Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/X3LLAk-GPRwWlDf_rawcEjE1rFw.roa
File: X3LLAk-GPRwWlDf_rawcEjE1rFw.roa (raw, json)
Hash identifier: pvGbys7EC1+KGrXOVIeJ7Xq7rKj6MGkaRCanMgAAs6A=
Subject key identifier: 5F:72:CB:02:4F:86:3D:1C:16:94:37:FF:AD:AC:1C:12:31:35:AC:5C
Certificate issuer: /CN=b1a3b0de59596a64edfa659da3b2abe8420668e8
Certificate serial: 0770AD58
Authority key identifier: B1:A3:B0:DE:59:59:6A:64:ED:FA:65:9D:A3:B2:AB:E8:42:06:68:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saOw3llZamTt-mWdo7Kr6EIGaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/X3LLAk-GPRwWlDf_rawcEjE1rFw.roa
Signing time: Mon 17 Jan 2022 17:03:44 +0000
ROA not before: Mon 17 Jan 2022 17:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209910
IP address blocks: 185.200.77.0/24 maxlen: 24
185.200.78.0/24 maxlen: 24
185.200.76.0/24 maxlen: 24
185.200.76.0/22 maxlen: 22
185.200.79.0/24 maxlen: 24
185.236.248.0/22 maxlen: 24
193.84.48.0/23 maxlen: 24
193.84.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124824920 (0x770ad58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a3b0de59596a64edfa659da3b2abe8420668e8
Validity
Not Before: Jan 17 17:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f72cb024f863d1c169437ffadac1c123135ac5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:18:cf:21:17:af:5d:fc:75:a4:d8:e3:b5:
08:f8:00:bd:ec:90:95:2c:60:99:44:ab:20:28:51:
18:1d:8a:ee:2a:47:37:cd:f7:ad:c4:64:aa:a1:9b:
83:29:a2:51:80:1b:b6:2f:f1:17:8d:04:05:54:d9:
25:4b:3d:06:65:99:f9:e3:ae:28:81:72:66:9f:93:
c5:e4:29:06:79:fc:bf:da:fd:ad:50:92:4f:62:8c:
c5:64:8d:4b:74:62:5e:05:1f:d5:61:e2:0b:ea:b6:
f5:95:22:ce:27:b8:f0:f5:fe:d0:3e:8c:5e:c5:25:
01:9e:9e:65:28:39:6f:74:5f:84:54:24:4b:a9:3a:
ba:42:58:39:d5:28:26:de:da:b2:66:fc:40:1b:73:
77:b0:45:85:8b:7f:4d:9b:82:b5:d1:79:c8:0b:5c:
50:0f:c5:cd:a4:e1:cd:42:ab:4f:59:76:d7:19:d1:
b1:d3:19:a8:7e:6b:38:70:43:f8:0b:de:f0:24:95:
65:b1:6a:7c:d8:49:7d:c6:a6:f7:2c:61:e5:6b:e1:
95:c5:80:ff:8a:37:68:0a:e6:07:f9:be:1a:0a:dd:
45:0c:e7:0f:ef:ab:88:52:fc:4d:7d:1b:f3:b2:23:
b7:9e:4a:0b:70:33:53:80:62:45:a3:25:68:e1:20:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:CB:02:4F:86:3D:1C:16:94:37:FF:AD:AC:1C:12:31:35:AC:5C
X509v3 Authority Key Identifier:
keyid:B1:A3:B0:DE:59:59:6A:64:ED:FA:65:9D:A3:B2:AB:E8:42:06:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saOw3llZamTt-mWdo7Kr6EIGaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/X3LLAk-GPRwWlDf_rawcEjE1rFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/saOw3llZamTt-mWdo7Kr6EIGaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.76.0/22
185.236.248.0/22
193.84.48.0/23
193.84.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:a1:70:1a:48:25:35:cf:0f:21:47:14:be:ce:a2:df:51:f3:
39:e6:9b:7b:f4:4b:65:d1:43:4c:f2:f1:fd:c4:82:79:63:02:
4a:39:e4:ef:d5:0e:b1:3e:bf:1b:49:31:7d:11:ac:f6:a1:4d:
a5:3f:3d:c1:f0:0c:cc:da:06:e5:e1:75:7c:cb:91:52:dc:ce:
c4:56:a0:fc:95:e4:52:61:48:c5:a0:0f:a9:07:3f:60:5d:16:
ff:05:92:d5:81:c8:9c:61:ee:ce:ea:28:9c:c6:e9:f5:72:67:
c0:ac:29:16:7d:b8:8a:ff:4f:6a:e2:0f:a3:6b:25:e1:31:96:
0c:f6:32:f6:43:c8:e6:f1:54:72:b9:11:aa:29:21:c0:f7:61:
67:a2:07:62:5e:0c:43:b8:31:37:3f:15:b2:d2:f9:7e:53:ed:
24:24:c1:c0:29:5c:fe:83:d6:ee:a3:e6:62:9d:c3:89:07:c5:
82:48:c3:ee:db:05:50:d1:b3:0a:c6:16:ed:5b:5a:af:9c:1d:
3f:b3:29:bb:e0:bc:4b:9b:ab:05:b6:3c:86:5e:b0:39:81:c7:
59:46:82:9c:64:b5:9e:41:88:ca:63:45:65:71:6b:4a:ff:c0:
ef:ab:0d:60:85:5e:a8:9c:70:ce:10:8b:f8:a3:a6:54:d1:cf:
4d:42:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org