Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m1nDfzD480kvuPFROAq6YBZGgIM.roa
File: m1nDfzD480kvuPFROAq6YBZGgIM.roa (raw, json)
Hash identifier: jY5Zt7YC6WGnrMNzdeaUCaoqMTmgpaPMEs5wg0nV1F8=
Subject key identifier: 9B:59:C3:7F:30:F8:F3:49:2F:B8:F1:51:38:0A:BA:60:16:46:80:83
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0319332F
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m1nDfzD480kvuPFROAq6YBZGgIM.roa
Signing time: Sat 01 Jan 2022 07:53:58 +0000
ROA not before: Sat 01 Jan 2022 07:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 194.147.4.0/24 maxlen: 24
194.147.6.0/24 maxlen: 24
194.147.7.0/24 maxlen: 24
194.147.5.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
193.151.183.0/24 maxlen: 24
193.151.180.0/24 maxlen: 24
193.151.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51983151 (0x319332f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jan 1 07:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b59c37f30f8f3492fb8f151380aba6016468083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:a2:3b:f1:f3:a5:c3:bb:4f:2e:f8:e3:d3:
7b:b1:cc:8b:53:df:67:bb:98:cf:36:14:41:58:bc:
ee:90:fa:86:4b:b9:9d:69:d3:f1:f2:aa:46:43:ba:
92:a6:c6:64:56:1c:e2:d9:87:83:6f:76:d8:a5:cc:
76:33:90:0f:a9:9f:8b:5f:e4:6b:3b:86:05:6d:8d:
24:5e:05:af:ff:ba:09:b0:81:a7:2b:76:43:5e:0d:
9e:26:11:07:5e:3f:c4:43:eb:63:c4:0e:ac:00:30:
f1:a4:ed:1b:54:ef:d6:1f:26:55:6a:bc:19:15:af:
ed:59:64:1e:ca:23:c7:71:d5:e5:05:a1:be:66:16:
80:a9:2e:b8:b8:a1:ab:31:3c:d3:e7:d6:d9:5e:df:
9f:33:5a:4b:f5:09:69:18:0b:4c:c4:d0:a0:8d:8f:
b9:f9:61:d1:22:c6:79:a6:e2:cb:c3:99:a4:91:6e:
07:e4:a2:d1:34:9e:6b:59:e0:aa:1d:84:fc:26:2f:
d7:d9:3d:28:3e:a9:af:d3:86:6a:db:18:c9:95:08:
dd:e6:41:cc:e8:73:d9:4a:79:06:99:6a:fc:1a:28:
60:74:12:6a:ad:7f:cb:1a:e2:b6:1f:d1:c8:ee:ea:
e2:6a:17:a2:3d:aa:02:6d:00:74:9e:12:24:ef:db:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:C3:7F:30:F8:F3:49:2F:B8:F1:51:38:0A:BA:60:16:46:80:83
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m1nDfzD480kvuPFROAq6YBZGgIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.180.0/22
194.147.4.0/22
Signature Algorithm: sha256WithRSAEncryption
49:5a:98:5f:f7:29:0a:0c:87:40:90:08:ee:62:17:8f:e6:2e:
88:8d:50:30:2e:23:44:9c:77:05:30:91:eb:36:e8:ee:29:15:
fb:5c:f0:48:e1:72:4d:7d:66:3c:19:50:49:ce:26:ad:8f:57:
b9:76:bd:85:2a:e2:95:8f:dd:87:12:6b:75:ed:5a:58:77:94:
37:b0:1a:6c:df:cd:2a:66:ff:1c:37:74:a2:0b:54:d2:33:cc:
8f:cb:ce:21:69:68:54:d8:2b:4c:ab:df:3f:39:bf:e8:76:bc:
2a:24:89:71:1a:c6:31:69:f7:9f:d4:60:71:56:ed:d1:31:d7:
78:dd:55:02:9f:5c:4d:34:a7:79:d7:f4:28:1d:a4:a8:8c:df:
85:ac:46:1b:22:78:7c:a5:26:ee:81:58:5b:9b:3a:98:df:f6:
ed:1e:db:16:0a:fe:c2:12:e1:3a:cd:87:ce:0f:c7:16:b1:b4:
a7:7e:14:13:35:83:ef:ac:a6:5d:76:1b:10:d1:7e:e3:9c:69:
66:94:60:31:9a:b3:10:5f:2d:cf:f3:0e:d9:5b:d4:dd:da:31:
a3:de:74:7f:67:ed:26:bf:c2:95:0f:67:40:50:e1:6e:37:0d:
81:ff:4b:85:23:75:2a:51:67:cb:5c:4d:ca:1c:ae:e9:ce:c9:
db:bc:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:59 2024 by rpki-client on console-fra.rpki-client.org