Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/lO9skqNqBL8NJBXT-lPN9j2IvVw.roa
File: lO9skqNqBL8NJBXT-lPN9j2IvVw.roa (raw, json)
Hash identifier: 5SvO5Zn8hhES5AFJO6Yv0PO1C22A/hx/+1mnMwBvqhA=
Subject key identifier: 94:EF:6C:92:A3:6A:04:BF:0D:24:15:D3:FA:53:CD:F6:3D:88:BD:5C
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 03669CF0
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/lO9skqNqBL8NJBXT-lPN9j2IvVw.roa
Signing time: Fri 15 Apr 2022 15:20:36 +0000
ROA not before: Fri 15 Apr 2022 15:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 193.31.127.0/24 maxlen: 25
193.31.126.0/24 maxlen: 24
193.56.20.0/24 maxlen: 25
194.99.24.0/24 maxlen: 24
77.83.24.0/24 maxlen: 24
194.99.26.0/24 maxlen: 24
194.99.25.0/24 maxlen: 25
77.83.25.0/24 maxlen: 24
193.151.191.0/24 maxlen: 24
193.151.190.0/24 maxlen: 24
193.151.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57056496 (0x3669cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Apr 15 15:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94ef6c92a36a04bf0d2415d3fa53cdf63d88bd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:01:4a:e3:fe:65:59:8e:fd:17:b9:5b:fd:
54:69:e0:91:58:bf:b5:ad:4e:1e:4a:94:c7:ea:a3:
86:0d:25:0c:ed:26:ae:9e:4c:96:ad:b4:4d:49:3b:
e1:20:a5:97:89:45:34:69:df:b8:58:63:3b:db:a8:
2c:2b:af:74:b9:3c:72:b8:b7:4b:87:df:c6:be:99:
a6:72:b0:4e:2b:a2:cb:54:ab:0f:41:ea:3b:05:ae:
02:f8:c7:81:fa:15:29:40:ab:07:b5:97:64:af:08:
cb:f7:17:54:88:2f:e3:33:ca:50:5a:f5:dc:18:cc:
61:dd:c7:6f:5a:8f:43:86:1a:6f:f0:0d:44:c2:a9:
ab:21:61:53:6e:03:1b:3d:90:39:99:0a:12:38:0d:
6f:fb:06:52:9b:41:7d:aa:60:83:fd:ca:06:2a:59:
99:6c:7b:ff:6a:3c:37:76:4d:0c:97:ed:b2:fb:46:
7d:e6:6e:98:b1:c7:0e:79:93:6e:ba:45:03:36:38:
6a:26:d5:22:6a:6a:7b:dd:45:78:5d:03:e9:8b:a3:
1b:f2:63:99:e0:7e:4e:c5:a8:2a:6b:b1:fd:86:41:
23:08:98:d9:aa:25:09:a8:fa:e9:0c:6d:8e:4a:0e:
29:1b:fb:5c:b8:17:6b:45:4c:9b:93:57:55:e2:91:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:6C:92:A3:6A:04:BF:0D:24:15:D3:FA:53:CD:F6:3D:88:BD:5C
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/lO9skqNqBL8NJBXT-lPN9j2IvVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.24.0/23
193.31.126.0/23
193.56.20.0/24
193.151.189.0-193.151.191.255
194.99.24.0-194.99.26.255
Signature Algorithm: sha256WithRSAEncryption
cb:6e:c8:4b:6a:fe:d1:d7:c0:b9:34:f1:51:50:a1:19:a4:21:
3a:92:b0:23:1a:bf:e1:d3:26:85:3d:e3:47:ef:ff:10:63:80:
b6:a7:4d:a5:ed:73:cb:be:0a:7b:c4:f3:69:53:19:5e:fa:c8:
5f:bc:8f:f8:1c:e0:5e:04:08:77:d2:74:43:d7:32:e1:22:ad:
64:90:d2:60:80:89:d5:9c:5a:d3:0a:5d:82:2f:f1:73:bf:19:
88:b6:ba:08:5e:50:54:3d:b8:f1:80:51:3c:50:9e:36:d7:ac:
f8:e2:f8:7f:6f:50:9f:f1:d5:4d:fa:7a:c7:01:de:d2:d7:b4:
a4:32:5a:ac:41:e9:b7:a4:8a:e7:7d:c3:9f:fb:7b:f3:54:ce:
04:fd:5f:72:8d:b0:9c:98:b8:89:6a:a0:f7:86:ec:fe:00:96:
10:11:c8:cd:8d:8b:4f:7a:b1:b8:16:7a:a0:2e:ea:ab:70:c3:
3f:19:76:6d:9f:3c:f9:c4:e6:4f:e3:3b:d8:ad:51:84:83:73:
6d:7a:d7:ff:46:fb:43:ac:11:ac:7c:d9:3b:ab:86:c9:9d:3d:
df:2a:d3:e5:61:a3:cd:ac:dc:26:01:37:59:2d:48:dd:5b:03:
50:3f:54:61:0d:18:35:e2:e6:5d:52:40:f5:f4:35:e0:89:a7:
17:a4:5c:1f
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIEA2ac8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTc0NzQ4MWYyYzk4ZmJiNzBkY2E4ZDY1YzIzZGU0ZmNhMzc1ODNkMB4XDTIyMDQx
NTE1MjAzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTRlZjZjOTJhMzZh
MDRiZjBkMjQxNWQzZmE1M2NkZjYzZDg4YmQ1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ7VAUrj/mVZjv0XuVv9VGngkVi/ta1OHkqUx+qjhg0lDO0m
rp5Mlq20TUk74SCll4lFNGnfuFhjO9uoLCuvdLk8cri3S4ffxr6ZpnKwTiuiy1Sr
D0HqOwWuAvjHgfoVKUCrB7WXZK8Iy/cXVIgv4zPKUFr13BjMYd3Hb1qPQ4Yab/AN
RMKpqyFhU24DGz2QOZkKEjgNb/sGUptBfapgg/3KBipZmWx7/2o8N3ZNDJftsvtG
feZumLHHDnmTbrpFAzY4aibVImpqe91FeF0D6YujG/JjmeB+TsWoKmux/YZBIwiY
2aolCaj66QxtjkoOKRv7XLgXa0VMm5NXVeKRXpsCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBSU72ySo2oEvw0kFdP6U832PYi9XDAfBgNVHSMEGDAWgBSOdHSB8smPu3Dc
qNZcI95PyjdYPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2puUjBnZkxKajd0dzNLaldYQ1BlVDhvM1dEMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvNDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8x
L2xPOXNrcU5xQkw4TkpCWFQtbFBOOWoySXZWdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
NDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8xL2puUjBnZkxKajd0
dzNLaldYQ1BlVDhvM1dEMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwNAQCAAEwLgMEAU1TGAMEAcEffgMEAME4FDAMAwQA
wZe9AwQGwZeAMAwDBAPCYxgDBADCYxowDQYJKoZIhvcNAQELBQADggEBAMtuyEtq
/tHXwLk08VFQoRmkITqSsCMav+HTJoU940fv/xBjgLanTaXtc8u+CnvE82lTGV76
yF+8j/gc4F4ECHfSdEPXMuEirWSQ0mCAidWcWtMKXYIv8XO/GYi2ugheUFQ9uPGA
UTxQnjbXrPji+H9vUJ/x1U36escB3tLXtKQyWqxB6bekiud9w5/7e/NUzgT9X3KN
sJyYuIlqoPeG7P4AlhARyM2Ni096sbgWeqAu6qtwwz8Zdm2fPPnE5k/jO9itUYSD
c2161/9G+0OsEax82TurhsmdPd8q0+Vho82s3CYBN1ktSN1bA1A/VGENGDXi5l1S
QPX0NeCJpxekXB8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:00 2024 by rpki-client on console-fra.rpki-client.org