Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/tPiwIcZNhnRip1pVBzGEMA0wUAI.roa
File: tPiwIcZNhnRip1pVBzGEMA0wUAI.roa (raw, json)
Hash identifier: 5bcjCmUKW1YPa9pAGDpOs4LwWwDbbI2L0BqtL4xwrbA=
Subject key identifier: B4:F8:B0:21:C6:4D:86:74:62:A7:5A:55:07:31:84:30:0D:30:50:02
Certificate issuer: /CN=fc18de6e57903c243ca2fd14154f55ebe61ce56a
Certificate serial: 01856CB845D44AD3897EFBA81C81DE5DE6D3
Authority key identifier: FC:18:DE:6E:57:90:3C:24:3C:A2:FD:14:15:4F:55:EB:E6:1C:E5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/tPiwIcZNhnRip1pVBzGEMA0wUAI.roa
Signing time: Sun 01 Jan 2023 09:44:53 +0000
ROA not before: Sun 01 Jan 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15533
IP address blocks: 62.73.128.0/19 maxlen: 24
91.185.160.0/20 maxlen: 24
164.93.128.0/17 maxlen: 24
37.244.64.0/18 maxlen: 24
213.212.64.0/18 maxlen: 24
185.50.160.0/23 maxlen: 24
5.32.152.0/21 maxlen: 24
176.62.128.0/21 maxlen: 24
2001:4138::/32 maxlen: 48
2001:4139::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:45:d4:4a:d3:89:7e:fb:a8:1c:81:de:5d:e6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc18de6e57903c243ca2fd14154f55ebe61ce56a
Validity
Not Before: Jan 1 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4f8b021c64d867462a75a55073184300d305002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d9:b4:30:54:ec:3c:df:24:39:77:20:15:83:
22:52:7e:3a:ae:1d:4e:3b:46:82:f0:86:7f:5d:dc:
c8:dd:db:e9:db:20:31:09:62:1c:58:d5:c8:e4:51:
6b:3c:16:9f:8d:b1:f2:86:e0:ca:8f:3f:74:68:aa:
79:d6:cf:37:cb:3b:76:f1:2f:ab:97:90:6f:61:3d:
86:0e:8e:95:fa:f6:e1:29:c8:f3:85:81:0b:fb:d4:
bf:17:79:9d:6e:3b:fd:64:ef:0a:75:96:3a:85:7f:
73:e2:aa:f0:cc:2b:56:85:da:ea:25:e2:14:9c:4a:
f9:56:84:bc:08:b3:37:c4:02:b9:a6:9d:09:90:ed:
5b:3e:b0:01:d9:eb:a4:71:f1:0e:fe:37:b3:d1:49:
de:71:79:2a:22:5f:6a:e7:9e:16:9e:bb:bb:2b:89:
d8:90:4c:68:db:da:78:03:b7:bf:23:9b:68:46:11:
77:47:01:10:7b:ea:a0:8f:96:58:98:c3:3c:8e:ef:
83:e2:7f:a0:0e:cb:bb:28:0e:9c:2d:f6:31:88:e9:
89:27:f3:ff:80:c2:e8:28:ed:f2:cc:55:3c:c5:5c:
aa:15:86:76:e0:da:8d:4e:60:a1:55:47:5d:cf:8b:
2e:64:04:9a:03:5b:80:c3:f1:cf:9f:4d:c6:8d:c8:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:B0:21:C6:4D:86:74:62:A7:5A:55:07:31:84:30:0D:30:50:02
X509v3 Authority Key Identifier:
keyid:FC:18:DE:6E:57:90:3C:24:3C:A2:FD:14:15:4F:55:EB:E6:1C:E5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/tPiwIcZNhnRip1pVBzGEMA0wUAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.152.0/21
37.244.64.0/18
62.73.128.0/19
91.185.160.0/20
164.93.128.0/17
176.62.128.0/21
185.50.160.0/23
213.212.64.0/18
IPv6:
2001:4138::/31
Signature Algorithm: sha256WithRSAEncryption
b4:0e:bb:41:40:0f:f4:3e:6d:79:60:7e:e0:d1:ed:ab:a8:1e:
11:78:41:39:31:0c:37:c0:5a:4c:e8:e2:65:63:bb:d5:7a:52:
82:30:93:88:04:a9:30:42:ae:8f:4c:71:66:69:80:30:46:20:
f4:69:be:a6:99:64:34:f8:48:5d:fb:8e:27:fb:fe:e8:f8:63:
d4:a6:34:e6:7d:d9:2e:63:10:d9:e2:03:31:bc:7b:65:cb:a4:
1d:c5:26:c6:0c:40:3b:d9:75:15:76:46:93:85:1b:04:ed:f4:
b5:44:17:c0:b1:ff:28:44:bd:50:9e:f3:8c:53:d5:cf:af:54:
56:b5:a4:44:3b:8e:e2:c6:4a:64:47:92:e0:f7:99:7b:ee:30:
5f:c9:75:08:81:e6:ae:66:dc:be:71:6d:4f:6b:32:bc:16:91:
d8:4b:2e:78:c6:4e:9e:82:34:7e:8f:f3:9e:b4:67:c6:aa:8a:
e2:9e:d3:58:53:10:2f:57:90:ea:c4:91:a0:19:19:d3:cf:d8:
fc:7b:da:c8:a7:90:f2:74:8d:b2:da:7c:99:fa:d7:55:e9:7c:
eb:85:83:8b:88:64:a5:64:fa:0d:93:17:49:53:1f:58:0b:1f:
ed:38:12:a9:61:a8:82:0c:bd:cc:6b:28:1d:fc:e0:76:07:04:
c7:7a:d6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:52 2024 by rpki-client on console-ams.rpki-client.org