Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866783-23ca-4380-adb6-5eab6bb900bf/1/MStw0sYmUGmWRDKKrSqS9WeY9bQ.roa
File: MStw0sYmUGmWRDKKrSqS9WeY9bQ.roa (raw, json)
Hash identifier: o0cgym3wVyDMkPWNHzBgXA4U/tOiorZRTjyfvpQFxK0=
Subject key identifier: 31:2B:70:D2:C6:26:50:69:96:44:32:8A:AD:2A:92:F5:67:98:F5:B4
Certificate issuer: /CN=2e47b8458815b0c17e2fd6cc244ae0516c7b0ad7
Certificate serial: 279D57
Authority key identifier: 2E:47:B8:45:88:15:B0:C1:7E:2F:D6:CC:24:4A:E0:51:6C:7B:0A:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lke4RYgVsMF-L9bMJErgUWx7Ctc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866783-23ca-4380-adb6-5eab6bb900bf/1/MStw0sYmUGmWRDKKrSqS9WeY9bQ.roa
Signing time: Sat 01 Jan 2022 01:51:19 +0000
ROA not before: Sat 01 Jan 2022 01:51:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207885
IP address blocks: 91.217.195.0/24 maxlen: 24
91.217.200.0/24 maxlen: 24
91.217.207.0/24 maxlen: 24
91.217.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596183 (0x279d57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e47b8458815b0c17e2fd6cc244ae0516c7b0ad7
Validity
Not Before: Jan 1 01:51:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=312b70d2c62650699644328aad2a92f56798f5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:63:07:35:cc:e0:9c:76:54:6c:77:8f:70:
b1:f0:18:dc:a4:24:62:7d:83:66:9b:5c:80:2f:2b:
ce:e5:8a:74:31:5a:e8:4e:25:ae:7d:24:5c:5c:bc:
17:eb:ca:dc:24:08:55:cc:8c:b0:4a:33:7a:b6:77:
83:b5:ca:9c:2c:0d:2c:d9:2c:61:9c:5a:ac:0a:d7:
88:97:de:2a:fa:54:24:39:3a:8b:e2:c8:f0:bf:ee:
0d:f2:41:10:fa:2a:5a:82:0d:e4:1c:84:01:ad:56:
f4:a4:25:3e:8e:d4:1e:fd:6f:e6:21:67:d5:bc:b3:
47:fb:5e:75:85:9f:c8:c7:25:7b:ff:30:bd:3a:6c:
94:40:66:6a:83:05:55:51:66:14:88:8e:bd:f7:32:
7d:60:48:02:fd:c5:5f:a0:17:6c:6b:02:32:f8:d1:
60:8d:4a:10:7b:c0:5c:4a:87:9a:c5:5d:bf:7b:21:
cb:c8:83:d1:0d:4f:aa:9c:8b:4b:bd:69:1f:a7:5c:
52:39:c0:bc:90:d2:96:c6:43:d6:aa:5b:7a:5c:fa:
db:d0:1e:29:ab:df:e4:f1:6a:5b:b2:4e:ca:83:75:
bd:73:8d:77:60:10:9c:7c:3f:3c:56:64:c2:84:b7:
53:15:6d:06:d8:47:f6:9b:fe:a9:cd:6d:b5:32:bc:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2B:70:D2:C6:26:50:69:96:44:32:8A:AD:2A:92:F5:67:98:F5:B4
X509v3 Authority Key Identifier:
keyid:2E:47:B8:45:88:15:B0:C1:7E:2F:D6:CC:24:4A:E0:51:6C:7B:0A:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lke4RYgVsMF-L9bMJErgUWx7Ctc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866783-23ca-4380-adb6-5eab6bb900bf/1/MStw0sYmUGmWRDKKrSqS9WeY9bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866783-23ca-4380-adb6-5eab6bb900bf/1/Lke4RYgVsMF-L9bMJErgUWx7Ctc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.195.0/24
91.217.200.0/24
91.217.207.0/24
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3a:fb:3a:f2:dc:9d:7b:5c:ce:b4:1f:86:59:71:8f:59:27:
be:f3:dc:e8:32:04:6e:73:96:4b:52:aa:e8:b4:fa:c9:59:cd:
3c:02:56:3b:52:93:08:b0:24:79:fb:98:9a:9f:93:fc:71:d4:
d5:8f:93:54:6f:ea:04:b4:d5:3b:7c:fa:aa:2a:e3:5e:56:c5:
29:5d:13:8e:08:24:9e:91:8c:b0:dc:a5:51:bb:91:67:ac:b5:
50:60:29:11:95:4a:69:55:d3:de:11:49:8d:1f:7d:c6:e0:89:
ef:2c:16:98:5c:bb:a2:3b:0b:a8:88:4e:9f:40:9f:a0:e0:0f:
43:cc:85:22:4f:60:8e:f5:3e:2c:e2:81:be:15:f2:b7:bd:55:
4d:b1:89:c6:89:db:5b:0a:e0:d0:eb:42:0c:9e:4d:92:be:00:
be:5d:c0:cc:71:4f:fd:bd:b3:6e:17:12:ed:ca:4b:a6:c0:ca:
94:81:d0:ba:bd:3a:2f:f5:53:4c:b7:fa:2f:fd:69:c0:91:39:
97:16:00:ec:77:9f:43:37:68:fe:c3:02:b0:c4:22:6c:f6:1e:
9c:5a:6d:d9:7e:88:59:8c:f4:ca:ed:27:13:9c:e7:e8:02:e9:
fa:7d:9c:a0:dc:23:ad:72:e9:43:74:4a:18:46:6d:fd:33:0e:
f1:8c:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org