Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/anQD4Gmn8hsYDFexPAr8_6WXTcE.roa
File: anQD4Gmn8hsYDFexPAr8_6WXTcE.roa (raw, json)
Hash identifier: E+32QqYZHHxGNNNEZlLZoD46JpJapx9qM16h5KkhOUM=
Subject key identifier: 6A:74:03:E0:69:A7:F2:1B:18:0C:57:B1:3C:0A:FC:FF:A5:97:4D:C1
Certificate issuer: /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial: 1C61C6D2
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/anQD4Gmn8hsYDFexPAr8_6WXTcE.roa
Signing time: Sat 01 Jan 2022 04:52:32 +0000
ROA not before: Sat 01 Jan 2022 04:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8954
IP address blocks: 212.26.195.0/24 maxlen: 24
212.26.218.0/24 maxlen: 24
212.19.218.0/24 maxlen: 24
2001:67c:21b4::/48 maxlen: 48
2001:6e0:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476169938 (0x1c61c6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Validity
Not Before: Jan 1 04:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a7403e069a7f21b180c57b13c0afcffa5974dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:90:e3:a5:2b:75:08:65:95:f2:61:e3:c1:
10:e3:cf:a5:50:f4:32:d6:ff:6b:c3:26:9e:1f:45:
e7:b0:ce:64:61:6f:48:f2:82:ed:10:ed:16:9e:bc:
0a:2a:3d:7e:d3:5f:1d:57:47:5b:30:f9:e8:7b:92:
70:4d:09:68:5c:a1:a7:e2:cf:35:fb:2a:f8:d9:ff:
33:a4:69:a9:0c:1d:3c:08:8a:1f:a0:df:01:c8:b9:
6d:76:42:88:a1:c1:48:37:3f:46:e5:bc:35:d8:bf:
13:8a:f9:33:dc:c8:76:ca:b2:ca:0b:22:11:bf:d1:
2b:9e:da:db:0d:34:37:3e:ba:16:5a:83:7c:be:1c:
8a:5a:bb:9f:95:93:ab:0f:c3:b7:a4:e6:f9:ae:50:
72:fd:53:6b:eb:b3:1a:17:60:2a:b0:b4:89:95:18:
5c:ad:74:75:f9:d3:5f:e1:33:ee:65:70:ad:f7:70:
cc:29:68:5c:de:84:59:23:cb:89:c7:6e:b5:22:9c:
e0:da:6c:b5:fe:8d:b0:53:4d:dd:0e:78:eb:10:c4:
5e:7d:21:7d:f3:d2:fa:6c:11:88:30:90:f2:f7:3c:
56:e0:a3:e9:f5:49:1d:15:43:74:34:b7:4b:5d:e9:
1d:29:3c:00:57:81:4e:3e:12:ef:d5:30:24:41:98:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:03:E0:69:A7:F2:1B:18:0C:57:B1:3C:0A:FC:FF:A5:97:4D:C1
X509v3 Authority Key Identifier:
keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/anQD4Gmn8hsYDFexPAr8_6WXTcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.19.218.0/24
212.26.195.0/24
212.26.218.0/24
IPv6:
2001:67c:21b4::/48
2001:6e0:6::/48
Signature Algorithm: sha256WithRSAEncryption
92:34:e0:dc:ad:9e:90:c0:83:d6:5f:04:28:0e:75:6f:60:25:
b1:ef:32:ec:5c:12:9a:40:7c:1e:ff:93:97:55:61:87:a6:6c:
28:aa:f3:a5:1d:ab:ae:bb:0f:d4:cc:32:41:e3:96:76:dc:52:
87:60:c1:f0:49:d3:f2:2a:9e:bf:a1:03:a7:fc:bb:31:6a:8b:
9d:fb:5b:7b:db:ac:31:54:de:ed:ee:4f:56:f8:32:b8:46:9e:
f8:9b:50:b9:23:d8:20:7b:d9:63:53:ea:97:fc:93:68:2e:15:
2d:3c:79:4d:ca:81:da:f6:a5:0a:d5:48:b0:4a:fe:88:75:05:
d5:ee:98:87:62:5f:6a:24:8a:38:c5:69:b6:ef:e6:c2:48:ea:
65:0c:d2:5b:9a:e8:38:6d:a7:46:ac:b6:ea:fd:c7:ae:f4:3d:
6d:24:3d:86:e2:d4:47:d3:23:52:02:f9:9b:e9:08:37:a3:73:
c1:39:5d:08:c5:38:5d:0f:16:9c:84:66:25:1e:31:92:48:f9:
d7:79:4c:2f:26:87:0d:e4:b1:b0:52:8c:14:9a:72:cd:08:7c:
3b:27:bd:78:42:63:4c:69:7c:ec:ea:c7:5b:43:c9:e1:f7:61:
b0:fe:fb:fc:7a:58:3c:eb:0c:af:07:8a:45:54:cc:fe:c8:21:
53:de:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:53 2024 by rpki-client on console-fra.rpki-client.org