Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/B3pgdbsJgRWKUvu45jrM10b7I04.roa
File: B3pgdbsJgRWKUvu45jrM10b7I04.roa (raw, json)
Hash identifier: EYApQp+ZxhwZA/64t7cDVOYZ6rpHKgzShZdZqVtCmzQ=
Subject key identifier: 07:7A:60:75:BB:09:81:15:8A:52:FB:B8:E6:3A:CC:D7:46:FB:23:4E
Certificate issuer: /CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Certificate serial: 06BA9470
Authority key identifier: 74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/B3pgdbsJgRWKUvu45jrM10b7I04.roa
Signing time: Fri 17 Jun 2022 11:20:44 +0000
ROA not before: Fri 17 Jun 2022 11:20:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34907
IP address blocks: 193.134.253.0/24 maxlen: 24
193.135.15.0/24 maxlen: 24
193.135.24.0/24 maxlen: 24
2a07:9240::/29 maxlen: 29
2a07:1340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112890992 (0x6ba9470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c17c3f45fc59ee6675f10914ec3a9e68b7238f
Validity
Not Before: Jun 17 11:20:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=077a6075bb0981158a52fbb8e63accd746fb234e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:dc:b7:07:d0:95:53:99:d1:2a:2a:76:74:cb:
97:6b:c4:35:34:cd:1c:43:f5:c6:ad:1e:ab:94:bf:
2b:87:c4:93:fe:4e:8a:aa:ea:4b:23:8a:86:7c:49:
22:2f:6c:ab:2d:e7:68:de:58:a9:7a:ee:e5:24:7d:
98:88:2b:99:75:d6:53:02:c2:91:61:7f:9b:9b:00:
aa:e8:40:71:d6:b7:a6:65:22:63:85:39:4b:7a:f3:
1f:39:2c:4c:15:20:93:2b:0b:15:e8:cc:4e:51:e5:
cd:48:ab:82:96:b8:4b:e0:b1:8b:e0:7a:c1:40:5f:
f7:e6:13:54:8d:77:90:d5:c0:d5:04:ca:7b:6c:eb:
02:22:97:a7:c3:46:b4:11:65:76:ea:67:b0:d8:b5:
1d:a0:12:5a:bd:32:7c:8f:5c:c5:c8:28:54:4a:4f:
c8:96:a3:8d:10:a3:fa:32:5e:6e:5a:56:4b:da:9a:
5c:69:dc:e0:0a:5d:6a:28:2e:48:a1:90:ed:28:39:
38:6e:5f:c6:f8:c7:cb:13:fc:0c:fa:b7:59:00:f7:
d3:ba:28:6a:41:a5:4f:2a:10:85:7a:7a:36:93:fa:
4e:f3:83:bd:65:68:2a:73:95:71:61:96:51:6e:cf:
31:c3:96:29:ce:eb:d4:3f:7d:8b:9a:c2:80:19:2e:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:60:75:BB:09:81:15:8A:52:FB:B8:E6:3A:CC:D7:46:FB:23:4E
X509v3 Authority Key Identifier:
keyid:74:C1:7C:3F:45:FC:59:EE:66:75:F1:09:14:EC:3A:9E:68:B7:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMF8P0X8We5mdfEJFOw6nmi3I48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/B3pgdbsJgRWKUvu45jrM10b7I04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c2cfaf-b1ae-46d8-92a7-d0174a7138a4/1/dMF8P0X8We5mdfEJFOw6nmi3I48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.253.0/24
193.135.15.0/24
193.135.24.0/24
IPv6:
2a07:1340::/29
2a07:9240::/29
Signature Algorithm: sha256WithRSAEncryption
15:cf:c2:3d:01:d2:e3:5e:2c:92:1b:10:6f:61:9d:ab:41:af:
c7:f5:99:9c:d5:ab:b7:53:2c:9b:28:1f:b4:64:df:1d:13:fd:
ef:df:20:b3:cd:67:d1:3c:29:b8:aa:51:4e:c3:52:01:57:2f:
62:d5:74:ad:05:22:fd:62:e1:bc:bb:f9:db:23:28:84:7c:99:
3b:05:7e:33:8e:91:da:4c:25:4c:21:78:e7:ea:63:7b:47:de:
eb:46:28:9c:f7:4a:56:7d:51:2d:20:43:bf:22:3a:7a:a9:cd:
b2:63:0b:0a:13:20:66:a0:d3:5f:4a:eb:c8:d1:bb:8e:19:2a:
84:0d:9c:e5:82:ce:ed:a6:e4:f5:03:02:f3:46:24:61:16:a5:
ff:8d:fa:65:26:63:f1:f8:96:cb:af:4d:fe:69:f3:da:23:e5:
0d:d4:37:49:33:f4:d6:b1:e6:f1:1b:01:d5:cd:2c:1f:71:55:
8c:d4:5b:9b:80:aa:3d:a3:59:9d:7d:06:b5:dc:af:42:96:cd:
60:09:f6:e4:b4:a4:9e:1f:fa:00:7c:c2:3d:ea:e0:d7:4c:94:
b0:c7:ff:c1:4c:68:43:93:b0:8d:0f:14:21:2f:5a:1a:57:b4:
c5:7b:48:27:74:00:00:5c:9d:a6:db:98:8b:ac:4b:7d:a5:52:
35:22:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:26 2024 by rpki-client on console-fra.rpki-client.org