Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/H5eRriB4nsn4_liVh5hHgnxcliw.roa
File: H5eRriB4nsn4_liVh5hHgnxcliw.roa (raw, json)
Hash identifier: U2Wom1lPRivT3/mAvfhYYG3cTwnGAqOpkdmC4ilLV1s=
Subject key identifier: 1F:97:91:AE:20:78:9E:C9:F8:FE:58:95:87:98:47:82:7C:5C:96:2C
Certificate issuer: /CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Certificate serial: 028350A8
Authority key identifier: 6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/H5eRriB4nsn4_liVh5hHgnxcliw.roa
Signing time: Wed 09 Mar 2022 15:38:31 +0000
ROA not before: Wed 09 Mar 2022 15:38:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47507
IP address blocks: 185.43.254.0/24 maxlen: 24
185.43.255.0/24 maxlen: 24
212.104.191.0/24 maxlen: 24
212.104.188.0/22 maxlen: 22
212.104.188.0/24 maxlen: 24
212.104.189.0/24 maxlen: 24
212.104.190.0/24 maxlen: 24
193.91.0.0/24 maxlen: 24
193.91.10.0/24 maxlen: 24
185.43.252.0/22 maxlen: 22
185.43.252.0/24 maxlen: 24
185.43.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42160296 (0x28350a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Validity
Not Before: Mar 9 15:38:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f9791ae20789ec9f8fe5895879847827c5c962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:d1:bd:23:18:ea:2d:85:c4:1e:fd:8a:ac:
80:93:bc:29:ad:d8:30:9e:e8:5e:69:fd:bb:5a:7b:
2b:be:5d:e0:c3:e6:74:7e:5f:ff:36:bc:f7:4d:1b:
b6:86:2f:fb:5d:2a:9b:f8:3f:f0:10:ec:7f:8f:f1:
cc:32:5c:90:e9:ce:64:e8:8c:5f:f8:c7:3d:62:c7:
4a:cd:d9:57:98:a3:9e:60:f2:67:83:a0:2f:af:f1:
68:d0:76:ba:73:a9:a5:2f:01:74:a0:3f:c3:63:32:
09:b5:08:14:7f:06:6d:71:97:c1:4b:3b:bf:09:b3:
0f:39:01:73:ba:94:c9:65:ba:af:f2:26:0c:a5:aa:
e6:52:6b:c2:92:51:ef:85:18:fc:dd:c8:20:ec:7e:
c0:aa:2f:3f:43:31:a8:ea:e2:f6:11:8a:e9:a7:52:
9d:90:9a:2e:9f:51:6f:00:cd:02:c7:e6:56:ba:ef:
62:61:a7:f6:67:12:89:85:ef:5e:bb:f3:d9:36:fd:
08:20:22:95:bb:b6:f7:15:cc:7f:18:99:0f:c1:25:
0d:9f:b1:57:bd:b2:3a:7b:b9:e2:80:17:e1:4c:57:
35:6a:c9:d0:85:67:f1:3f:d3:7a:42:12:e1:21:d3:
64:1d:75:f0:7f:2e:0f:b8:26:dc:03:75:a7:ba:5c:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:91:AE:20:78:9E:C9:F8:FE:58:95:87:98:47:82:7C:5C:96:2C
X509v3 Authority Key Identifier:
keyid:6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/H5eRriB4nsn4_liVh5hHgnxcliw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/bWsgBF4dD-bO8oeB6zAL3pglpLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.252.0/22
193.91.0.0/24
193.91.10.0/24
212.104.188.0/22
Signature Algorithm: sha256WithRSAEncryption
05:24:bd:34:21:c9:4c:4b:e9:bc:e5:b9:08:b1:d3:5b:b5:66:
1b:ed:b2:a6:5b:c2:9c:70:d2:86:64:6e:1a:f1:9a:19:ae:91:
3a:0a:c1:a0:c1:b9:03:76:2c:55:22:e3:61:57:01:0f:ba:30:
8e:5c:14:7d:2f:ba:32:7b:a8:4d:f6:35:b8:94:97:96:12:35:
b9:71:84:f6:d5:50:31:7b:45:12:6e:e7:5f:32:25:e4:76:10:
b5:51:23:48:00:ff:8a:d0:9e:26:06:3c:53:1a:66:e7:50:8b:
cb:f3:04:c6:b0:66:35:cc:4d:9c:57:eb:ff:24:37:b3:bc:58:
41:74:e5:e2:33:5a:6d:0a:a6:b9:01:21:dd:cd:ea:54:e7:a7:
60:5c:fc:e8:0a:df:2a:30:d2:b5:93:55:eb:23:5f:fa:2c:ec:
09:54:3c:f5:1c:5a:c3:cc:06:2e:08:86:09:2b:26:97:2b:26:
db:42:09:35:8a:38:81:31:45:30:58:e5:04:48:0a:76:63:a9:
e4:eb:ef:87:78:0e:95:90:0b:92:8c:e8:5c:be:b6:1c:a4:40:
84:34:e9:db:eb:81:f7:19:2e:f0:c6:a6:a8:6f:5c:08:7e:d1:
f5:8d:42:13:00:bb:3e:88:23:52:0a:b9:dd:60:07:f9:5e:ef:
78:30:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:13 2024 by rpki-client on console-ams.rpki-client.org