Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d0a974-a48d-4520-ae1f-27197e46ca06/1/JrdkrjRF38yXY-gsEydokyJb1GU.roa
File: JrdkrjRF38yXY-gsEydokyJb1GU.roa (raw, json)
Hash identifier: pJ0/F5iK94a9MyBIn3nHU4wTv6TBIaxPV4lfIyVH4DY=
Subject key identifier: 26:B7:64:AE:34:45:DF:CC:97:63:E8:2C:13:27:68:93:22:5B:D4:65
Certificate issuer: /CN=63ba9e49199899f06082c8c263cfbb329e23f84a
Certificate serial: 37AE7DEF
Authority key identifier: 63:BA:9E:49:19:98:99:F0:60:82:C8:C2:63:CF:BB:32:9E:23:F8:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7qeSRmYmfBggsjCY8-7Mp4j-Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d0a974-a48d-4520-ae1f-27197e46ca06/1/JrdkrjRF38yXY-gsEydokyJb1GU.roa
Signing time: Sat 01 Jan 2022 06:53:08 +0000
ROA not before: Sat 01 Jan 2022 06:53:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3265
IP address blocks: 195.64.80.0/20 maxlen: 20
82.92.0.0/14 maxlen: 14
194.109.0.0/16 maxlen: 16
62.251.0.0/17 maxlen: 17
83.160.0.0/14 maxlen: 14
82.161.0.0/16 maxlen: 16
83.68.0.0/19 maxlen: 24
213.84.0.0/16 maxlen: 16
80.100.0.0/15 maxlen: 15
62.216.0.0/19 maxlen: 19
213.222.0.0/19 maxlen: 19
212.238.0.0/16 maxlen: 16
80.126.0.0/15 maxlen: 15
2001:888::/32 maxlen: 32
2001:888::/29 maxlen: 29
2001:888::/30 maxlen: 30
2001:980::/30 maxlen: 30
2001:980::/29 maxlen: 29
2001:980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934182383 (0x37ae7def)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ba9e49199899f06082c8c263cfbb329e23f84a
Validity
Not Before: Jan 1 06:53:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26b764ae3445dfcc9763e82c13276893225bd465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:b8:72:39:50:85:c6:f5:bc:2d:68:17:6d:
9c:80:52:af:b6:43:13:a1:b8:a6:74:cb:0d:f7:01:
bb:aa:fa:d7:e8:8f:4f:6f:7a:a6:0f:b7:51:50:75:
26:5c:28:43:0a:b8:a2:f8:1b:6c:b6:97:eb:80:b8:
1e:bd:5e:f5:0c:f7:f0:83:33:ca:12:33:bb:da:03:
0f:1a:59:63:9b:69:71:fd:25:a1:8d:cc:98:b0:b0:
db:81:c7:ea:91:c2:11:ab:2d:d4:b7:46:2f:69:13:
59:ec:b4:98:02:1c:92:39:2d:eb:7b:dc:2d:57:8b:
2b:e6:bc:48:1a:01:88:ec:0c:c8:bb:6e:c1:27:7a:
ba:ac:a4:13:19:f4:e1:7f:ab:00:44:32:8a:f7:95:
de:eb:c7:d3:db:69:3b:00:07:72:1c:ef:e0:21:42:
06:ce:ed:a5:e4:1b:15:66:07:d5:ad:2f:6c:8a:16:
0d:98:c9:03:0a:0e:48:12:09:90:c2:0d:c2:98:ed:
52:e3:6b:7a:27:10:a8:44:5b:80:46:06:bd:9c:9e:
ad:28:e7:ae:7a:51:74:fc:c0:43:a4:d2:93:46:46:
a4:cc:b5:06:f1:fd:09:5d:25:82:f2:68:bc:45:94:
14:2e:78:b3:81:e8:4a:e9:63:60:0f:70:6b:54:b8:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:64:AE:34:45:DF:CC:97:63:E8:2C:13:27:68:93:22:5B:D4:65
X509v3 Authority Key Identifier:
keyid:63:BA:9E:49:19:98:99:F0:60:82:C8:C2:63:CF:BB:32:9E:23:F8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7qeSRmYmfBggsjCY8-7Mp4j-Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d0a974-a48d-4520-ae1f-27197e46ca06/1/JrdkrjRF38yXY-gsEydokyJb1GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d0a974-a48d-4520-ae1f-27197e46ca06/1/Y7qeSRmYmfBggsjCY8-7Mp4j-Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.0.0/19
62.251.0.0/17
80.100.0.0/15
80.126.0.0/15
82.92.0.0/14
82.161.0.0/16
83.68.0.0/19
83.160.0.0/14
194.109.0.0/16
195.64.80.0/20
212.238.0.0/16
213.84.0.0/16
213.222.0.0/19
IPv6:
2001:888::/29
2001:980::/29
Signature Algorithm: sha256WithRSAEncryption
7f:9a:dc:db:f1:a1:4f:2c:b2:f2:a6:f1:8a:40:4c:14:fc:fa:
0c:c1:ff:e4:ab:0c:15:72:ec:87:83:08:ec:d2:0e:bb:27:e4:
2f:32:1f:69:89:60:a1:9f:81:33:47:17:0f:b7:eb:81:31:ed:
b0:07:ab:6b:bc:9e:c8:40:b7:58:45:a0:0d:4c:c0:8d:17:57:
00:13:fe:2c:59:d6:89:a4:8a:8c:71:2b:d1:70:6b:0c:a8:67:
07:6c:c6:eb:0f:eb:65:a7:a6:77:6c:4b:2a:bd:7c:7b:72:a5:
6d:48:05:e9:bb:e0:51:ec:54:1f:ee:36:0e:e0:61:2e:47:c1:
9e:d1:df:fc:f2:7d:0e:47:8d:66:37:e3:9c:95:f2:6f:c1:07:
5d:c5:70:ca:a3:8f:6f:d8:f5:21:37:ba:2a:4e:87:77:6e:ef:
04:60:e9:24:c9:48:f2:ff:fa:4e:34:0f:0b:a3:af:73:2b:d2:
64:50:0b:63:e9:4f:47:43:6b:0c:e6:64:67:0c:13:dd:91:e1:
7b:70:b2:2d:23:6f:a4:1e:27:d1:02:49:c1:dd:77:d6:54:4b:
6b:6d:1b:f2:20:eb:6b:1c:99:8a:5e:1e:12:c5:7d:a2:ca:6d:
48:9c:c5:53:cc:5d:2f:01:37:cd:e3:94:0e:a3:e5:90:d8:44:
15:db:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:08 2024 by rpki-client on console-fra.rpki-client.org