Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/3FCSOQmYzalAJjJba_-lb7Ylc2Y.roa
File: 3FCSOQmYzalAJjJba_-lb7Ylc2Y.roa (raw, json)
Hash identifier: nSZ3StvqYiJcIlsVibBmzBk9rS3XDhy1Rpyv5Cd0TEs=
Subject key identifier: DC:50:92:39:09:98:CD:A9:40:26:32:5B:6B:FF:A5:6F:B6:25:73:66
Certificate issuer: /CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Certificate serial: 01856CEF4DA89A530564CA6305A6B87FC198
Authority key identifier: 43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/3FCSOQmYzalAJjJba_-lb7Ylc2Y.roa
Signing time: Sun 01 Jan 2023 10:45:00 +0000
ROA not before: Sun 01 Jan 2023 10:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13246
IP address blocks: 185.181.192.0/22 maxlen: 24
95.130.16.0/21 maxlen: 24
95.130.16.0/24 maxlen: 24
95.130.17.0/24 maxlen: 24
95.130.22.0/24 maxlen: 24
95.130.18.0/24 maxlen: 24
2a02:2940::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:4d:a8:9a:53:05:64:ca:63:05:a6:b8:7f:c1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Validity
Not Before: Jan 1 10:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc5092390998cda94026325b6bffa56fb6257366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:2e:6d:7e:22:e3:e5:6e:a3:06:5f:99:ba:
e0:85:9e:59:1c:44:d4:f3:c3:1b:d1:05:83:25:19:
e7:43:5b:35:a5:de:c4:72:9c:16:80:4d:f2:ba:8c:
99:af:b4:57:2b:48:ad:c1:8d:44:d4:97:4e:04:c3:
32:c3:0c:7e:6e:f7:52:e1:00:a7:ef:92:d7:41:4a:
00:1b:01:bd:76:36:f6:ca:f2:dc:09:01:07:2c:d9:
7d:cc:bc:0f:dd:93:e2:f9:9b:1f:80:94:94:c6:02:
ee:91:d6:ad:71:6b:fc:06:0d:db:b3:a9:80:78:fe:
30:e6:8e:23:2d:5a:19:47:93:ee:32:73:1e:99:e6:
05:50:18:5b:27:b0:5e:35:e1:e0:82:00:bc:2e:71:
82:32:47:c9:75:f6:fa:5b:e3:6e:03:3c:1f:11:f3:
5b:e0:e1:9f:1a:46:ce:de:03:ba:7b:da:a0:6a:7d:
5a:6f:fa:04:6c:e1:19:7c:16:51:e8:d6:b2:d2:21:
9a:87:e5:bc:e5:ab:47:42:a7:d0:6e:72:52:03:8c:
32:a2:04:35:2a:19:a4:8a:a0:c7:4b:2e:ed:12:79:
6f:af:84:f3:74:48:09:f2:0d:19:26:89:9f:3e:a1:
b2:29:55:d4:f1:b4:f3:6f:7c:d2:68:0e:44:ec:5b:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:50:92:39:09:98:CD:A9:40:26:32:5B:6B:FF:A5:6F:B6:25:73:66
X509v3 Authority Key Identifier:
keyid:43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/3FCSOQmYzalAJjJba_-lb7Ylc2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/Q5jLWAYu1KmjD_Q45E7vMdfvamU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.16.0/21
185.181.192.0/22
IPv6:
2a02:2940::/32
Signature Algorithm: sha256WithRSAEncryption
0e:bb:87:a6:d6:81:b1:83:6d:b3:83:77:ef:c0:b6:b7:61:f2:
2e:ce:8b:80:c9:3f:44:70:95:97:af:36:56:b2:42:7a:79:db:
3f:55:c1:76:f3:d9:6f:35:87:35:47:13:18:9c:b1:99:80:1a:
05:0a:4e:e3:8d:7a:46:3c:ba:4b:36:0d:2b:e7:64:b8:d7:ef:
59:fe:8c:2e:da:ad:0e:91:3d:d9:16:1a:cb:38:9d:9b:a4:51:
67:4b:c1:f7:e0:c3:e3:1a:18:d4:56:f8:f8:e2:f3:c3:d3:a1:
88:81:f1:5f:f8:31:60:1d:2c:ca:6e:7c:9d:0b:1a:69:4e:d6:
8e:fd:1d:03:ba:a6:0b:80:8c:d0:34:03:f5:f5:83:22:c3:e4:
b8:2f:ac:93:60:c1:80:f4:01:1e:8f:a4:2e:2f:dc:ef:a0:c2:
06:93:1c:e9:48:ae:e7:0b:0f:ac:25:96:ee:4a:76:9c:c5:3a:
73:15:3d:00:66:2c:2a:2f:cb:38:f0:22:6a:54:41:79:f4:27:
8a:26:39:9d:95:bc:2c:a5:75:5f:db:88:d4:dc:71:f0:91:e5:
02:44:04:2e:b7:99:9b:5b:fb:36:97:6d:e8:71:a5:1e:27:56:
5f:03:bb:8a:51:8e:41:fe:ac:69:41:bc:1a:b2:f0:ff:43:a8:
1e:9f:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:18 2024 by rpki-client on console-ams.rpki-client.org