Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/97f8e8-a588-43a4-8397-2e34f686b46c/1/fUpiurdDg5i4uPxQB0cfXpTNP-o.roa
File: fUpiurdDg5i4uPxQB0cfXpTNP-o.roa (raw, json)
Hash identifier: PS+NRL7+ybZj9pZ2Me8k9RqqQlE+8U7nOCuLfaqLUMw=
Subject key identifier: 7D:4A:62:BA:B7:43:83:98:B8:B8:FC:50:07:47:1F:5E:94:CD:3F:EA
Certificate issuer: /CN=aef667fa6caa11e06cc990cdcb349f9ab5784d8e
Certificate serial: 095E17D0
Authority key identifier: AE:F6:67:FA:6C:AA:11:E0:6C:C9:90:CD:CB:34:9F:9A:B5:78:4D:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvZn-myqEeBsyZDNyzSfmrV4TY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/97f8e8-a588-43a4-8397-2e34f686b46c/1/fUpiurdDg5i4uPxQB0cfXpTNP-o.roa
Signing time: Sat 01 Jan 2022 09:01:38 +0000
ROA not before: Sat 01 Jan 2022 09:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47844
IP address blocks: 62.122.88.0/21 maxlen: 24
31.130.0.0/24 maxlen: 24
31.130.1.0/24 maxlen: 24
31.130.2.0/24 maxlen: 24
31.130.3.0/24 maxlen: 24
31.130.4.0/22 maxlen: 24
31.130.8.0/22 maxlen: 24
31.130.12.0/22 maxlen: 24
31.130.16.0/20 maxlen: 24
178.212.80.0/21 maxlen: 24
93.157.160.0/21 maxlen: 24
93.157.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157161424 (0x95e17d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef667fa6caa11e06cc990cdcb349f9ab5784d8e
Validity
Not Before: Jan 1 09:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d4a62bab7438398b8b8fc5007471f5e94cd3fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:ca:c2:80:44:aa:5d:75:50:e9:f6:cf:c8:
ea:36:21:64:87:74:58:ad:0a:a9:18:b5:03:f8:59:
8c:6a:0d:87:39:23:c2:55:fb:ce:8d:c5:e9:6c:85:
a6:8e:76:43:02:33:d9:23:83:a5:43:06:41:a1:58:
7e:d3:f0:87:35:3e:b6:b7:5c:f3:82:e7:6d:d8:7a:
92:d1:1b:16:b4:c9:ae:7b:3e:ec:e6:5d:b6:f7:16:
53:0a:4c:cb:0a:ab:cb:aa:71:4b:b3:82:03:86:9c:
63:d8:ba:58:51:41:d7:8b:81:a1:17:44:c9:fb:ed:
0f:fd:6b:cd:d8:d6:3f:91:ab:2f:46:4c:67:40:89:
69:bc:c7:6d:4d:c0:f9:f2:37:7b:dd:51:34:d5:cc:
db:43:55:20:f8:1b:ea:ce:73:f5:7e:da:83:fb:a8:
87:e8:a4:fc:91:70:4d:e3:c0:75:3c:d3:e9:a1:ed:
6b:fb:70:e0:00:47:23:9b:67:c3:44:45:43:95:27:
45:e1:4e:be:13:97:95:55:06:24:e9:04:1b:63:38:
6f:da:29:1b:cb:29:93:9c:b3:b5:a0:99:97:67:5d:
c4:bc:60:6e:f7:e6:fc:d2:05:e5:4d:93:2b:94:a2:
b7:c7:42:d2:c2:74:4a:e1:b2:68:58:54:8a:fd:99:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4A:62:BA:B7:43:83:98:B8:B8:FC:50:07:47:1F:5E:94:CD:3F:EA
X509v3 Authority Key Identifier:
keyid:AE:F6:67:FA:6C:AA:11:E0:6C:C9:90:CD:CB:34:9F:9A:B5:78:4D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvZn-myqEeBsyZDNyzSfmrV4TY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/97f8e8-a588-43a4-8397-2e34f686b46c/1/fUpiurdDg5i4uPxQB0cfXpTNP-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/97f8e8-a588-43a4-8397-2e34f686b46c/1/rvZn-myqEeBsyZDNyzSfmrV4TY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.0.0/19
62.122.88.0/21
93.157.160.0/21
178.212.80.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:d0:f9:f4:72:5f:75:55:f6:08:82:d7:2c:74:68:16:5d:05:
08:75:65:2b:d9:4e:68:d6:cc:b8:13:a6:ff:47:4d:5d:90:83:
79:46:96:e3:e4:8c:e3:98:31:0d:97:77:f6:6c:0c:9b:91:bd:
dc:d2:c4:81:25:7f:0d:a3:64:20:88:89:c5:d2:6b:5a:00:a7:
97:d4:7e:92:40:49:95:f9:ed:13:e0:33:1f:d8:67:78:6b:36:
89:1a:6b:32:a0:6e:2c:6b:6f:02:ac:5d:61:13:d9:42:bc:fb:
9a:6c:5e:4d:d2:a2:2a:17:cf:9b:8c:e5:74:5c:c5:90:c1:4b:
fe:87:fd:e1:a0:0f:72:58:b1:5e:6d:49:4f:ac:5b:6f:d3:98:
70:86:b7:94:a3:68:4b:aa:08:c9:ba:03:b2:59:46:1a:59:ac:
85:64:bb:8a:b4:aa:3d:8c:49:e9:d9:46:ab:9f:de:bc:8b:5b:
cc:38:60:de:b6:b8:bb:44:d0:b8:1a:8b:c6:ac:e7:5b:fb:6f:
76:fd:bc:08:99:10:1e:e6:0b:5b:ee:ae:4e:c5:bf:79:f9:60:
92:73:27:88:2d:28:4c:82:b4:0b:37:ec:bb:67:ba:7a:a8:0c:
7b:9f:e7:c6:b3:52:b0:7a:e0:d6:6e:33:cf:85:b8:ed:fc:75:
8f:a9:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:09 2024 by rpki-client on console-fra.rpki-client.org