Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/B4pAOOd0Mx_gEM5uDejMTMS4xDc.roa
File: B4pAOOd0Mx_gEM5uDejMTMS4xDc.roa (raw, json)
Hash identifier: Gqe9+VMd+RXfjdIanDYE7GIskryCjbAGJiADfGKzJrg=
Subject key identifier: 07:8A:40:38:E7:74:33:1F:E0:10:CE:6E:0D:E8:CC:4C:C4:B8:C4:37
Certificate issuer: /CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Certificate serial: 01826B0C962E4CD0EDFEF424CF73410AE53B
Authority key identifier: 7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/B4pAOOd0Mx_gEM5uDejMTMS4xDc.roa
Signing time: Thu 04 Aug 2022 22:49:23 +0000
ROA not before: Thu 04 Aug 2022 22:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202038
IP address blocks: 109.234.226.0/23 maxlen: 23
109.234.225.0/24 maxlen: 24
109.234.224.0/21 maxlen: 21
194.169.50.0/24 maxlen: 24
109.234.224.0/24 maxlen: 24
31.25.56.0/21 maxlen: 24
109.234.228.0/23 maxlen: 23
185.78.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6b:0c:96:2e:4c:d0:ed:fe:f4:24:cf:73:41:0a:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Validity
Not Before: Aug 4 22:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=078a4038e774331fe010ce6e0de8cc4cc4b8c437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:a8:41:1c:de:84:b8:27:89:ae:bb:b6:91:
c4:1c:07:10:f1:f6:b4:28:ae:d0:af:aa:4b:ca:b9:
79:55:90:ca:90:f2:21:d6:2d:84:5b:f6:03:c1:9e:
ca:6c:e3:25:e7:84:94:35:9f:96:b9:9c:79:43:ec:
1a:67:f0:60:d4:2e:90:e8:8f:16:ab:91:b8:2e:06:
a1:71:20:1f:3d:8b:70:02:0f:71:43:ac:4b:14:ab:
5b:2e:27:26:5e:1c:a2:ff:1f:76:12:55:ad:4a:75:
4b:d7:be:01:fb:50:da:a0:4b:0c:ad:d0:ee:a9:36:
57:38:e7:09:79:00:d5:e6:38:bd:bf:17:02:59:5d:
de:92:06:11:03:a7:05:db:49:d7:50:08:5c:05:60:
e5:31:a4:cd:66:aa:e7:70:9b:56:77:64:91:96:49:
b6:64:f3:53:19:16:4a:2c:28:67:1b:db:1a:26:1f:
3b:27:36:f9:2e:e1:32:a5:aa:89:c9:77:ab:8d:58:
62:ec:db:04:6a:16:4b:fa:d2:7e:db:61:47:35:15:
cd:cd:9a:2c:13:88:56:8e:56:f1:26:df:e2:70:16:
60:85:00:70:b9:e0:b7:35:ec:e3:80:87:0b:11:bb:
ec:2e:90:10:49:ca:dd:f9:c4:77:0c:90:71:d2:08:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8A:40:38:E7:74:33:1F:E0:10:CE:6E:0D:E8:CC:4C:C4:B8:C4:37
X509v3 Authority Key Identifier:
keyid:7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/B4pAOOd0Mx_gEM5uDejMTMS4xDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/fKyNf0t1FwYHv8-EOcLh0DohQQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.56.0/21
109.234.224.0/21
185.78.216.0/23
194.169.50.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f3:c2:3a:84:3e:2e:3a:68:60:52:b1:c5:65:b9:3d:9c:03:
75:41:36:49:34:32:21:a8:0c:e1:b8:2c:20:d7:6c:b6:92:f9:
18:7d:d0:bf:3e:e8:d7:c1:fc:ee:93:57:c0:bc:7f:87:78:b7:
9b:10:8d:d3:bb:15:f5:29:fe:de:51:14:65:75:60:17:7f:38:
55:34:27:c1:86:2e:7d:d2:47:5a:94:c2:60:2d:4b:b9:ce:1b:
64:6d:56:42:4e:67:3f:97:6d:0c:dc:dc:32:37:45:26:51:86:
87:3f:91:7d:ae:63:77:29:95:38:bf:a5:2d:bc:88:4b:48:e5:
e8:49:a1:b1:d5:f3:80:fc:9b:e7:8c:8c:db:e3:28:5e:28:b6:
f1:b8:55:83:d6:89:f5:c5:13:a2:67:09:92:57:77:a2:87:57:
55:77:f3:0f:07:d1:dd:35:9e:74:09:50:71:ae:53:8d:0d:9b:
bc:85:bc:b7:40:ae:88:6b:cb:1c:64:dd:90:99:a2:97:a3:37:
8a:16:96:5c:18:ff:ca:2e:0b:fb:2e:71:33:61:cb:9e:c7:92:
1d:9a:92:26:df:29:0e:8f:2a:db:f3:a3:68:3b:8c:b0:28:16:
64:3f:3c:ab:6a:03:a7:6f:19:a0:02:42:92:db:d5:53:34:a2:
f0:f3:04:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org