Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/chvMu7ywD5MVqNkDvoWZASaauDE.roa
File: chvMu7ywD5MVqNkDvoWZASaauDE.roa (raw, json)
Hash identifier: EwROPcjl4CPG1s8yM8UwmcbMj9vWSQsuKSxAzzAD7UA=
Subject key identifier: 72:1B:CC:BB:BC:B0:0F:93:15:A8:D9:03:BE:85:99:01:26:9A:B8:31
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01823A1F451D95FCF862B309AB2BDF781E56
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/chvMu7ywD5MVqNkDvoWZASaauDE.roa
Signing time: Tue 26 Jul 2022 10:48:23 +0000
ROA not before: Tue 26 Jul 2022 10:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 82.118.25.0/24 maxlen: 24
92.114.4.0/24 maxlen: 24
45.132.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:1f:45:1d:95:fc:f8:62:b3:09:ab:2b:df:78:1e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 26 10:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=721bccbbbcb00f9315a8d903be859901269ab831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:ee:bc:ac:22:d5:60:06:d2:b4:71:38:2b:
1b:47:3a:83:57:28:04:a9:1d:49:a9:f3:51:43:b8:
e2:f5:b6:3f:4d:94:79:f7:b2:4d:38:fb:e0:34:06:
fc:e1:9a:ec:88:42:53:e6:2b:36:e8:02:e3:bf:17:
79:15:da:03:e9:fe:2a:63:28:31:9b:4a:d0:05:b0:
5e:3c:3e:0b:91:62:1f:f3:2c:ae:a8:d4:09:75:9b:
ad:56:4b:9d:57:30:eb:e1:96:5e:75:39:30:39:b4:
ea:26:01:9a:29:39:85:ab:f4:b1:eb:81:58:27:c0:
3c:fb:83:51:12:0f:8e:e0:2b:73:e8:ac:3a:7f:77:
ed:e7:36:8d:1e:23:3a:7d:a7:d0:23:ef:ce:c9:94:
09:97:15:30:10:97:c3:51:b9:91:43:23:44:7d:02:
a9:d1:b2:1e:ac:7a:3c:bb:6f:c4:eb:8c:a4:9b:88:
69:94:e9:37:e1:58:96:cf:a0:e8:8c:a7:22:6a:61:
fd:a1:c7:de:66:cf:47:0a:6f:c4:19:c0:9a:06:86:
37:0a:65:4a:e0:a3:ee:32:c4:74:2a:29:ea:d1:fa:
ef:d1:34:eb:55:76:72:cf:9a:87:19:93:a6:2b:92:
67:b8:f4:2a:1c:d2:f5:1a:b3:c7:5a:8d:44:60:1c:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1B:CC:BB:BC:B0:0F:93:15:A8:D9:03:BE:85:99:01:26:9A:B8:31
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/chvMu7ywD5MVqNkDvoWZASaauDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.97.0/24
82.118.25.0/24
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
00:82:aa:ca:23:0f:d6:28:ba:94:bc:ed:46:15:fb:0a:79:92:
fe:06:b3:78:77:f8:11:8f:1c:41:71:e8:d3:84:1a:48:48:f3:
69:9c:09:64:d4:9e:47:d1:1c:90:4d:75:8e:c6:8e:1d:b6:30:
74:18:98:d2:f4:f5:1a:4b:b9:7c:e2:79:9a:31:e9:7e:7b:e1:
65:09:69:da:f1:98:40:14:23:ae:73:bd:f9:73:cb:7d:46:e5:
7e:47:5f:b0:ed:3f:19:bd:af:d5:cf:17:58:9b:f2:5b:e7:cc:
b2:af:5c:5c:a9:3a:e4:c7:d1:d7:66:5a:ca:9a:e4:df:93:8d:
64:08:37:9f:e1:a5:18:68:bd:a2:f6:0b:f4:ce:95:6d:13:13:
59:45:7f:e3:8b:1a:4b:53:0e:bb:6a:2e:d7:81:e0:73:83:c6:
4c:5e:7e:dd:68:e1:12:fd:96:bd:6c:f5:db:bf:6e:f8:81:71:
95:c2:95:3d:10:4d:63:de:d5:4e:c8:f9:cb:90:07:ed:7f:ea:
ad:d5:b4:41:34:00:9d:77:5e:49:22:68:69:52:47:a8:bc:95:
14:f2:46:e4:c0:4f:07:35:7d:8a:4e:2d:b3:75:3f:46:d2:fb:
7c:ad:22:51:48:33:2e:67:2f:f6:41:ce:6c:37:1e:54:69:ef:
83:10:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org