Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/_2dHY9aVhKazyzoE0FQKcP3a-og.roa
File: _2dHY9aVhKazyzoE0FQKcP3a-og.roa (raw, json)
Hash identifier: ie9zLEFoO3ME7MsJqjv+jbHltc9Diklv5IJ962NvMSc=
Subject key identifier: FF:67:47:63:D6:95:84:A6:B3:CB:3A:04:D0:54:0A:70:FD:DA:FA:88
Certificate issuer: /CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Certificate serial: 03476B39
Authority key identifier: 6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/_2dHY9aVhKazyzoE0FQKcP3a-og.roa
Signing time: Tue 31 May 2022 08:36:29 +0000
ROA not before: Tue 31 May 2022 08:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47507
IP address blocks: 212.104.164.0/22 maxlen: 22
185.43.254.0/24 maxlen: 24
212.104.160.0/22 maxlen: 22
185.43.255.0/24 maxlen: 24
212.104.160.0/24 maxlen: 24
212.104.161.0/24 maxlen: 24
212.104.172.0/22 maxlen: 22
212.104.168.0/22 maxlen: 22
212.104.176.0/21 maxlen: 21
212.104.184.0/22 maxlen: 22
212.104.191.0/24 maxlen: 24
212.104.188.0/22 maxlen: 22
212.104.188.0/24 maxlen: 24
212.104.189.0/24 maxlen: 24
212.104.190.0/24 maxlen: 24
193.91.0.0/24 maxlen: 24
193.91.10.0/24 maxlen: 24
185.43.252.0/22 maxlen: 22
185.43.252.0/24 maxlen: 24
185.43.253.0/24 maxlen: 24
86.105.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55012153 (0x3476b39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6b20045e1d0fe6cef28781eb300bde9825a4b5
Validity
Not Before: May 31 08:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff674763d69584a6b3cb3a04d0540a70fddafa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:5f:44:d3:55:a8:d5:aa:52:b6:53:c3:e5:
5b:fd:4b:0f:af:38:11:13:d9:93:0d:0a:53:ad:a5:
ae:4d:29:8c:f8:d6:4a:0e:d5:10:f4:60:f1:df:bc:
f1:7d:2c:02:9f:9f:f9:5e:70:85:99:f7:6e:07:59:
b7:8d:fe:f8:ed:3a:04:49:5e:e9:49:04:a8:24:c7:
6a:25:50:90:4f:6f:a3:b6:99:3b:2b:0d:ef:85:f8:
a7:55:9e:ee:94:3a:ef:be:9f:c1:dd:8b:00:87:25:
d5:b1:e7:46:6a:84:08:8f:74:02:07:9c:e0:1c:4a:
11:80:6b:2a:57:35:26:6b:b8:1b:e9:83:51:17:9c:
2d:65:c6:42:7a:bc:e4:07:fa:8d:9a:68:9f:51:d2:
eb:ef:5a:c3:2a:32:7f:2a:5b:a3:3c:b2:3e:f8:15:
9f:4b:dd:98:11:66:46:0a:f6:a5:87:09:4e:d4:1e:
31:59:7c:87:0d:5f:2e:84:7a:ef:fc:1d:63:45:6b:
d0:6a:af:87:a6:f9:69:f8:8b:0e:8c:9a:ec:07:67:
d9:9e:37:cc:53:26:ec:4c:b0:86:9e:7c:53:b3:57:
96:67:f2:f9:f7:14:f4:29:c2:14:10:04:21:39:1d:
cf:7c:c7:3d:b8:26:9a:7f:9d:45:61:5a:e8:e7:e0:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:67:47:63:D6:95:84:A6:B3:CB:3A:04:D0:54:0A:70:FD:DA:FA:88
X509v3 Authority Key Identifier:
keyid:6D:6B:20:04:5E:1D:0F:E6:CE:F2:87:81:EB:30:0B:DE:98:25:A4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWsgBF4dD-bO8oeB6zAL3pglpLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/_2dHY9aVhKazyzoE0FQKcP3a-og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b2eb0c-b023-4132-9e1a-d8a6cdc5c20c/1/bWsgBF4dD-bO8oeB6zAL3pglpLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.234.0/24
185.43.252.0/22
193.91.0.0/24
193.91.10.0/24
212.104.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:c0:1e:23:7d:9c:fb:7c:41:4f:df:66:06:9c:ca:26:4a:71:
f3:37:96:cb:35:37:3f:ce:d2:41:74:e6:20:45:77:72:99:65:
ad:d9:dc:2d:44:9d:c6:a5:70:93:b6:79:a7:25:44:16:40:19:
a6:02:ea:13:af:5c:96:e1:a8:bd:b8:bd:61:31:c7:2f:7f:8b:
5d:af:e7:ce:0e:e8:93:07:5d:2f:73:8e:33:aa:e7:a5:c1:69:
95:f1:bc:9d:48:52:78:a2:55:64:e6:b6:23:15:6b:ae:7b:c1:
90:c4:8f:89:c5:a9:62:e6:ff:c2:92:ca:bf:32:2d:98:58:ff:
47:66:c9:f7:b4:75:b4:8f:97:c3:65:2a:04:c9:63:1a:5f:41:
86:8f:65:76:ab:c9:f4:9d:9b:8e:75:33:57:49:dd:1c:ea:46:
d2:fd:88:26:32:93:9c:1e:e3:67:85:d9:a5:93:eb:29:33:56:
1b:ec:5a:94:23:99:b7:15:72:4d:9f:b1:37:d1:54:29:34:36:
ef:6a:37:cc:67:01:9f:37:30:7b:48:3e:ce:0b:86:3b:33:f8:
45:ea:e8:f0:f6:74:26:0d:09:0f:70:b9:84:ed:84:db:7f:bd:
c8:80:ed:96:21:40:b9:41:62:50:51:1d:79:54:90:a1:ef:6d:
a1:c5:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:13 2024 by rpki-client on console-ams.rpki-client.org