Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/plv70xThjfoC-GV191b6SzkVw2I.roa
File: plv70xThjfoC-GV191b6SzkVw2I.roa (raw, json)
Hash identifier: BiKF5cs1otknF/a0PM9FTh7jSCsrZlsuWIomSs/3s1E=
Subject key identifier: A6:5B:FB:D3:14:E1:8D:FA:02:F8:65:75:F7:56:FA:4B:39:15:C3:62
Certificate issuer: /CN=4aac317f820419c93af26ee44e8b4ebaa6c7fe7f
Certificate serial: 04F60ED3
Authority key identifier: 4A:AC:31:7F:82:04:19:C9:3A:F2:6E:E4:4E:8B:4E:BA:A6:C7:FE:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sqwxf4IEGck68m7kTotOuqbH_n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/plv70xThjfoC-GV191b6SzkVw2I.roa
Signing time: Sat 01 Jan 2022 11:54:20 +0000
ROA not before: Sat 01 Jan 2022 11:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56882
IP address blocks: 46.251.254.0/23 maxlen: 23
185.59.64.0/24 maxlen: 24
45.252.236.0/22 maxlen: 22
185.59.65.0/24 maxlen: 24
185.59.66.0/24 maxlen: 24
185.59.67.0/24 maxlen: 24
185.130.152.0/22 maxlen: 22
188.227.128.0/19 maxlen: 19
91.228.91.0/24 maxlen: 24
185.193.8.0/22 maxlen: 22
46.251.252.0/23 maxlen: 23
168.245.196.0/23 maxlen: 23
37.209.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83234515 (0x4f60ed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aac317f820419c93af26ee44e8b4ebaa6c7fe7f
Validity
Not Before: Jan 1 11:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a65bfbd314e18dfa02f86575f756fa4b3915c362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:32:bb:33:30:41:80:e7:b6:10:4b:f5:d7:
8f:72:40:21:f8:c7:ba:83:04:3d:95:7f:5e:a5:fd:
45:f1:74:19:26:3b:fd:fd:30:0a:2b:35:47:07:e7:
c5:21:b8:cb:3a:3a:79:01:af:d5:47:69:d0:8d:56:
1d:38:6f:3d:1e:ae:48:af:80:ca:7d:0d:fa:c5:51:
60:3e:f4:4e:20:d8:1c:de:61:53:ae:de:32:df:a0:
f4:db:01:97:ba:fc:55:a1:95:63:f4:08:35:48:d3:
cd:17:e0:24:ea:c0:0c:cf:f6:40:80:9f:23:22:b5:
32:c6:ed:ef:28:99:dc:7f:ba:4b:b7:bb:00:66:d3:
6a:73:e8:61:7a:c2:7f:5e:98:2e:03:ab:3b:4e:22:
64:27:44:7a:26:72:14:da:24:e9:a7:75:66:c1:9f:
2d:20:0f:57:5b:f4:16:0f:69:47:31:39:1b:52:d5:
35:84:bd:56:45:80:31:76:1a:81:09:be:4a:9e:58:
b8:4f:c5:cf:fb:95:6f:8d:c0:23:3f:de:1a:0b:94:
87:cd:0b:22:eb:65:c9:4b:26:e2:7a:ce:b2:f4:cd:
8d:9d:2d:db:7c:cb:99:0d:2e:79:f0:69:bf:6a:2b:
d1:ff:a3:59:5b:03:a7:ad:cd:f2:94:db:98:0c:22:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5B:FB:D3:14:E1:8D:FA:02:F8:65:75:F7:56:FA:4B:39:15:C3:62
X509v3 Authority Key Identifier:
keyid:4A:AC:31:7F:82:04:19:C9:3A:F2:6E:E4:4E:8B:4E:BA:A6:C7:FE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqwxf4IEGck68m7kTotOuqbH_n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/plv70xThjfoC-GV191b6SzkVw2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/Sqwxf4IEGck68m7kTotOuqbH_n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.160.0/21
45.252.236.0/22
46.251.252.0/22
91.228.91.0/24
168.245.196.0/23
185.59.64.0/22
185.130.152.0/22
185.193.8.0/22
188.227.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:26:37:20:3a:27:37:b8:96:50:66:e9:af:c0:ca:5b:54:4a:
cc:86:8d:7d:e0:99:cd:d6:bd:48:ac:96:fc:09:42:f4:c5:f1:
18:df:06:05:57:10:20:54:4a:89:9f:8f:19:3e:2f:ec:1e:ef:
79:4f:e7:bf:d1:fa:fa:af:84:42:91:45:19:d7:de:e7:bf:0e:
d4:c1:bc:af:3b:f2:83:2b:44:cb:9c:76:f5:3e:10:0f:8e:fd:
ed:0c:0e:5a:40:ef:84:04:36:1b:c9:8c:84:96:40:54:93:83:
03:5e:10:8b:cc:ff:42:16:d5:08:98:bd:68:dc:4e:41:c1:c3:
8c:4b:24:51:ac:08:a1:e3:e5:88:03:22:3c:ce:a6:a7:31:7b:
ec:88:ad:52:b7:ec:52:b1:af:d2:fa:1a:2d:89:fe:5b:5d:52:
c8:47:db:50:c4:53:e9:3d:eb:9b:1a:68:e9:f3:8e:d4:a7:d1:
02:21:c1:5b:7b:d8:57:18:21:5b:a0:a5:78:68:a6:1e:ff:cc:
56:38:e1:78:20:6f:41:00:3f:80:a4:44:83:35:34:57:02:51:
97:de:08:26:d0:bc:6b:43:aa:47:8a:60:b6:73:ec:57:10:da:
fd:4b:cf:68:eb:b6:52:b9:63:d4:aa:59:ad:f7:e1:44:09:99:
51:00:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:51 2024 by rpki-client on console-ams.rpki-client.org