Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/4v6TYpfRcwrHfR_wV5VRplIzzRA.roa
File: 4v6TYpfRcwrHfR_wV5VRplIzzRA.roa (raw, json)
Hash identifier: VpqZlK+W/h0W+5y4si0xG5sPd/NlAkDhmVoIeW8UdNg=
Subject key identifier: E2:FE:93:62:97:D1:73:0A:C7:7D:1F:F0:57:95:51:A6:52:33:CD:10
Certificate issuer: /CN=df98d95b4279f3624f78b5e53b3180c3f0186933
Certificate serial: 01835F83D2217ED8F389ABF30CD92E58D593
Authority key identifier: DF:98:D9:5B:42:79:F3:62:4F:78:B5:E5:3B:31:80:C3:F0:18:69:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35jZW0J582JPeLXlOzGAw_AYaTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/4v6TYpfRcwrHfR_wV5VRplIzzRA.roa
Signing time: Wed 21 Sep 2022 10:06:57 +0000
ROA not before: Wed 21 Sep 2022 10:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31246
IP address blocks: 83.240.76.0/23 maxlen: 23
95.82.128.0/18 maxlen: 18
83.240.0.0/17 maxlen: 17
46.39.160.0/19 maxlen: 19
185.51.240.0/22 maxlen: 22
2a01:4240::/32 maxlen: 32
2001:4cc8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:83:d2:21:7e:d8:f3:89:ab:f3:0c:d9:2e:58:d5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df98d95b4279f3624f78b5e53b3180c3f0186933
Validity
Not Before: Sep 21 10:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2fe936297d1730ac77d1ff0579551a65233cd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:b2:6c:11:57:b8:eb:a0:f2:70:32:43:ed:
d8:ec:fb:92:48:ce:8b:b5:c7:09:2c:e6:ae:1f:43:
a3:3a:49:66:f4:4c:09:64:c0:38:de:63:3f:74:4f:
a4:95:27:fd:9c:10:3d:5c:38:28:a9:5f:ac:ab:4e:
be:d6:4c:ef:bc:be:bf:bf:4d:1d:30:af:cb:75:73:
f7:7f:18:78:88:6e:57:22:25:d8:05:81:07:40:24:
87:19:bf:a2:a9:65:47:58:61:b9:30:5f:18:d0:31:
c6:88:dc:95:49:2c:1d:1c:a1:5d:35:11:9e:9e:86:
64:69:63:e3:01:c5:a4:d8:35:61:33:e2:67:bc:fa:
55:d0:36:43:59:06:c2:f7:00:be:f6:dd:8b:2e:20:
13:cb:3d:47:37:b6:51:2c:10:f7:80:09:24:c7:1e:
33:1c:0e:bb:be:34:c4:a2:9d:47:56:2c:5e:99:a8:
80:76:db:60:4f:fa:b7:a1:eb:d5:c3:ab:46:29:17:
4e:14:b8:ba:3c:74:bc:20:d0:1f:f9:9e:d4:98:08:
08:fc:d3:16:f7:fa:27:2b:a3:32:92:aa:af:4c:83:
d6:65:6b:34:37:b9:37:15:0a:5e:a2:fd:46:2d:52:
13:4f:db:a6:0c:e1:a3:ee:ea:12:bc:31:71:fb:f4:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:93:62:97:D1:73:0A:C7:7D:1F:F0:57:95:51:A6:52:33:CD:10
X509v3 Authority Key Identifier:
keyid:DF:98:D9:5B:42:79:F3:62:4F:78:B5:E5:3B:31:80:C3:F0:18:69:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35jZW0J582JPeLXlOzGAw_AYaTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/4v6TYpfRcwrHfR_wV5VRplIzzRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/35jZW0J582JPeLXlOzGAw_AYaTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.39.160.0/19
83.240.0.0/17
95.82.128.0/18
185.51.240.0/22
IPv6:
2001:4cc8::/31
2a01:4240::/32
Signature Algorithm: sha256WithRSAEncryption
bc:db:d3:e8:c8:b8:12:26:ea:93:d9:d8:37:09:a5:2e:45:c3:
8c:92:19:b8:3c:32:3e:de:78:8d:a4:79:f4:7f:d5:0e:9f:d8:
0d:0b:8f:19:72:29:c0:db:f1:99:76:90:3f:5b:41:fa:4d:d8:
95:a9:c6:53:bb:19:2b:1f:58:fa:86:e8:95:56:0c:0d:d7:54:
8e:af:2a:86:77:bc:93:c8:37:69:44:53:e5:fe:6d:40:9f:72:
17:d9:16:59:21:ee:46:45:d7:2a:9a:22:18:55:00:66:45:69:
d6:99:10:9d:ce:8f:d7:64:2e:ba:8a:79:11:6c:f4:df:47:4e:
63:7d:b7:43:0e:69:5f:25:07:69:89:7a:5f:88:b8:4a:f8:ec:
bc:93:97:a5:a7:ca:af:59:6a:a2:77:c8:fe:cb:a3:99:2c:69:
ee:2f:ba:b7:e0:ac:fb:ce:d3:84:ae:5e:3b:0d:ce:96:3d:b2:
d6:5c:ec:55:7e:c1:2c:c6:79:23:f2:cd:90:05:cd:e7:80:09:
ab:f7:48:bf:49:78:fa:3b:cd:e5:4f:ab:ec:21:7e:af:94:89:
7a:da:aa:c5:15:76:6e:98:20:68:2c:d2:cd:18:2e:d2:d8:e4:
fe:2a:80:03:b7:ea:0c:65:5b:91:67:04:d9:08:d4:aa:69:f6:
57:3a:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org