Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/y_eQSSegS-Elud3M6Z5kr6v625o.roa
File: y_eQSSegS-Elud3M6Z5kr6v625o.roa (raw, json)
Hash identifier: EnimWAMpa763mR17Je5Y6vlkniUtE0e0UYXYAhZAEvc=
Subject key identifier: CB:F7:90:49:27:A0:4B:E1:25:B9:DD:CC:E9:9E:64:AF:AB:FA:DB:9A
Certificate issuer: /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial: 0184BE6EF964DA5F86C9DA00E061BA7185B1
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/y_eQSSegS-Elud3M6Z5kr6v625o.roa
Signing time: Mon 28 Nov 2022 13:30:54 +0000
ROA not before: Mon 28 Nov 2022 13:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25393
IP address blocks: 89.184.72.0/21 maxlen: 21
89.184.88.0/21 maxlen: 21
78.27.224.0/19 maxlen: 19
77.87.192.0/21 maxlen: 21
195.177.116.0/22 maxlen: 22
2a02:2278:215::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
2a02:2278:210::/48 maxlen: 48
2a02:2278:209::/48 maxlen: 48
2a02:2278:204::/48 maxlen: 48
2a02:2279::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:6e:f9:64:da:5f:86:c9:da:00:e0:61:ba:71:85:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Validity
Not Before: Nov 28 13:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbf7904927a04be125b9ddcce99e64afabfadb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:2f:4a:80:2c:5b:76:46:3f:81:54:ab:de:
b6:37:07:b4:d1:71:33:c8:26:9f:ee:ca:a3:e2:dc:
ec:4f:d0:7a:86:bb:18:cb:8b:11:40:ed:22:ae:7b:
3d:12:a5:c4:b8:3d:d5:b4:be:03:25:92:35:d2:de:
f8:cb:6b:13:6f:55:ff:ce:2e:b8:f6:6d:af:81:21:
91:40:b2:57:cc:fe:a3:88:ef:e5:d6:b9:52:5a:39:
4e:7f:5f:ee:80:36:63:8e:b8:7d:11:d2:c1:1c:8d:
35:06:00:e7:ee:43:c9:c1:14:e8:a4:7c:9d:a9:f2:
4c:3b:be:c8:b6:a7:5d:42:b6:6b:85:80:9e:d5:a2:
fd:4d:e1:1a:39:eb:d7:85:96:e8:fe:fd:42:33:9c:
fa:34:30:f4:1e:24:57:86:c2:81:3c:b6:4f:1c:67:
2d:a0:72:47:50:70:04:93:b1:49:c8:38:72:1a:10:
e2:25:d2:28:2a:6a:36:e0:48:89:da:00:7c:f6:f2:
f6:52:16:95:33:fa:dc:37:f3:3e:77:4c:e0:66:4c:
7e:31:a1:f1:b1:c8:99:15:45:71:f7:49:ae:6a:4d:
5c:00:bb:c5:3a:07:20:61:19:b5:6f:26:a1:92:db:
76:9d:56:4b:5c:fb:36:ee:84:96:13:46:87:9c:26:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:90:49:27:A0:4B:E1:25:B9:DD:CC:E9:9E:64:AF:AB:FA:DB:9A
X509v3 Authority Key Identifier:
keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/y_eQSSegS-Elud3M6Z5kr6v625o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.192.0/21
78.27.224.0/19
89.184.72.0/21
89.184.88.0/21
195.177.116.0/22
IPv6:
2a02:2278:204::/48
2a02:2278:208::/47
2a02:2278:210::/48
2a02:2278:215::/48
2a02:2279::/32
Signature Algorithm: sha256WithRSAEncryption
0c:72:bf:7b:5a:c9:79:de:28:f8:92:c4:02:ec:f7:55:09:29:
31:2a:6e:3e:63:cc:b0:9f:c6:8c:56:87:71:1d:1c:0c:88:ae:
43:53:d0:03:7d:b0:2c:4e:e0:58:f5:f5:69:68:b3:cb:74:a7:
1c:70:11:df:3b:e0:ef:a3:62:4d:1b:fb:9f:bb:4d:c3:59:89:
7b:ea:92:14:01:ca:fb:0a:18:d3:de:21:4b:06:eb:bf:8a:e2:
f5:c2:80:54:2b:3b:17:56:cc:93:68:f4:8e:14:71:1b:2e:8c:
d6:e2:42:d6:ee:25:22:16:e5:a2:20:a2:f6:d4:53:c7:fe:84:
c9:36:8a:03:68:cb:38:eb:f0:49:77:07:10:af:30:6c:5e:88:
54:19:88:e5:e9:01:72:e1:db:91:0a:cf:d6:0d:97:88:9b:a2:
74:02:13:42:91:8b:ef:a3:0c:62:e6:8c:be:26:49:54:36:01:
ba:a5:06:1b:50:2b:5c:43:cb:05:3c:91:a2:88:98:66:72:0f:
89:91:0d:57:6c:e0:a3:bd:b8:e5:fd:c6:71:b6:08:d9:8c:4b:
3e:64:53:4b:ea:93:b1:f0:18:30:93:33:cc:f9:26:80:db:35:
f9:b2:cd:58:44:e2:02:57:d2:ea:1d:6b:5b:a5:6d:1c:59:7e:
8a:1e:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org