Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a1db9-7809-4d9c-a61d-04c80122bb08/1/iFOrlXwol6lUgb0VS4CjU5MHOio.roa
File: iFOrlXwol6lUgb0VS4CjU5MHOio.roa (raw, json)
Hash identifier: ZFZNU7y9DGNd1o3OdbyvWJ2l0hlSBva4GWg7/BKp6PM=
Subject key identifier: 88:53:AB:95:7C:28:97:A9:54:81:BD:15:4B:80:A3:53:93:07:3A:2A
Certificate issuer: /CN=de046aa4d5a069e8d6afe289423284e37b47a2a0
Certificate serial: 0809F547
Authority key identifier: DE:04:6A:A4:D5:A0:69:E8:D6:AF:E2:89:42:32:84:E3:7B:47:A2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gRqpNWgaejWr-KJQjKE43tHoqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a1db9-7809-4d9c-a61d-04c80122bb08/1/iFOrlXwol6lUgb0VS4CjU5MHOio.roa
Signing time: Sat 01 Jan 2022 13:59:15 +0000
ROA not before: Sat 01 Jan 2022 13:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201510
IP address blocks: 185.73.95.0/24 maxlen: 24
185.73.92.0/24 maxlen: 24
185.73.94.0/24 maxlen: 24
185.73.93.0/24 maxlen: 24
2a03:41e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134870343 (0x809f547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de046aa4d5a069e8d6afe289423284e37b47a2a0
Validity
Not Before: Jan 1 13:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8853ab957c2897a95481bd154b80a35393073a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:2c:78:b0:5b:21:c9:60:d6:ec:c1:f6:08:
a3:fd:0b:6f:6e:07:71:a0:c4:75:19:0f:49:10:ff:
bd:1b:44:90:7e:9f:4b:73:39:22:16:60:dd:21:ba:
0f:69:49:d4:22:5d:a4:7f:2c:dc:f3:68:67:83:c9:
26:78:ce:c5:c8:32:b9:d8:f1:7f:b3:f1:c9:f6:ee:
03:7d:32:c3:6d:a0:fe:71:4c:44:a9:a9:78:15:1d:
4e:68:d8:30:fe:3a:54:10:79:3d:ec:1f:ad:6d:41:
f1:d8:41:48:d9:22:3b:6f:88:ee:a4:4b:2c:8a:c2:
49:bc:e5:72:28:12:62:29:fb:98:0e:0a:85:e8:35:
86:a1:38:11:ce:5a:74:df:43:57:73:cc:56:d5:5d:
ef:ba:f0:af:a8:6f:50:99:b6:70:65:92:0f:bb:3f:
25:c0:7a:3c:9f:a9:fc:16:17:46:32:f4:d6:b4:e8:
f9:56:34:4d:a2:94:af:3d:f6:d0:e2:00:f7:57:c4:
95:47:0d:20:3a:ab:b6:46:6d:58:f9:62:d3:ea:86:
82:3a:b3:68:c3:bc:af:74:57:e9:d9:c1:d8:f7:ab:
0c:a7:77:c6:61:cf:0b:bf:ba:ca:eb:f4:89:cb:86:
4d:c6:f4:9d:01:96:ba:31:f0:27:1f:9b:c0:0b:2d:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:AB:95:7C:28:97:A9:54:81:BD:15:4B:80:A3:53:93:07:3A:2A
X509v3 Authority Key Identifier:
keyid:DE:04:6A:A4:D5:A0:69:E8:D6:AF:E2:89:42:32:84:E3:7B:47:A2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gRqpNWgaejWr-KJQjKE43tHoqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a1db9-7809-4d9c-a61d-04c80122bb08/1/iFOrlXwol6lUgb0VS4CjU5MHOio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a1db9-7809-4d9c-a61d-04c80122bb08/1/3gRqpNWgaejWr-KJQjKE43tHoqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.92.0/22
IPv6:
2a03:41e0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:dc:e7:b1:10:02:fb:a1:5c:71:3a:c3:a0:13:65:ce:63:fd:
b8:e0:8e:07:4d:4c:27:17:aa:c0:1d:d8:b1:92:3d:42:a0:c5:
77:f2:91:fe:8a:64:d4:01:34:b1:74:1d:38:5e:67:c2:3b:9d:
a0:c1:34:65:9a:7a:b0:5d:b7:e5:3d:0f:f7:95:a6:57:d8:2c:
af:f9:04:3b:4e:ba:db:2b:a4:40:c0:c2:70:9d:ae:34:8f:e4:
8e:86:bc:bb:3b:fa:1b:4b:db:88:44:52:ea:41:f6:9a:39:18:
35:3f:bc:7b:8d:24:0e:f5:a9:e4:f9:9f:d6:8c:6f:f9:1c:30:
81:64:f0:63:32:cb:cc:d5:a9:85:8a:6f:a8:ce:24:c7:1f:14:
84:93:f5:72:f6:ca:51:bd:1d:9d:85:2a:f8:dc:a8:9f:5e:da:
f2:17:dd:09:70:57:15:16:34:7a:05:3b:55:cd:f7:4d:ca:5f:
f1:dc:4a:84:20:cd:ec:b9:d2:fc:2d:af:04:02:fa:eb:83:93:
4f:75:f0:5c:68:e5:67:a8:c7:4f:9c:53:c0:3b:5b:00:a1:27:
61:e0:a4:05:3e:13:c2:ed:9a:75:d9:cd:99:e9:6c:f3:94:6a:
3f:2f:ab:bd:7c:17:15:fa:1a:85:1f:5a:df:8c:9d:55:3e:30:
96:64:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-ams.rpki-client.org