Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/JTmmp-7jaN9Z_0GC9eXj1OzOess.roa
File: JTmmp-7jaN9Z_0GC9eXj1OzOess.roa (raw, json)
Hash identifier: X++GWoedYV9tjROvcUWz2QgZw88AG6J0IROY4pUoUwU=
Subject key identifier: 25:39:A6:A7:EE:E3:68:DF:59:FF:41:82:F5:E5:E3:D4:EC:CE:7A:CB
Certificate issuer: /CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Certificate serial: 08EEB8AE
Authority key identifier: 43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/JTmmp-7jaN9Z_0GC9eXj1OzOess.roa
Signing time: Sat 01 Jan 2022 00:57:06 +0000
ROA not before: Sat 01 Jan 2022 00:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 185.181.194.0/24 maxlen: 24
95.130.17.0/24 maxlen: 24
95.130.20.0/24 maxlen: 24
95.130.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149862574 (0x8eeb8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Validity
Not Before: Jan 1 00:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2539a6a7eee368df59ff4182f5e5e3d4ecce7acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:00:9f:f1:81:bd:70:b4:69:22:5c:c3:09:
e0:4f:9b:90:74:bb:8d:a6:82:81:9c:9f:7b:ec:17:
e9:71:69:76:71:e8:f0:16:49:59:9c:a2:55:1f:1c:
42:31:4d:6e:d2:dd:ff:6a:2c:a1:2c:51:3a:db:8b:
9e:ed:95:05:9f:0b:62:94:b5:d6:9b:10:64:af:2f:
7a:74:88:32:dc:81:3d:42:5f:82:d0:80:ca:ca:5f:
e4:79:a7:9c:77:e5:84:a0:78:21:67:1f:55:0d:4e:
9c:02:fa:5a:11:fc:c3:1a:c8:a7:75:98:ec:76:11:
6a:62:48:e3:a8:18:ca:82:bd:de:b9:5b:58:bc:e5:
56:46:68:10:ee:5e:da:bd:94:36:9a:87:7e:a4:d5:
1c:05:9d:8e:0c:27:c3:6e:53:33:29:3e:bd:c3:bd:
d9:5f:0c:a8:0b:4d:76:e8:52:86:53:7b:d1:9d:fe:
92:76:5e:6a:fb:ca:60:96:63:48:50:e2:fb:ee:25:
23:0d:d0:0e:4e:8b:0a:d4:54:bc:c3:71:79:f8:a8:
fd:90:15:4f:cd:30:2e:ee:08:11:86:0a:7d:7e:d8:
3c:63:31:71:1f:99:5e:14:57:50:f8:30:dd:61:f0:
99:6b:18:fb:dd:a9:9c:1d:f3:25:41:e1:1f:2c:de:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:39:A6:A7:EE:E3:68:DF:59:FF:41:82:F5:E5:E3:D4:EC:CE:7A:CB
X509v3 Authority Key Identifier:
keyid:43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/JTmmp-7jaN9Z_0GC9eXj1OzOess.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/Q5jLWAYu1KmjD_Q45E7vMdfvamU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.17.0/24
95.130.20.0/23
185.181.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6a:2f:55:d4:41:e7:69:33:e3:fd:0e:fe:66:9a:8c:fe:68:
50:02:7a:6b:07:63:c6:aa:0c:52:c8:a5:4a:75:65:51:a8:e4:
64:f6:d8:81:ae:69:17:b6:8e:bf:21:e4:ef:a7:c6:18:fa:d0:
99:1e:d4:a1:42:81:7e:c8:a6:9f:79:8e:12:31:df:9f:ff:3c:
fa:fc:8c:5e:6c:c1:72:18:e1:43:72:82:c9:88:12:27:5c:6c:
cc:a4:5f:c8:9e:88:fb:77:26:ee:ac:51:14:b4:d3:34:cd:0d:
57:fd:17:10:9e:fd:99:7a:2d:fc:64:0e:10:e4:f4:2b:9b:93:
8f:b0:3d:ec:2f:93:49:07:e9:ef:e2:19:57:eb:38:cc:0e:46:
e1:a6:75:2b:77:3e:1b:31:19:be:21:89:54:79:d3:6b:29:61:
46:18:ba:ab:6d:0e:82:96:37:18:3a:1d:7b:ff:8f:20:ab:01:
c3:d4:32:8d:5b:8a:04:94:79:6c:d7:82:fa:85:37:74:e8:60:
db:e4:9a:41:84:3c:b8:29:b9:34:95:a7:0c:7d:df:1f:42:d6:
a7:a9:65:f5:5c:87:c5:20:13:7c:0e:54:a4:d8:da:c7:d2:45:
8b:90:da:a3:f0:0e:8b:72:3e:9c:20:55:46:ae:8a:74:68:d9:
d0:f8:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:37 2023 by rpki-client on console-ams.rpki-client.org