Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/zfx7vHn1Ccn-hs9QpNMwYrrHDV4.roa
File: zfx7vHn1Ccn-hs9QpNMwYrrHDV4.roa (raw, json)
Hash identifier: vYZJASireDj+ATE2/u3NH5QW8dtHis6yQ6cAI1MehEA=
Subject key identifier: CD:FC:7B:BC:79:F5:09:C9:FE:86:CF:50:A4:D3:30:62:BA:C7:0D:5E
Certificate issuer: /CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Certificate serial: 2FFD85D1
Authority key identifier: 67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/zfx7vHn1Ccn-hs9QpNMwYrrHDV4.roa
Signing time: Sat 01 Jan 2022 04:59:08 +0000
ROA not before: Sat 01 Jan 2022 04:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.9.37.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.36.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805144017 (0x2ffd85d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Validity
Not Before: Jan 1 04:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdfc7bbc79f509c9fe86cf50a4d33062bac70d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:9e:ce:35:9e:5f:d5:b0:9b:db:54:55:40:
c7:f1:f3:99:f4:2c:e1:42:03:e0:e7:2b:69:f5:24:
c0:a6:76:89:55:93:33:23:18:d3:bf:63:51:e2:b4:
5c:6e:06:f1:ed:c4:4f:c8:4a:b0:ae:f0:c3:9c:3e:
a9:ee:a7:da:b9:fa:fa:cd:37:03:ea:ac:87:5a:1e:
6c:12:46:f7:ed:3c:71:11:c5:5c:65:bd:ea:1a:8a:
f9:cd:bb:ae:e6:bf:8c:41:9b:57:e9:80:92:27:fc:
de:7d:60:69:bb:3c:da:20:09:fe:2c:14:39:1a:33:
99:b6:af:99:eb:3a:b7:e7:f0:7e:f6:3b:12:f4:bf:
c1:1a:ab:c9:a4:c8:d4:e6:e1:58:13:1f:a8:83:80:
cc:5a:70:0a:bf:dd:ab:e6:48:02:fc:12:63:4f:89:
02:91:cb:51:5a:01:ca:c8:9a:29:c0:d4:49:18:c2:
7c:1b:dc:b2:5b:1a:02:7b:b8:14:c7:4c:a2:5b:81:
d5:4c:14:fb:9a:e1:b4:fa:d7:da:40:9f:b2:65:39:
c7:db:bf:25:65:b1:f8:b5:b4:34:39:af:92:95:46:
23:94:33:ac:fb:94:6f:bd:77:7e:c5:66:9b:b0:e3:
8d:0b:85:76:fd:b1:cd:8f:7c:16:06:c4:b0:e3:7e:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FC:7B:BC:79:F5:09:C9:FE:86:CF:50:A4:D3:30:62:BA:C7:0D:5E
X509v3 Authority Key Identifier:
keyid:67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/zfx7vHn1Ccn-hs9QpNMwYrrHDV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/Zx73itwMT7xwur09NrY84TC5CTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:d4:6f:48:d0:9c:ad:52:a0:40:98:ed:e6:b3:a3:eb:e4:e5:
9b:c3:82:a2:17:98:56:37:07:d5:53:4c:6e:b4:59:34:ca:cb:
34:65:15:04:1f:f2:9a:2d:dc:54:e2:c4:1b:ab:00:3c:9b:1c:
2c:a9:38:af:89:e7:36:6e:8a:40:13:0f:9f:42:73:90:cd:72:
71:99:5d:73:04:69:a2:74:e9:ca:26:40:c8:f5:4c:14:8d:12:
79:79:d0:82:fc:b5:c9:4a:55:7c:c3:01:cd:40:05:9f:9b:28:
b4:1e:2a:15:a3:75:ee:59:ab:4b:4b:9a:6a:fb:0c:57:5d:59:
82:96:16:06:ff:91:9c:96:19:bc:96:6e:ed:91:19:b7:63:49:
30:c5:ec:68:7c:6e:fe:89:d2:5d:e7:e0:1a:b0:ed:0b:04:3f:
ac:dc:da:02:1e:72:0e:4e:7f:87:5b:e0:40:02:e5:68:11:dd:
ca:ed:f2:5d:cc:b6:43:d8:de:ee:29:37:f3:4d:bd:45:05:b1:
21:56:96:c1:d1:84:94:85:fd:2d:63:05:35:c6:63:df:21:01:
09:1a:e7:64:6a:39:4b:c3:08:01:81:74:59:8f:b5:7b:6c:34:
ad:bc:3a:b8:50:33:6f:46:26:e7:00:0c:ae:5f:46:0a:f3:ab:
02:65:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:20 2024 by rpki-client on console-ams.rpki-client.org