Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/XLlpfDphe5GKgZl6_-iN_Gx3rLo.roa
File: XLlpfDphe5GKgZl6_-iN_Gx3rLo.roa (raw, json)
Hash identifier: NmksOFaS0D7MROT34Ix/qHDangdDjFV16K78H0EHIJc=
Subject key identifier: 5C:B9:69:7C:3A:61:7B:91:8A:81:99:7A:FF:E8:8D:FC:6C:77:AC:BA
Certificate issuer: /CN=b12caece23c6adf6917039293e25baaa906ce556
Certificate serial: 1835A3E4
Authority key identifier: B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/XLlpfDphe5GKgZl6_-iN_Gx3rLo.roa
Signing time: Mon 30 May 2022 12:46:13 +0000
ROA not before: Mon 30 May 2022 12:46:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8866
IP address blocks: 84.40.64.0/18 maxlen: 24
46.249.64.0/19 maxlen: 24
37.157.136.0/21 maxlen: 24
37.157.160.0/19 maxlen: 24
95.87.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406168548 (0x1835a3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12caece23c6adf6917039293e25baaa906ce556
Validity
Not Before: May 30 12:46:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cb9697c3a617b918a81997affe88dfc6c77acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:b2:0a:db:14:5b:f6:a7:d8:25:a3:7c:82:
bb:af:d2:97:6d:0c:0f:a7:38:50:12:f0:4b:ab:c0:
91:90:56:3d:d8:81:67:73:5e:03:c7:45:a3:1f:8e:
1a:90:4e:93:1e:3d:8d:7e:ec:1a:ce:30:af:fb:e1:
f8:79:3f:1e:33:09:f0:ee:c8:13:d7:de:e9:e1:8e:
cb:f0:e8:3c:bb:1d:c4:4e:0a:45:ac:d8:f8:ef:1b:
24:34:79:d6:64:5e:e7:5d:1b:ce:a2:63:ff:9e:f7:
68:93:13:93:eb:0c:10:25:d1:27:ac:6e:54:bc:b6:
a2:87:72:32:6b:f3:88:7b:3a:27:bf:1a:14:34:ca:
5f:5c:ca:cd:c8:24:63:73:79:c2:d6:14:c9:5f:26:
37:5b:81:66:5d:c1:ef:41:35:83:0a:97:89:ff:ce:
20:da:91:00:38:53:dd:89:76:93:6e:25:2d:47:84:
43:55:86:20:eb:1f:52:a9:91:5d:08:79:48:47:97:
4a:80:a9:5d:91:5e:9f:21:2d:37:11:24:bb:6e:e9:
c9:6b:28:d0:5b:4d:88:eb:ea:fc:b5:6e:17:bf:08:
0f:a2:0a:f7:e1:07:35:74:58:63:f4:6b:3f:d8:3a:
cf:17:15:4c:f0:b0:de:11:fb:13:be:49:5f:4b:39:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B9:69:7C:3A:61:7B:91:8A:81:99:7A:FF:E8:8D:FC:6C:77:AC:BA
X509v3 Authority Key Identifier:
keyid:B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/XLlpfDphe5GKgZl6_-iN_Gx3rLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/sSyuziPGrfaRcDkpPiW6qpBs5VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.249.64.0/19
84.40.64.0/18
95.87.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:1b:35:00:40:58:dd:7c:2c:10:a1:8e:bb:d2:27:97:83:ba:
b9:be:d0:46:cf:42:51:0e:6e:2d:2c:17:cc:46:b1:64:03:69:
d0:a8:79:d2:59:37:57:2d:cd:d7:f2:d3:ac:8b:bc:c2:b9:58:
e2:7f:e1:62:9e:83:56:7f:15:2e:52:5f:e3:d2:4b:a7:67:01:
50:9b:a1:22:8a:08:bc:58:c8:e1:d3:11:7b:56:74:61:a1:0f:
7a:49:c7:04:eb:8f:9e:cc:cd:09:6a:44:35:cd:69:84:72:76:
01:f8:3a:37:09:ab:ec:f6:3b:95:36:41:14:1a:3f:ff:77:d1:
76:02:45:e0:20:fb:a8:fa:ca:91:ef:be:9c:62:bb:05:54:15:
68:0f:a4:be:13:d0:aa:3f:74:0f:bd:dc:e5:f6:c3:fa:bf:62:
4f:f9:cb:25:70:90:9b:ba:19:b6:33:90:ee:8a:d4:15:d5:21:
99:37:67:8b:8c:68:4c:d4:6f:d6:03:19:f6:0e:7a:d8:b5:7d:
91:70:df:01:49:fe:29:58:15:32:e4:bc:07:ac:1a:11:5b:e1:
e5:d1:e8:63:d8:13:7a:9e:74:46:c0:08:79:ed:73:d0:ec:9c:
27:1c:9d:b5:10:55:78:1d:77:00:21:38:b2:f8:f5:10:cf:be:
ea:16:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:37 2024 by rpki-client on console-fra.rpki-client.org