Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/_lDshur86f5vce46dYFPbTMEtRY.roa
File: _lDshur86f5vce46dYFPbTMEtRY.roa (raw, json)
Hash identifier: DU++QCu0kPgUB1ZaqfbMsDUR9LIicD9gxN+taQTtqOg=
Subject key identifier: FE:50:EC:86:EA:FC:E9:FE:6F:71:EE:3A:75:81:4F:6D:33:04:B5:16
Certificate issuer: /CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Certificate serial: 1B4F7F2A
Authority key identifier: 7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/_lDshur86f5vce46dYFPbTMEtRY.roa
Signing time: Sat 01 Jan 2022 13:55:13 +0000
ROA not before: Sat 01 Jan 2022 13:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202038
IP address blocks: 109.234.226.0/23 maxlen: 23
194.169.50.0/24 maxlen: 24
109.234.224.0/21 maxlen: 21
109.234.224.0/24 maxlen: 24
31.25.56.0/21 maxlen: 24
109.234.228.0/23 maxlen: 23
185.78.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458194730 (0x1b4f7f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Validity
Not Before: Jan 1 13:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe50ec86eafce9fe6f71ee3a75814f6d3304b516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:8c:6c:5d:6a:64:06:aa:87:cd:a9:d5:b2:
9d:ff:4c:fd:04:3c:3a:ac:26:ac:00:f1:ae:e7:bf:
6f:76:ce:ce:56:f2:c2:40:aa:97:3b:76:a0:f0:b2:
1a:4d:f6:a9:95:ae:34:a7:54:17:35:5e:05:01:f9:
33:4d:16:56:80:a7:7f:c8:e8:93:72:d2:ac:b8:99:
22:dd:fc:40:7a:1b:4a:bc:cb:6f:ea:d1:85:44:b3:
f8:56:68:40:4b:41:21:e7:56:de:94:20:70:9f:50:
23:a8:7c:2c:27:f1:38:b2:51:e0:99:8d:7c:c0:ea:
a7:92:30:58:70:51:7f:da:25:c2:39:a5:1d:ef:63:
89:ee:97:bf:67:6e:6b:e4:e9:2f:0d:e5:99:a2:84:
9e:e0:9c:bb:a9:e4:33:96:8b:a7:03:85:7d:eb:69:
92:4b:c4:58:7e:af:db:47:20:8d:94:11:26:5c:2f:
01:3d:21:0d:47:a0:ef:a2:7e:e4:89:1c:ce:a2:1a:
7f:da:cf:78:65:dd:d6:ec:03:83:f9:48:86:8f:18:
48:33:89:27:c8:a2:47:c8:4a:9d:36:e7:27:c1:87:
47:98:a4:b1:ba:e2:d9:78:6d:d7:4d:1f:69:1f:58:
04:d5:91:f0:e7:0f:85:b6:6e:94:9f:ea:9f:f7:5a:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:EC:86:EA:FC:E9:FE:6F:71:EE:3A:75:81:4F:6D:33:04:B5:16
X509v3 Authority Key Identifier:
keyid:7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/_lDshur86f5vce46dYFPbTMEtRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/fKyNf0t1FwYHv8-EOcLh0DohQQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.56.0/21
109.234.224.0/21
185.78.216.0/23
194.169.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:55:ae:f4:23:34:58:6f:6c:82:62:c9:df:65:3b:41:fb:e0:
a6:85:fa:9d:73:6b:d5:ab:f1:82:7e:6c:42:d7:f8:4a:6d:a3:
e0:64:9d:83:ba:6f:f6:a9:5e:d6:c2:79:7f:cb:32:2b:e0:63:
ff:72:07:67:8a:c2:24:19:f9:a1:c3:dd:b6:cf:6f:06:36:2f:
ac:69:67:3c:1a:59:bf:b2:2c:8e:5c:77:4b:bf:8f:f1:5e:fe:
8e:1a:6a:1b:4a:57:ab:47:9d:9a:50:65:c1:a6:3f:88:da:3b:
7d:f5:31:80:1c:46:8e:d7:8b:0d:b7:3f:33:68:c4:34:aa:91:
36:78:46:da:80:12:79:b0:05:bc:ad:79:dd:7a:6e:9f:e2:9b:
4f:e6:56:3c:e1:f0:eb:2e:d2:34:29:36:ee:69:4b:f5:17:bb:
bb:a4:2e:26:4c:17:8f:cb:38:37:e9:1e:db:7e:c0:ec:37:23:
fb:91:cc:f5:a4:f6:79:0c:5f:c1:40:2c:ea:d4:69:ed:ef:e4:
46:9c:6b:2a:3d:70:7d:6c:b4:33:99:41:d3:17:b1:26:02:89:
ec:38:09:98:18:d3:70:d3:14:6e:e0:1a:4c:29:76:86:91:36:
da:d5:be:79:56:a5:dd:3e:f5:83:19:c6:87:29:fe:92:4f:10:
0f:f5:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:18 2024 by rpki-client on console-ams.rpki-client.org