Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/cRotC8SS_--wVD_myjo2Qiz-6dM.roa
File: cRotC8SS_--wVD_myjo2Qiz-6dM.roa (raw, json)
Hash identifier: PSRjRSiz8S7pkT3ua2duqWtZEl6iwbKLMIv4wywDzBg=
Subject key identifier: 71:1A:2D:0B:C4:92:FF:EF:B0:54:3F:E6:CA:3A:36:42:2C:FE:E9:D3
Certificate issuer: /CN=21b410a17440fcab1cdc90afa6fcb724c80c82a9
Certificate serial: 29013A46
Authority key identifier: 21:B4:10:A1:74:40:FC:AB:1C:DC:90:AF:A6:FC:B7:24:C8:0C:82:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/cRotC8SS_--wVD_myjo2Qiz-6dM.roa
Signing time: Fri 21 Jan 2022 09:39:55 +0000
ROA not before: Fri 21 Jan 2022 09:39:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 89.42.237.0/24 maxlen: 24
188.247.171.0/24 maxlen: 24
188.247.170.0/24 maxlen: 24
188.247.169.0/24 maxlen: 24
188.247.168.0/22 maxlen: 24
188.247.168.0/24 maxlen: 24
188.208.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687946310 (0x29013a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b410a17440fcab1cdc90afa6fcb724c80c82a9
Validity
Not Before: Jan 21 09:39:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=711a2d0bc492ffefb0543fe6ca3a36422cfee9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:76:ea:55:b1:3e:1c:bc:20:a0:1c:a2:f3:
2c:22:10:cb:b1:36:59:d8:8c:a0:fa:af:c5:00:e4:
8d:25:a5:66:0e:ef:25:b1:bc:3a:c7:a1:d1:1a:87:
95:21:cf:46:7c:57:4b:1e:af:72:bf:7b:4b:36:7c:
1d:81:b6:fe:5c:8c:df:4b:71:28:cc:e7:78:a1:da:
95:3e:1f:3a:6f:f4:6b:d0:59:b2:4c:71:2c:5b:66:
16:0a:9d:30:1b:47:21:8f:2d:42:19:82:5c:cf:aa:
92:ce:de:82:2e:5f:db:82:0a:31:4f:c0:dc:0c:d6:
6f:07:34:22:bb:cf:d9:8a:35:39:77:83:11:a5:aa:
5c:4d:9b:d1:19:45:bc:d1:37:84:82:97:29:94:7b:
6a:db:bf:21:83:34:e9:5c:d2:8f:9c:70:15:b8:cb:
b3:ba:2c:9f:35:fe:8d:8d:37:63:aa:b7:a6:94:d9:
ae:d8:20:1b:72:77:fc:58:af:83:01:f8:68:9c:f4:
11:62:41:87:d7:03:5e:15:08:d2:4e:40:f3:a4:69:
55:61:e0:66:e5:d2:47:4e:26:34:ef:4f:98:04:a9:
b4:f2:6c:45:58:1c:4e:e9:eb:fb:5e:d5:26:80:88:
70:50:3c:aa:95:02:74:04:56:e9:59:40:54:a3:12:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1A:2D:0B:C4:92:FF:EF:B0:54:3F:E6:CA:3A:36:42:2C:FE:E9:D3
X509v3 Authority Key Identifier:
keyid:21:B4:10:A1:74:40:FC:AB:1C:DC:90:AF:A6:FC:B7:24:C8:0C:82:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/cRotC8SS_--wVD_myjo2Qiz-6dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.237.0/24
188.208.26.0/24
188.247.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:10:62:ad:1d:99:7c:eb:45:d4:e0:6a:08:ab:78:c9:d9:61:
40:2c:99:43:73:f2:40:0f:e4:04:2c:f2:2c:77:ac:10:a7:bc:
d8:56:fa:9f:38:a7:4f:ae:9e:70:14:15:b0:08:0b:8c:0c:72:
b0:79:df:7e:36:fe:f3:17:b6:77:8c:24:5f:7d:33:ad:55:78:
49:46:43:66:d8:09:52:75:bd:af:9d:8b:d0:4b:69:f7:33:92:
78:8f:a1:48:82:f2:36:64:48:b3:21:18:76:f8:9c:54:74:f1:
ba:d2:7f:08:cf:57:9f:8f:cd:31:6a:e5:c0:32:1d:08:94:fe:
f8:d5:ec:bc:54:53:65:fe:a0:ff:4d:32:f1:b9:5d:b8:9a:f0:
e5:2e:11:b9:b9:8d:8d:92:33:ab:59:db:81:6b:77:10:ca:fd:
fc:92:2e:21:68:c6:df:02:72:9d:c3:f5:59:a4:98:76:3a:ac:
35:8b:96:e6:32:19:cf:80:03:f5:5b:95:e5:bd:de:42:c4:ad:
de:ac:4b:ec:41:64:91:66:58:7e:e8:fc:c2:38:69:a0:49:d7:
98:ab:68:09:03:d2:e6:3b:5a:24:96:31:0b:9e:40:05:11:09:
48:6f:a3:ad:37:17:ba:74:35:0c:57:f0:ed:38:41:14:ef:70:
4f:cc:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:31 2024 by rpki-client on console-fra.rpki-client.org