Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/uoOqcUXtg5EdG_BGpzV1XcmFbOo.roa
File: uoOqcUXtg5EdG_BGpzV1XcmFbOo.roa (raw, json)
Hash identifier: f9qoB1poF6+P52xnEnV3sQYw9TuTFVks2xv40TNBlXc=
Subject key identifier: BA:83:AA:71:45:ED:83:91:1D:1B:F0:46:A7:35:75:5D:C9:85:6C:EA
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 019049918F9D13F21EAA8DABDA57BA28FEAF
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/uoOqcUXtg5EdG_BGpzV1XcmFbOo.roa
Signing time: Mon 24 Jun 2024 09:26:34 +0000
ROA not before: Mon 24 Jun 2024 09:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 212.49.131.0/24 maxlen: 24
212.49.167.0/24 maxlen: 24
212.49.181.0/24 maxlen: 24
212.49.190.0/24 maxlen: 24
213.9.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:91:8f:9d:13:f2:1e:aa:8d:ab:da:57:ba:28:fe:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jun 24 09:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba83aa7145ed83911d1bf046a735755dc9856cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:73:19:81:ba:fb:5f:69:f8:71:24:6f:7a:
83:09:13:e7:75:7b:bc:0e:b8:a3:36:9b:b5:c5:0d:
95:7a:74:07:a2:17:c6:71:eb:22:e4:37:9b:16:df:
65:88:9b:e0:a8:93:be:64:29:d6:2b:a3:5f:2d:c7:
3c:54:2c:be:b1:b1:92:13:7a:66:0f:06:d2:85:c1:
5e:f3:25:05:5c:f3:44:97:a1:fb:36:36:b7:27:73:
22:ba:6a:42:25:89:b5:f2:89:bc:92:fc:ff:1a:d8:
d4:ff:8e:f3:90:f2:66:d5:c8:1e:bf:af:ff:7d:08:
39:fa:34:4a:ed:f5:a8:5d:80:3b:02:13:6e:16:a7:
50:37:70:8d:ca:ef:2d:03:88:48:51:c2:9c:14:3c:
9c:29:1a:6d:2a:f1:6b:bf:18:45:ae:d5:77:98:f6:
43:fb:b0:ca:2a:90:a3:ee:33:9a:d7:c2:62:72:e0:
67:1b:08:39:98:a5:52:99:3e:11:25:2b:df:09:01:
79:df:90:17:70:ef:62:f5:d7:f3:d4:a0:b7:33:f4:
90:e6:06:3a:07:fc:5d:30:d0:2d:73:34:41:bf:a5:
ba:4d:18:ab:82:7b:7c:cb:e6:20:30:ab:44:0c:69:
7e:9e:18:02:60:6a:60:80:dd:74:b3:c5:8a:f3:52:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:AA:71:45:ED:83:91:1D:1B:F0:46:A7:35:75:5D:C9:85:6C:EA
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/uoOqcUXtg5EdG_BGpzV1XcmFbOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.131.0/24
212.49.167.0/24
212.49.181.0/24
212.49.190.0/24
213.9.173.0/24
Signature Algorithm: sha256WithRSAEncryption
24:26:26:8d:10:32:c0:e2:21:e5:e5:d9:04:8b:75:29:e6:cb:
e1:9b:bb:7a:ff:8b:b2:a6:50:b7:81:10:1d:61:3e:7e:5a:b9:
a4:5f:6b:9e:27:2e:18:5e:da:52:96:8d:7a:7e:6b:b3:b1:30:
13:b8:77:49:7d:ae:bf:6b:ec:3b:54:9b:93:b8:b8:8c:4c:f6:
f0:6e:67:2c:26:92:7a:11:84:aa:01:28:df:19:13:4e:8f:a7:
cc:d3:3b:07:f4:80:ca:24:a5:91:5f:34:b1:6f:79:8b:40:75:
ad:2d:1c:d3:e6:00:cd:3a:c1:44:c7:8a:a6:df:87:ec:11:bd:
16:28:c9:32:5a:e5:eb:3c:f0:a4:da:89:22:2b:66:17:41:37:
bb:bf:c0:71:71:65:01:0b:af:ae:f8:75:ad:0c:1b:fe:a6:04:
3c:08:31:f7:a8:af:96:ff:3b:64:c4:39:26:65:04:81:be:11:
a6:54:d9:3a:dc:8c:fc:f4:04:44:3f:bb:76:a3:58:db:f9:89:
27:25:2e:c7:d3:07:d1:3e:33:94:c5:d9:02:77:2d:39:b6:cb:
ea:2e:e5:17:65:99:97:42:06:f5:b4:2b:cd:1b:42:21:d6:ea:
4e:5f:3e:5d:fd:45:0b:6e:14:15:3d:db:ac:93:97:3c:3e:4c:
67:b7:ed:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:26:14 2024 by rpki-client on console-fra.rpki-client.org