Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/R_4oaeP9vCE8_9Odee8w4tIQ15Y.roa
File: R_4oaeP9vCE8_9Odee8w4tIQ15Y.roa (raw, json)
Hash identifier: isaNxJEhLiR2jqKcvi1nECFKV5sh6/N5xi82bTLmABM=
Subject key identifier: 47:FE:28:69:E3:FD:BC:21:3C:FF:D3:9D:79:EF:30:E2:D2:10:D7:96
Certificate issuer: /CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Certificate serial: 01838D547EB23461FDBFAE3B732C2C415AF0
Authority key identifier: D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/R_4oaeP9vCE8_9Odee8w4tIQ15Y.roa
Signing time: Fri 30 Sep 2022 07:37:48 +0000
ROA not before: Fri 30 Sep 2022 07:37:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 91.223.3.0/24 maxlen: 24
193.34.212.0/22 maxlen: 22
195.3.222.0/24 maxlen: 24
195.3.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:54:7e:b2:34:61:fd:bf:ae:3b:73:2c:2c:41:5a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Validity
Not Before: Sep 30 07:37:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47fe2869e3fdbc213cffd39d79ef30e2d210d796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:ea:a5:10:fa:15:3a:d0:fd:4f:fb:cd:4d:
c6:87:e9:ca:39:b1:03:9a:fe:d6:40:75:09:b8:06:
22:a1:0c:4b:dc:7a:23:1d:24:46:86:66:5d:6a:94:
80:a8:24:39:8e:9a:ba:aa:74:58:20:48:ce:a1:21:
3b:fa:b9:24:47:39:5e:54:9d:76:1e:3b:63:a0:7b:
09:6b:85:b7:cb:01:70:13:e7:27:12:43:2d:f7:46:
62:99:2e:bf:58:36:c1:99:ec:c2:9b:09:63:ca:2c:
e4:10:0a:92:93:c7:07:92:f5:3c:c4:d1:f1:3a:29:
b8:7e:6a:25:af:a5:74:ba:20:0a:49:dd:14:be:6a:
68:d0:4d:f9:80:ab:86:93:c5:75:24:6e:b0:6f:2a:
53:1c:e3:b2:72:85:e3:70:47:76:04:36:0d:fd:09:
72:dc:76:b7:54:55:f4:9b:ac:c5:da:bc:8d:e5:b2:
46:ef:f3:0f:64:ee:1d:af:75:d7:14:a5:7a:c4:75:
e6:7b:45:37:d4:30:ed:71:83:52:8e:1c:1c:d0:e3:
9e:c8:ce:b0:2f:f2:08:cd:2e:8a:04:a7:df:a6:82:
bf:aa:37:e9:e7:c5:05:d7:8c:f9:58:e9:94:f2:f6:
12:80:66:a0:4b:88:14:c1:dc:15:52:db:39:55:37:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:28:69:E3:FD:BC:21:3C:FF:D3:9D:79:EF:30:E2:D2:10:D7:96
X509v3 Authority Key Identifier:
keyid:D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/R_4oaeP9vCE8_9Odee8w4tIQ15Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.3.0/24
193.34.212.0/22
195.3.220.0/22
Signature Algorithm: sha256WithRSAEncryption
06:b4:e3:fb:d0:6d:16:51:c1:e1:29:6b:9b:65:f1:4f:05:02:
73:55:ca:0d:ea:2b:7f:ea:e8:1f:56:80:90:c1:a9:98:31:ea:
46:9c:80:6b:f6:a9:57:71:09:5a:fc:37:f6:20:b2:5e:90:32:
37:e6:ef:3f:db:db:39:71:dc:35:21:07:68:c3:33:fb:53:86:
9a:c4:87:14:d2:59:7d:49:7d:1b:f6:61:89:c3:1a:94:1b:8b:
b7:30:c8:65:36:ce:a5:69:b3:e2:29:f2:e7:80:c0:01:85:07:
7d:21:a2:ac:fb:d4:39:10:7b:70:0b:8f:4d:83:76:2e:72:ae:
72:cd:bf:54:63:e1:3d:ba:8d:6f:8e:7c:9a:cc:67:70:bf:0a:
0d:27:cc:29:21:d8:99:b3:c6:bc:23:08:ad:d6:78:44:c2:d8:
33:f5:af:27:c7:b7:a6:24:94:98:e3:9f:42:f4:b0:5d:59:5c:
8c:08:47:0d:43:2e:5b:72:5e:88:7d:5d:3a:a2:a0:94:93:82:
f9:20:a9:3d:21:aa:38:76:ff:dd:68:d3:c1:0a:13:71:55:97:
23:48:1d:13:31:b5:c6:50:1a:42:4d:c8:58:fc:c4:90:1b:e6:
60:91:70:11:db:87:9c:67:25:e4:9f:96:47:af:4b:be:74:d3:
31:fd:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:10 2024 by rpki-client on console-fra.rpki-client.org