Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/ocn7bukAypyPjfWMRVg9vSP19Go.roa
File: ocn7bukAypyPjfWMRVg9vSP19Go.roa (raw, json)
Hash identifier: xo5MTytmqGsnRb4jGpI1N8VgAI/0DyTlAvXkvxoOr58=
Subject key identifier: A1:C9:FB:6E:E9:00:CA:9C:8F:8D:F5:8C:45:58:3D:BD:23:F5:F4:6A
Certificate issuer: /CN=ed3141220968d0ae44045e6836999928eca864b8
Certificate serial: 018572D5B56E7500B77AE6C1326F87F4ED1F
Authority key identifier: ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/ocn7bukAypyPjfWMRVg9vSP19Go.roa
Signing time: Mon 02 Jan 2023 14:14:46 +0000
ROA not before: Mon 02 Jan 2023 14:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 176.52.224.0/20 maxlen: 24
130.0.96.0/19 maxlen: 24
95.157.128.0/18 maxlen: 24
185.147.232.0/22 maxlen: 24
2a00:9380::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:b5:6e:75:00:b7:7a:e6:c1:32:6f:87:f4:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3141220968d0ae44045e6836999928eca864b8
Validity
Not Before: Jan 2 14:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1c9fb6ee900ca9c8f8df58c45583dbd23f5f46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:5f:b5:1e:46:9e:fc:ca:53:7c:57:a0:21:
fa:af:10:7d:ea:89:bc:73:e8:1e:63:a6:58:10:51:
a4:73:c1:5e:a7:07:91:de:ea:c5:a4:16:1b:18:2d:
6a:ad:5f:72:9d:19:eb:e1:d5:db:e6:4f:c9:a0:55:
b2:a6:70:2d:ea:43:de:bb:2d:3a:55:31:92:b7:69:
7d:28:60:1f:a8:db:70:cf:00:1a:f3:ba:4b:b4:67:
c9:10:cb:be:1a:01:5a:87:09:68:7a:ab:2a:14:73:
5c:d0:45:bb:ce:ae:ec:3c:82:cb:58:64:bd:a8:5c:
5a:59:e4:3c:0f:ae:33:bb:25:30:47:65:86:9f:0c:
42:b7:09:27:58:01:2b:16:0d:09:80:e9:c3:51:17:
ab:92:c2:8d:07:08:45:10:55:79:c7:73:09:97:89:
38:8c:f1:11:3a:08:f5:b3:48:fe:d4:f1:12:88:0c:
71:44:0f:af:ce:c6:ee:af:0c:f3:2e:90:c9:f9:7f:
24:92:12:8b:7b:45:9d:cb:ea:a4:51:88:86:c6:54:
40:c0:cf:6d:a5:5f:0e:8a:7e:f5:88:82:05:ed:60:
a4:d9:98:d3:8a:b0:e7:bd:4a:24:7f:75:76:fa:58:
03:4a:cc:a4:d4:8b:d1:bb:56:46:f3:ce:81:7f:9e:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C9:FB:6E:E9:00:CA:9C:8F:8D:F5:8C:45:58:3D:BD:23:F5:F4:6A
X509v3 Authority Key Identifier:
keyid:ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/ocn7bukAypyPjfWMRVg9vSP19Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.128.0/18
130.0.96.0/19
176.52.224.0/20
185.147.232.0/22
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
12:73:84:07:a8:4e:39:4a:d3:28:06:66:60:8c:92:07:bd:f2:
10:67:31:52:71:b0:59:f3:f2:2c:5f:71:1a:b5:4f:3d:08:a8:
49:b9:cd:73:46:e4:43:e7:dd:f4:38:00:1c:27:3f:a9:59:d6:
15:76:fd:e8:f2:5a:19:3c:6e:a6:4a:8e:22:84:08:ca:f8:97:
60:4a:26:42:1d:0e:5f:c6:b5:99:f6:81:26:0c:2d:79:10:31:
95:fe:4d:29:09:b1:36:00:a5:55:38:91:30:b8:56:ae:d5:e6:
73:94:d6:9a:05:49:03:cb:c1:d6:ea:d1:07:7c:e9:9e:38:c1:
fa:76:6b:15:fc:c1:25:0d:c5:46:31:5a:8a:ac:30:85:ae:95:
90:c7:c1:65:81:61:20:a0:2e:05:1b:50:68:87:3b:b8:6a:d8:
92:cd:55:b1:ba:f9:2c:b9:67:92:d1:22:2e:3e:bb:eb:00:e2:
8a:c4:8b:27:d4:22:db:23:23:ec:ed:c2:9b:92:8f:3f:92:af:
9c:4f:91:52:a8:47:5f:71:ce:6d:73:f4:1c:21:74:92:28:05:
54:b5:41:40:4e:57:50:a9:30:fa:b9:16:7d:d9:a7:dc:d8:70:
63:05:1c:88:6d:cf:c3:00:25:9e:5c:3a:cd:57:14:08:e1:ef:
e6:48:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 09:44:01 2023 by rpki-client on console-fra.rpki-client.org