Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/f643zoTYVcJGam2IHocwK-W0qes.roa
File: f643zoTYVcJGam2IHocwK-W0qes.roa (raw, json)
Hash identifier: 7s99ACgbeP5lIGKOXRyywVckm7gbRKEqqLS20Su86zw=
Subject key identifier: 7F:AE:37:CE:84:D8:55:C2:46:6A:6D:88:1E:87:30:2B:E5:B4:A9:EB
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 039807B3
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/f643zoTYVcJGam2IHocwK-W0qes.roa
Signing time: Mon 02 May 2022 12:00:17 +0000
ROA not before: Mon 02 May 2022 12:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398464
IP address blocks: 193.142.36.0/22 maxlen: 24
91.132.125.0/24 maxlen: 24
91.132.124.0/24 maxlen: 24
212.87.218.0/24 maxlen: 24
212.87.216.0/24 maxlen: 24
212.87.219.0/24 maxlen: 24
93.177.95.0/24 maxlen: 24
93.177.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60295091 (0x39807b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: May 2 12:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fae37ce84d855c2466a6d881e87302be5b4a9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:1f:0e:64:4f:4b:34:31:2b:0e:b6:04:be:
7a:08:a5:a3:c2:37:fe:43:a6:ce:82:69:95:98:f7:
63:1b:6f:d2:b4:23:20:95:92:46:bc:18:e9:97:04:
0f:9b:bf:62:96:81:df:07:55:55:89:31:6c:4a:b1:
e0:18:16:0b:f9:35:50:5c:74:4c:23:18:8d:f4:c4:
be:b9:79:29:34:c2:8e:03:e0:be:d3:46:bb:71:ef:
65:cf:a3:76:71:c1:85:7f:ce:57:5d:80:08:c0:95:
29:e7:64:ce:58:41:9c:15:6b:35:c1:5e:e3:c8:13:
b4:84:c5:7c:6d:8c:14:e0:3a:28:ba:dc:9c:cd:a5:
32:ff:2f:b5:c0:f0:c0:f3:7f:74:07:aa:3e:9f:ae:
35:fd:15:c6:89:60:29:c1:98:c5:6c:db:46:70:5a:
1e:f7:de:00:25:da:ea:d5:a2:4c:0a:50:27:7d:91:
ec:f1:c4:94:4c:17:c0:97:1a:57:87:65:60:d9:2a:
e0:8e:eb:d8:d7:c1:23:3e:72:62:cb:cd:66:b8:5d:
a5:f3:c9:d3:01:5b:84:51:cb:38:62:bc:22:98:c5:
f6:d2:27:40:97:fa:9e:e4:1b:b3:86:70:ab:d8:70:
5d:24:9f:7c:9e:4e:be:64:51:8c:55:f4:59:df:ec:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:37:CE:84:D8:55:C2:46:6A:6D:88:1E:87:30:2B:E5:B4:A9:EB
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/f643zoTYVcJGam2IHocwK-W0qes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:18:38:a8:85:57:75:cc:c4:2b:c3:35:30:a7:6a:cf:54:7c:
c8:29:90:ed:38:46:fb:15:db:f1:58:66:33:82:36:aa:b5:2b:
f3:5f:58:22:af:b4:7a:8c:a6:3e:8d:e2:6e:c9:bc:ef:88:d0:
94:70:c4:75:f5:6e:30:ae:51:66:4d:58:eb:97:a8:c8:a7:9c:
15:e6:10:7e:0a:e5:09:17:25:61:34:74:39:22:d1:af:bf:19:
aa:b4:58:3e:69:e2:57:11:0a:cc:3d:5d:d8:6c:31:2b:12:3f:
75:cc:8d:af:d9:31:5f:9a:a5:38:0d:89:3f:51:a3:05:16:8c:
31:1d:c8:87:73:ac:dd:67:90:4a:71:62:35:5f:12:2a:20:99:
58:76:89:a1:42:52:40:b3:05:8f:bc:97:5e:31:ff:77:99:54:
a1:8d:04:d3:ef:c3:f7:e2:85:69:bf:1c:30:bc:d0:21:53:f6:
bf:f8:8f:ab:c0:2c:e7:87:43:03:f9:c7:8e:1b:6e:37:e5:d6:
d1:84:34:c2:48:db:1a:01:00:fd:60:05:1f:a5:53:04:76:6c:
61:ab:6b:b8:f4:35:59:f1:6e:e8:e2:61:0f:a4:03:5e:94:c1:
1c:02:a1:24:8b:e9:9f:c5:b4:d8:f3:97:4a:11:c1:14:f1:19:
b6:05:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:13 2023 by rpki-client on console-ams.rpki-client.org