/22 maxlen: 22
89.36.41.0/24 maxlen: 24
89.42.236.0/24 maxlen: 24
89.42.236.0/23 maxlen: 23
89.42.237.0/24 maxlen: 24
188.239.184.0/24 maxlen: 24
188.239.184.0/22 maxlen: 22
188.239.185.0/24 maxlen: 24
188.239.186.0/24 maxlen: 24
188.239.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684437481 (0x28cbafe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b410a17440fcab1cdc90afa6fcb724c80c82a9
Validity
Not Before: Jan 1 15:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9105930a2610444b8d3ad0a290648743281fffa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:51:a4:b3:e0:6c:28:d6:82:06:c5:35:37:
2d:3e:3f:03:1b:30:bc:49:1a:12:4e:5d:dd:7a:e8:
c6:b5:f5:5e:28:4c:a4:93:3d:3e:3c:db:a4:1b:52:
21:c0:3d:8e:c6:9c:24:3b:ad:8c:59:27:0a:62:d1:
b9:36:0e:7c:04:f8:43:8e:83:24:6d:e0:84:78:77:
d4:88:5e:a2:b0:ad:ad:2b:9a:da:af:73:02:63:a4:
19:a6:ea:8b:23:2b:a1:2a:c2:fd:bf:7e:4d:df:9f:
8b:71:59:23:83:0d:4d:c3:3c:19:3a:72:39:79:45:
3f:21:ec:23:3c:ef:52:24:11:1a:57:56:56:7a:5c:
f8:55:7b:46:e2:8b:df:95:26:db:22:35:44:e7:4a:
0d:17:a1:d7:3d:87:72:3d:5e:0d:e7:d6:32:71:f1:
1c:bb:cc:b6:c8:76:18:45:9e:e0:a8:24:2b:f5:f6:
2c:04:bd:c3:f9:83:ad:0e:06:48:eb:5b:9d:46:cb:
f6:dc:96:4b:32:68:06:8f:98:22:b7:65:e3:72:e3:
bd:73:8d:54:e5:ba:fa:da:bb:89:c8:a4:af:ef:1f:
bf:c7:ad:3b:9b:6d:85:77:27:a2:7b:08:90:4e:c4:
b8:93:56:4c:39:f3:ca:47:50:36:7f:70:9e:09:d2:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:93:0A:26:10:44:4B:8D:3A:D0:A2:90:64:87:43:28:1F:FF:A6
X509v3 Authority Key Identifier:
keyid:21:B4:10:A1:74:40:FC:AB:1C:DC:90:AF:A6:FC:B7:24:C8:0C:82:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/kQWTCiYQREuNOtCikGSHQygf_6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.194.0/23
89.36.40.0/22
89.37.80.0/22
89.42.236.0/23
185.16.120.0/22
188.208.24.0/22
188.239.184.0/22
188.247.168.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:d6:ad:e4:61:19:b7:8d:3a:95:85:34:e2:99:0e:fd:80:16:
6b:3f:c1:24:2a:f3:da:13:01:a4:15:65:e2:f1:e6:44:eb:7b:
1c:6d:e0:79:9f:66:40:d8:0a:99:4a:35:45:70:42:03:30:0d:
a7:d5:cd:14:ac:d4:b2:ca:1f:08:ed:01:91:e2:49:cc:fc:3f:
24:ae:e2:1e:1f:7a:17:03:c0:00:f0:7b:23:8f:0b:f9:22:cc:
e6:d9:4d:27:ec:53:41:e5:c7:ca:72:67:d7:7d:9e:4b:0c:ec:
67:72:1f:1f:33:2a:c6:91:2e:a1:2e:ac:7c:a6:5a:4a:a7:07:
b0:b6:92:fa:e4:90:ca:b3:a8:09:7c:58:51:63:da:14:66:cd:
85:50:37:7b:c1:b5:58:07:10:41:ce:63:a5:27:f3:52:52:cc:
36:cc:6a:e7:1c:30:cc:d9:cb:88:37:5a:31:20:3b:7b:68:b8:
63:77:39:b4:51:2a:7c:3c:dd:d0:7b:a8:6a:d9:0d:81:86:24:
d2:f8:8d:d7:89:0f:6a:e6:17:7b:4f:f1:84:1b:6c:4e:40:bf:
e2:cb:e7:05:58:74:e6:6b:ab:db:3a:31:9e:93:7b:66:87:61:
87:58:f9:f2:8f:c3:c9:ff:c5:01:ac:39:99:3c:68:5d:8c:ac:
26:82:39:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:50 2024 by rpki-client on console-ams.rpki-client.org