Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/S2DTQLbn1OcVXkdQo8PO-NxRElo.roa
File: S2DTQLbn1OcVXkdQo8PO-NxRElo.roa (raw, json)
Hash identifier: cXElB6HJu4AGrmRTO71G42ciw1TH8sjsvGSbPnoxWF0=
Subject key identifier: 4B:60:D3:40:B6:E7:D4:E7:15:5E:47:50:A3:C3:CE:F8:DC:51:12:5A
Certificate issuer: /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial: 01823F0F998D4A4B16F183C518C3A96A45F8
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/S2DTQLbn1OcVXkdQo8PO-NxRElo.roa
Signing time: Wed 27 Jul 2022 09:49:23 +0000
ROA not before: Wed 27 Jul 2022 09:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 93.113.213.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
185.170.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:0f:99:8d:4a:4b:16:f1:83:c5:18:c3:a9:6a:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Validity
Not Before: Jul 27 09:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b60d340b6e7d4e7155e4750a3c3cef8dc51125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:34:c7:20:ee:9f:0d:20:6d:67:aa:b5:d4:
db:46:40:8d:d1:53:b6:1d:11:8e:62:28:ee:19:50:
87:66:7d:49:9f:9d:e6:ca:20:07:9e:98:10:41:82:
bb:1d:bc:47:cf:94:61:e1:6e:1e:f3:a2:44:44:e9:
4a:9c:ad:84:aa:58:23:aa:20:c6:38:2c:97:fc:03:
1d:86:3c:ab:a6:3e:5a:32:23:4e:e4:76:0c:0b:d9:
f2:d4:ed:dd:e8:4d:1e:11:ce:d0:e7:2e:44:3b:b7:
28:1e:da:f5:9f:f0:6e:ec:86:6f:3f:39:6e:78:97:
b4:9f:be:36:ea:82:29:f8:c7:fc:ad:a3:ce:d1:62:
16:bf:da:a3:f9:fb:89:77:d3:ac:fb:8c:34:dc:74:
11:69:ae:1f:0a:43:c8:f1:9f:01:78:de:bf:02:f4:
9a:e8:4a:37:b0:eb:73:d4:c8:ed:59:f8:33:2d:ff:
9c:db:52:8f:9f:4c:2a:26:fd:6b:b2:15:fb:01:3c:
05:32:ea:e7:a7:71:ae:47:45:2a:6f:13:0c:82:f6:
31:0c:e7:48:57:1c:74:59:f2:7f:44:a1:71:f5:73:
10:d4:96:2d:c9:81:8a:e2:8a:55:cb:d0:55:7d:a2:
ee:ac:cc:88:eb:bf:7a:3b:9c:c3:ad:f4:72:6e:e8:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:60:D3:40:B6:E7:D4:E7:15:5E:47:50:A3:C3:CE:F8:DC:51:12:5A
X509v3 Authority Key Identifier:
keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/S2DTQLbn1OcVXkdQo8PO-NxRElo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.35.0/24
93.113.213.0/24
185.170.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c5:c9:00:92:96:5b:a5:80:7f:f4:49:1a:a4:de:82:6f:00:
bb:1e:6e:8c:30:89:28:4b:bb:90:ce:a6:84:06:a5:3f:00:96:
27:48:74:8f:1d:d8:72:c0:ea:0c:26:ca:1f:8b:f6:44:87:c6:
af:3c:84:81:cb:36:da:5d:18:3f:d7:4d:a6:4d:34:ca:42:19:
19:b7:d8:af:c3:db:ea:d4:9a:80:03:37:d4:74:01:d2:db:96:
40:01:6d:76:e8:78:ee:ea:4f:a8:47:78:3c:8a:de:8c:24:b8:
fd:8f:fe:9c:d5:e9:b5:74:8b:af:1c:45:18:a6:67:e7:0d:76:
9f:78:36:4a:f9:22:a7:1a:e2:17:9e:bd:4a:0b:3f:05:82:2c:
c2:e4:d5:61:42:f4:02:d6:c9:9b:b8:93:b6:1d:d0:51:9c:50:
9f:27:75:62:b6:9c:ac:e2:aa:d9:1b:d7:d9:e0:99:d3:85:00:
33:05:6b:44:f2:e7:63:9f:dc:80:0d:b0:16:e5:2e:50:e6:02:
6c:d1:2d:5a:d0:64:55:9f:3b:09:15:bd:c0:4b:57:02:45:a4:
2b:b6:62:7a:8b:a0:6f:43:8d:02:9e:15:12:51:d3:ad:8e:9a:
b0:87:df:24:c0:a3:5b:ce:ce:ef:5d:7b:8f:12:25:d8:b2:dc:
e4:a1:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org