Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/2JBon4MmDUqUycw41mLClJVVMgY.roa
File: 2JBon4MmDUqUycw41mLClJVVMgY.roa (raw, json)
Hash identifier: RgeJOzZgj2x3YjvThGtdiNKTnRZelFpTwursi5UYLyo=
Subject key identifier: D8:90:68:9F:83:26:0D:4A:94:C9:CC:38:D6:62:C2:94:95:55:32:06
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 0801477A
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/2JBon4MmDUqUycw41mLClJVVMgY.roa
Signing time: Sat 01 Jan 2022 03:55:28 +0000
ROA not before: Sat 01 Jan 2022 03:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 193.111.76.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
185.254.52.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
93.190.9.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134301562 (0x801477a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Jan 1 03:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d890689f83260d4a94c9cc38d662c29495553206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:fe:fa:8d:79:a4:39:c5:56:16:e8:78:b7:
1b:2b:ee:f5:e2:8d:84:2b:fb:eb:a0:86:a8:bb:5a:
9f:e0:1a:8a:31:cd:8b:e4:5e:c4:64:c2:bc:9f:cf:
48:13:03:02:7a:de:63:de:d7:c2:1f:d6:0c:ae:79:
65:47:53:80:82:31:ca:b9:c6:9f:a1:0b:1f:5d:e2:
4a:a9:e4:a1:49:32:2f:4c:0b:3f:b9:29:55:e8:4c:
4b:8c:5c:62:cd:2d:28:b6:6d:66:c7:22:1d:85:b1:
a7:16:d2:46:e9:2d:94:4f:21:c6:39:32:86:86:87:
34:5b:c9:18:de:5f:d1:c6:15:66:3b:36:e6:a6:b2:
78:17:7f:e1:c8:0e:4e:7e:43:25:93:09:db:eb:c4:
53:f3:05:bc:4a:00:a8:b6:0c:a4:5c:10:f8:94:b2:
1f:77:e3:bc:c2:00:c4:3b:d0:58:94:bf:bd:35:e8:
25:d0:28:88:81:e2:e1:05:39:56:70:14:d0:f0:07:
bb:16:dd:19:fd:54:78:c5:7d:45:70:36:65:64:bb:
af:1e:b6:10:e3:a2:ef:a4:c0:5d:f4:49:3a:03:c5:
97:c1:c5:1c:20:e8:90:95:50:2b:cd:37:b7:3a:86:
7e:3f:f3:d4:6a:25:18:7f:ff:3b:ef:59:d4:ef:2a:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:68:9F:83:26:0D:4A:94:C9:CC:38:D6:62:C2:94:95:55:32:06
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/2JBon4MmDUqUycw41mLClJVVMgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/22
185.254.52.0/24
193.17.4.0/22
193.111.76.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:08:f0:cd:17:8c:8c:39:d0:38:f0:c8:8e:24:89:d0:59:5a:
9b:74:f8:cf:ab:04:dd:5e:29:f8:81:63:25:9d:6c:e8:79:24:
d8:96:2d:e8:b6:0b:7b:31:00:69:01:bb:de:72:e1:a4:ff:3c:
9d:51:46:57:3f:c6:03:83:83:e2:ab:e6:40:2e:e7:a6:5b:fa:
02:b6:fa:74:7b:c4:3e:67:89:86:f7:6e:cc:15:92:9f:34:54:
2f:2e:87:48:18:ac:4a:74:cf:4d:f6:eb:66:4d:87:ef:7a:42:
21:0e:97:23:b1:48:96:68:48:7c:ef:e4:8b:52:9a:5f:14:67:
7b:c8:50:ad:55:10:a1:cc:17:f8:47:7d:58:f5:b6:10:57:bf:
84:fe:f1:44:50:d2:55:d5:73:81:df:68:e6:40:46:33:8c:f9:
cd:a4:28:06:40:69:8e:61:19:29:4c:42:0b:21:7c:77:00:9f:
e7:19:20:75:a2:b5:d5:1a:4b:f6:c5:b9:8d:6a:93:f2:1c:4f:
e0:cd:83:70:aa:e4:71:41:c8:0f:53:fe:b9:72:ba:cd:45:38:
35:5c:f9:18:21:c9:2e:4a:da:ff:2f:a2:3b:68:8c:80:74:8a:
2f:2a:ed:6f:40:63:dd:1b:8d:17:3a:5c:85:85:8a:c5:28:ca:
bf:7d:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org