Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/Maybvy2ff0wfN3Oyuf4yNWXFxmI.roa
File: Maybvy2ff0wfN3Oyuf4yNWXFxmI.roa (raw, json)
Hash identifier: zCh/W5jfyAwTKw2MyalaYKabDWusI58CONy9OQJF/nA=
Subject key identifier: 31:AC:9B:BF:2D:9F:7F:4C:1F:37:73:B2:B9:FE:32:35:65:C5:C6:62
Certificate issuer: /CN=bf174a5833bde6aa7824c34099762d00978857ff
Certificate serial: 35832E71
Authority key identifier: BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/Maybvy2ff0wfN3Oyuf4yNWXFxmI.roa
Signing time: Sat 01 Jan 2022 11:56:08 +0000
ROA not before: Sat 01 Jan 2022 11:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29139
IP address blocks: 193.163.254.0/24 maxlen: 24
193.163.255.0/24 maxlen: 24
193.163.243.0/24 maxlen: 24
193.163.244.0/24 maxlen: 24
193.163.245.0/24 maxlen: 24
193.163.246.0/24 maxlen: 24
193.163.241.0/24 maxlen: 24
193.163.242.0/24 maxlen: 24
193.163.247.0/24 maxlen: 24
193.163.248.0/24 maxlen: 24
193.163.249.0/24 maxlen: 24
193.163.250.0/24 maxlen: 24
193.163.251.0/24 maxlen: 24
193.163.252.0/24 maxlen: 24
193.163.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897789553 (0x35832e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf174a5833bde6aa7824c34099762d00978857ff
Validity
Not Before: Jan 1 11:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31ac9bbf2d9f7f4c1f3773b2b9fe323565c5c662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:00:4e:be:b3:89:aa:34:40:14:ed:a2:be:
b2:f2:15:57:69:ae:2a:4d:87:e8:c7:c9:90:48:e1:
ec:87:57:ca:27:58:41:c0:bd:ad:52:b1:43:cd:85:
a2:99:7c:bf:27:d0:33:a1:00:5a:5b:0f:c4:75:3e:
cb:d4:d3:9b:d9:90:d9:7d:b7:79:69:fd:af:7c:25:
e1:5c:45:01:37:0c:71:44:64:a9:e0:4c:a9:cc:79:
41:4f:6a:ff:68:09:9d:1b:fe:73:9d:25:ff:61:e3:
c5:28:81:76:8e:cf:64:bf:45:3a:b0:41:36:99:ce:
cf:10:ea:df:d0:1c:42:64:4b:7c:fe:9e:e1:4f:5d:
b2:bf:7a:80:19:81:12:e5:15:37:ce:b2:f6:2f:cd:
bc:b4:a7:14:9b:cb:79:6a:a3:9e:c3:b1:11:70:5b:
cc:99:a6:e7:97:2c:3d:d1:d9:a7:0e:b0:d5:09:01:
2b:17:b0:bf:d7:e4:57:ec:72:fb:a0:00:9d:b5:c7:
31:fc:0d:44:1a:e8:af:dd:bb:f2:0a:bf:ca:ca:bf:
24:68:6f:61:5a:35:7d:8d:06:cc:d4:f4:4a:0d:4c:
3e:63:22:d1:c4:c4:68:3b:2b:c8:ef:0e:f0:f8:be:
db:61:d5:1b:db:a9:18:49:14:05:03:fd:39:7a:be:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:9B:BF:2D:9F:7F:4C:1F:37:73:B2:B9:FE:32:35:65:C5:C6:62
X509v3 Authority Key Identifier:
keyid:BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/Maybvy2ff0wfN3Oyuf4yNWXFxmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/vxdKWDO95qp4JMNAmXYtAJeIV_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.241.0-193.163.255.255
Signature Algorithm: sha256WithRSAEncryption
89:e1:67:12:b1:14:5e:99:1d:ee:12:d9:a7:e4:60:52:bc:44:
f7:31:ce:84:36:40:25:c7:80:52:e6:ed:91:8f:17:65:c1:1e:
1f:70:37:be:83:54:d3:b0:90:27:50:b9:11:e8:c3:e7:0e:ed:
06:b0:b2:bf:3b:49:bf:f3:96:24:5a:8d:1d:02:3e:66:0c:b4:
52:70:d9:b9:93:36:a9:d8:8a:f3:32:9d:09:25:e1:54:fc:52:
97:c2:f9:0e:a8:88:28:dc:b1:bc:54:3a:ba:32:05:25:84:1b:
2f:91:63:91:a1:d1:80:bc:be:4b:30:10:38:ed:c3:1a:de:1a:
fb:51:af:51:ed:3f:b3:6d:7c:15:0d:5c:5f:63:09:31:96:34:
6d:1d:a5:9a:0f:ae:38:e4:2c:32:27:e9:6c:61:4f:60:f0:ba:
ef:47:a5:2b:cb:52:21:90:62:c8:77:f5:42:ec:0c:2f:10:17:
0a:ff:b0:1c:99:13:06:81:14:fe:0d:74:6e:9e:54:43:3e:c5:
1f:c8:3e:9c:ba:ed:db:e2:9f:17:8c:8b:d5:9b:83:21:5b:3b:
dd:92:45:da:d8:ec:e5:47:70:60:3e:6c:39:eb:ae:05:38:e3:
61:bc:a3:9e:46:38:f0:e7:6e:b7:12:b7:46:3f:fb:0d:a8:7e:
42:0b:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:33 2024 by rpki-client on console-ams.rpki-client.org