Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/spkcziElrlPVWejMdedT7zQa4QM.roa
File: spkcziElrlPVWejMdedT7zQa4QM.roa (raw, json)
Hash identifier: MWKwnL4P7f7u8I0JUMlbIbOBakJngfplmLdV8x54h7E=
Subject key identifier: B2:99:1C:CE:21:25:AE:53:D5:59:E8:CC:75:E7:53:EF:34:1A:E1:03
Certificate issuer: /CN=aa7fa1d876d6c9cf57584456b2094daac5f3f519
Certificate serial: 31B7F195
Authority key identifier: AA:7F:A1:D8:76:D6:C9:CF:57:58:44:56:B2:09:4D:AA:C5:F3:F5:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qn-h2HbWyc9XWERWsglNqsXz9Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/spkcziElrlPVWejMdedT7zQa4QM.roa
Signing time: Sat 01 Jan 2022 04:53:31 +0000
ROA not before: Sat 01 Jan 2022 04:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197637
IP address blocks: 185.8.86.0/23 maxlen: 23
109.75.96.0/24 maxlen: 24
109.75.96.0/22 maxlen: 22
109.75.98.0/24 maxlen: 24
109.75.97.0/24 maxlen: 24
37.99.200.0/21 maxlen: 21
109.75.104.0/24 maxlen: 24
109.75.99.0/24 maxlen: 24
109.75.106.0/24 maxlen: 24
109.75.107.0/24 maxlen: 24
109.75.108.0/22 maxlen: 22
185.65.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834138517 (0x31b7f195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7fa1d876d6c9cf57584456b2094daac5f3f519
Validity
Not Before: Jan 1 04:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2991cce2125ae53d559e8cc75e753ef341ae103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:7f:26:34:36:58:56:40:7f:a8:7c:62:3e:
69:c3:82:e5:4f:f8:e5:11:01:0b:71:65:08:43:68:
3f:59:07:61:e3:47:6b:c8:61:69:25:64:f6:d7:0b:
2c:d2:e9:ad:01:43:88:fc:5a:70:d7:c7:d9:ef:f1:
6b:5d:5f:b9:b3:ba:aa:ad:b4:54:14:e9:be:3f:11:
db:41:db:78:9a:51:dd:25:09:98:66:e6:e1:28:7d:
21:df:6a:32:0d:87:24:2d:e8:e9:78:c1:7f:36:96:
2f:df:60:fd:0f:cc:12:13:21:2e:ce:a5:96:b1:a9:
5c:1a:30:8e:ed:52:03:e7:b1:2b:e7:8b:0b:40:20:
95:e9:53:4a:16:f6:3d:aa:30:fe:26:59:b7:22:67:
8a:86:43:70:98:f9:b0:9f:ab:6e:a0:ef:a8:07:f1:
fc:8e:39:ba:64:fc:9b:d8:a1:ae:a9:b0:ec:78:e9:
25:07:d2:b1:93:cd:18:0e:97:0d:3a:90:ba:e2:df:
7b:bb:31:40:43:2c:3e:10:32:d3:6a:03:3d:ac:1a:
c5:fa:db:b7:85:24:f1:4d:82:98:4c:2b:48:fe:e2:
05:5e:4d:a2:09:65:52:90:ee:29:6e:99:c4:24:61:
1a:8a:7c:fd:3e:b8:cf:c0:96:44:5c:cb:85:15:de:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:99:1C:CE:21:25:AE:53:D5:59:E8:CC:75:E7:53:EF:34:1A:E1:03
X509v3 Authority Key Identifier:
keyid:AA:7F:A1:D8:76:D6:C9:CF:57:58:44:56:B2:09:4D:AA:C5:F3:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qn-h2HbWyc9XWERWsglNqsXz9Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/spkcziElrlPVWejMdedT7zQa4QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/qn-h2HbWyc9XWERWsglNqsXz9Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.200.0/21
109.75.96.0/22
109.75.104.0/24
109.75.106.0-109.75.111.255
185.8.86.0/23
185.65.198.0/23
Signature Algorithm: sha256WithRSAEncryption
38:c0:94:79:be:01:fe:84:68:6c:7d:bc:ac:e0:ef:79:76:78:
ae:d3:21:2c:a3:ad:cf:9e:7d:1c:aa:48:e6:48:f0:34:ae:bb:
66:ab:e4:a0:44:5b:00:01:b0:b0:5a:a6:2c:0a:6e:fa:94:fb:
8b:98:53:dd:36:28:71:90:bf:8e:63:f0:b3:cd:68:32:1d:16:
9c:4d:0b:26:75:e4:c9:a2:f9:f1:1d:99:ff:0c:a1:7c:a0:63:
2c:33:5a:1c:2d:41:3e:b5:67:b2:e2:2d:1b:5f:04:22:27:a7:
14:90:9d:7e:15:20:e8:66:52:36:15:58:46:2b:e6:50:71:90:
d0:fb:d7:d6:41:d3:ab:05:ee:1d:ad:b5:fb:bd:3c:62:75:90:
5b:6f:9d:a6:c8:32:9d:e7:42:c0:22:c9:92:5c:42:37:ae:b3:
b2:f5:f9:96:35:7a:37:cb:d2:2c:a2:33:a3:2d:08:da:0d:d0:
cd:31:95:55:1a:e3:09:fe:de:de:44:b5:4f:99:9f:8a:f6:5f:
f1:3c:60:9a:c7:a0:fa:b3:08:cc:f2:89:be:34:6e:1d:c9:79:
7b:f3:40:7c:55:dc:35:ae:fb:cc:97:0b:55:c2:52:54:32:cf:
ab:42:ee:11:69:4c:5c:f5:48:c6:b1:30:d1:57:35:98:ad:18:
bb:38:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:47 2024 by rpki-client on console-ams.rpki-client.org