Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/DKmVls4BWrBLOVio2PJGEOKtO4M.roa
File: DKmVls4BWrBLOVio2PJGEOKtO4M.roa (raw, json)
Hash identifier: xn2kZXk/WzjtGdH1KIEuxpGHN5ERV/PJ1umBxZ4hCVg=
Subject key identifier: 0C:A9:95:96:CE:01:5A:B0:4B:39:58:A8:D8:F2:46:10:E2:AD:3B:83
Certificate issuer: /CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Certificate serial: 06C36DD6
Authority key identifier: 04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/DKmVls4BWrBLOVio2PJGEOKtO4M.roa
Signing time: Sat 01 Jan 2022 08:03:04 +0000
ROA not before: Sat 01 Jan 2022 08:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13287
IP address blocks: 185.4.35.0/24 maxlen: 24
185.4.34.0/24 maxlen: 24
185.4.33.0/24 maxlen: 24
185.4.32.0/24 maxlen: 24
185.239.160.0/23 maxlen: 23
185.239.160.0/22 maxlen: 22
185.239.162.0/23 maxlen: 23
2a02:5fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113470934 (0x6c36dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Validity
Not Before: Jan 1 08:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ca99596ce015ab04b3958a8d8f24610e2ad3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:7b:17:b1:43:72:a6:a3:85:68:d1:99:74:
05:78:ac:51:74:53:5e:44:76:83:91:32:62:c5:62:
31:74:8f:ed:48:2b:b6:3f:2d:37:b0:c4:af:ce:e8:
1c:b8:0d:7c:a1:7c:90:55:bd:06:8a:c8:14:e1:a2:
09:88:e2:8c:c9:d9:68:c6:22:b7:6c:60:4f:58:40:
48:8d:90:ea:41:ee:67:3d:cf:4a:01:2e:5f:c9:21:
fa:31:b1:6c:9e:bb:2b:6b:03:a2:5d:0d:27:4a:22:
3d:29:f3:ed:ce:28:d7:8d:3e:4e:0b:6f:e8:b4:87:
a1:9e:95:be:f0:44:9f:ee:61:57:5f:bb:8f:81:f0:
fd:32:03:8b:b2:65:09:2c:b3:d3:e9:c8:14:1c:d2:
07:79:91:86:6b:96:29:cb:3c:87:54:d5:57:13:2f:
ca:56:13:6a:e1:49:c5:5e:1b:28:24:9a:42:1b:c8:
73:ed:81:63:6a:4e:c8:14:6e:0d:8e:b3:d1:31:c8:
e7:b2:a4:19:7f:3b:71:75:66:0c:8b:52:26:96:4f:
02:b9:b9:2b:62:25:b0:91:c2:12:c6:88:4a:f2:4d:
01:0e:39:cb:04:bd:9c:00:64:cd:1e:65:b1:81:32:
40:20:1c:45:88:a3:01:c3:34:c7:29:22:cf:87:f2:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A9:95:96:CE:01:5A:B0:4B:39:58:A8:D8:F2:46:10:E2:AD:3B:83
X509v3 Authority Key Identifier:
keyid:04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/DKmVls4BWrBLOVio2PJGEOKtO4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.32.0/22
185.239.160.0/22
IPv6:
2a02:5fc0::/48
Signature Algorithm: sha256WithRSAEncryption
83:41:69:b8:5d:3c:e8:e1:e2:30:8c:0e:21:a1:7d:e8:cd:88:
de:96:42:a4:08:94:23:04:85:af:13:70:34:e3:c4:38:b2:41:
0d:14:db:50:5a:e7:28:c1:2d:0d:fb:2d:16:65:af:97:0d:57:
1f:98:23:9f:f7:46:cb:80:2f:c2:0c:2c:a5:0f:04:12:33:b3:
33:4a:36:32:6d:52:93:4a:8b:58:15:e6:77:3c:fe:ea:49:4c:
60:5f:31:57:20:75:b9:4a:dc:42:06:80:4d:dd:4a:be:18:42:
cd:4d:42:d6:f4:e2:81:28:77:cb:91:c9:68:74:30:7c:9f:1d:
0b:87:2d:a2:dd:13:4d:57:6e:db:3b:63:de:18:07:37:8b:d9:
43:80:6a:6d:30:09:3a:07:65:f0:d0:65:94:6f:93:1c:48:a9:
ab:b7:40:c9:d1:e1:86:ef:f5:cf:7c:25:8d:29:12:7a:94:83:
74:a9:13:d6:9b:75:3c:66:ce:71:1f:15:40:9a:be:59:23:77:
90:0a:89:04:ce:62:e7:45:0f:71:00:5c:61:fc:fc:ab:d2:d7:
19:e3:78:aa:0d:1f:69:1c:cc:79:f9:2a:42:9a:6e:f3:ad:6e:
ab:d7:55:36:1d:5d:ff:17:21:c4:50:6b:3b:38:96:09:d2:16:
81:9b:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:30 2024 by rpki-client on console-fra.rpki-client.org