Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/lP4YVhezNpgT5QzWvR634xKf-Qc.roa
File: lP4YVhezNpgT5QzWvR634xKf-Qc.roa (raw, json)
Hash identifier: Rv0GnBClGQkG4adHMWQvRGPr1Rlkt0P0ARZ1q3vVKyk=
Subject key identifier: 94:FE:18:56:17:B3:36:98:13:E5:0C:D6:BD:1E:B7:E3:12:9F:F9:07
Certificate issuer: /CN=2766f8233c9049d20c15d9eb46c9bb797617ddb7
Certificate serial: 0886034E
Authority key identifier: 27:66:F8:23:3C:90:49:D2:0C:15:D9:EB:46:C9:BB:79:76:17:DD:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2b4IzyQSdIMFdnrRsm7eXYX3bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/lP4YVhezNpgT5QzWvR634xKf-Qc.roa
Signing time: Sat 01 Jan 2022 12:59:54 +0000
ROA not before: Sat 01 Jan 2022 12:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 92.114.83.0/24 maxlen: 24
185.128.192.0/22 maxlen: 22
77.81.167.0/24 maxlen: 24
92.114.36.0/24 maxlen: 24
92.114.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143000398 (0x886034e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2766f8233c9049d20c15d9eb46c9bb797617ddb7
Validity
Not Before: Jan 1 12:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94fe185617b3369813e50cd6bd1eb7e3129ff907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:c3:5e:4e:03:51:b5:d8:e4:86:ef:09:02:
8a:1b:df:cc:91:ab:30:89:6b:c7:61:30:ea:07:be:
49:c2:51:ce:cd:e7:32:7e:de:56:6a:e5:61:8f:14:
51:54:83:e1:b4:f4:6c:a0:be:85:9a:d0:46:de:c7:
33:69:5c:ec:31:c2:73:8a:31:d2:0a:e3:3d:55:e0:
31:c1:2c:e7:16:b6:5b:f2:c7:21:68:59:47:06:a8:
6f:39:e8:82:5a:f4:64:f8:44:1e:49:7a:38:ca:e3:
98:f0:2a:84:29:fc:8b:7c:d3:fc:b1:1d:b4:cc:31:
7f:29:c7:c5:f6:1c:b0:2f:62:98:74:e6:70:2b:d6:
7f:bd:90:7a:05:3c:d2:f9:2d:8a:fb:f8:24:7a:a2:
5d:3e:16:61:39:fc:31:32:16:17:1d:e7:a4:77:8a:
82:45:70:18:8d:e1:ad:ec:28:ce:3e:d1:fc:fb:1f:
3b:53:5d:d8:de:91:f5:4f:d6:07:36:a3:91:00:d9:
d2:55:d7:9d:c2:a4:f3:ad:56:77:02:4a:ad:5b:85:
ef:49:8b:a1:a7:5a:ef:41:20:78:3c:89:c8:62:6c:
9f:69:49:16:6e:53:8d:67:61:f2:6d:58:e1:9f:fb:
98:58:b4:36:5e:41:e1:54:6e:0c:97:8d:72:80:e1:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:18:56:17:B3:36:98:13:E5:0C:D6:BD:1E:B7:E3:12:9F:F9:07
X509v3 Authority Key Identifier:
keyid:27:66:F8:23:3C:90:49:D2:0C:15:D9:EB:46:C9:BB:79:76:17:DD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2b4IzyQSdIMFdnrRsm7eXYX3bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/lP4YVhezNpgT5QzWvR634xKf-Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/J2b4IzyQSdIMFdnrRsm7eXYX3bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.167.0/24
92.114.36.0/24
92.114.53.0/24
92.114.83.0/24
185.128.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:2e:db:7c:88:cc:fb:e9:61:57:2e:16:ac:51:be:10:22:db:
bd:4f:9f:4b:68:fd:f0:e2:47:84:d9:d2:f3:9a:69:5f:15:db:
6b:83:39:86:89:3d:02:5f:19:9c:3d:d0:f1:4f:0e:fb:bd:cc:
9b:23:0f:3f:f6:b3:cd:39:37:a2:4d:c0:21:e5:01:ea:76:f2:
1e:4d:0e:6c:50:fd:e4:d8:40:b9:b8:8a:80:c7:0d:2e:64:18:
8c:5c:ba:71:29:5b:ac:ff:fa:e9:76:d5:50:30:a7:b0:3f:61:
98:dc:ff:d5:63:ac:41:34:31:96:78:b5:73:af:9d:53:e7:4f:
a2:ba:36:af:ca:43:09:04:28:b5:31:a3:13:51:e2:d4:4f:1b:
51:24:a4:5c:fe:0c:6c:54:15:a7:74:ff:70:8e:55:f1:8f:2a:
7f:69:6d:13:37:02:2e:4f:57:e1:29:23:62:0f:bc:3e:42:e2:
e0:ff:bf:b5:43:b0:49:fb:4d:f3:5b:2f:87:09:d6:06:a2:0c:
bf:86:d1:1c:1e:b2:c5:cd:2c:d1:ec:61:e2:b5:41:07:9b:87:
49:b2:9c:87:40:22:40:42:55:7d:58:3b:cd:46:49:6a:05:82:
87:72:fe:4d:bd:28:15:af:e8:86:55:8d:a2:7a:bd:dc:c2:72:
b7:43:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:34 2024 by rpki-client on console-ams.rpki-client.org