Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/RURD50LuijqiNBSHWEZbQw2imVc.roa
File: RURD50LuijqiNBSHWEZbQw2imVc.roa (raw, json)
Hash identifier: gDx/UkXg9Ik+mk/GbpXST7jN5k28nfPh+2q8RmVYF/0=
Subject key identifier: 45:44:43:E7:42:EE:8A:3A:A2:34:14:87:58:46:5B:43:0D:A2:99:57
Certificate issuer: /CN=d5f567eac67f6da0991cfd8c6e79efddd6d24f11
Certificate serial: 01C6772D
Authority key identifier: D5:F5:67:EA:C6:7F:6D:A0:99:1C:FD:8C:6E:79:EF:DD:D6:D2:4F:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/RURD50LuijqiNBSHWEZbQw2imVc.roa
Signing time: Sat 01 Jan 2022 04:04:03 +0000
ROA not before: Sat 01 Jan 2022 04:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202147
IP address blocks: 91.245.200.0/21 maxlen: 24
88.98.112.0/20 maxlen: 24
88.98.120.0/21 maxlen: 24
185.51.108.0/22 maxlen: 24
188.241.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29783853 (0x1c6772d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f567eac67f6da0991cfd8c6e79efddd6d24f11
Validity
Not Before: Jan 1 04:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=454443e742ee8a3aa234148758465b430da29957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:b6:2f:ba:a1:ef:be:51:e6:f4:07:36:09:
0a:e2:f4:55:db:d4:e9:ca:c4:53:c7:9e:0f:8c:05:
6c:8f:8f:4c:27:a2:1f:3a:6a:00:8e:f4:ad:a3:80:
4d:14:98:7a:f0:74:4b:f1:8c:db:de:fb:1c:09:a5:
55:9e:e4:7e:7f:c9:c9:54:ed:10:41:d1:6e:59:48:
34:fa:ae:bb:d2:b7:8e:9a:91:95:44:36:c2:81:1a:
8b:b2:d6:79:d0:33:77:b0:f0:1d:71:92:cd:ab:d5:
93:42:2a:67:54:39:75:f4:94:a8:33:fe:bc:5a:04:
3c:71:85:54:96:69:f4:1d:ee:e9:6c:bd:53:98:bf:
38:b9:cf:a6:b6:69:92:7b:5a:70:9c:8e:47:59:92:
f8:5b:25:4c:30:1b:e0:65:4c:7d:5a:21:6e:92:07:
32:e8:99:39:78:1a:b8:e8:a0:0b:72:b1:8e:4a:67:
93:43:4a:1c:43:1f:a5:ac:6b:1e:5e:24:c6:8c:50:
af:32:e6:d1:9c:82:9c:7c:78:e9:dd:2c:21:19:b8:
ba:70:ca:dd:7e:e1:57:3a:b7:23:60:2f:dd:fd:cb:
2c:83:97:6d:11:27:c1:20:95:94:8f:52:c4:2b:70:
fb:7d:84:25:ea:cf:fa:13:de:18:ad:ea:29:62:b6:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:43:E7:42:EE:8A:3A:A2:34:14:87:58:46:5B:43:0D:A2:99:57
X509v3 Authority Key Identifier:
keyid:D5:F5:67:EA:C6:7F:6D:A0:99:1C:FD:8C:6E:79:EF:DD:D6:D2:4F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/RURD50LuijqiNBSHWEZbQw2imVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.98.112.0/20
91.245.200.0/21
185.51.108.0/22
188.241.96.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:c7:ea:7b:c9:62:db:cb:c0:47:fb:8a:fa:08:e5:6f:09:1a:
a6:0d:01:67:49:94:78:c5:b3:1c:2f:2e:2f:cb:13:2f:40:ac:
57:24:ec:35:8c:2c:07:eb:1f:71:27:16:af:69:9a:ea:4f:ef:
c8:99:48:61:90:7f:f2:b1:d4:d0:f3:37:69:8a:2d:c5:21:c4:
9a:dd:ad:05:ba:0e:8a:a6:da:62:09:b8:01:57:d3:d0:71:29:
15:60:1b:3f:93:38:a7:98:ca:f9:44:17:c0:4e:59:58:30:3d:
9c:33:9c:5e:77:3e:8c:24:07:74:6a:32:ba:e8:18:21:86:01:
50:4a:03:83:b7:42:6e:2d:da:e5:1b:42:bc:30:b5:e4:da:57:
0d:47:af:93:7f:0f:f7:e3:1d:78:98:bc:5b:b3:10:08:b7:fd:
49:d5:6c:31:7a:ad:1e:c6:41:bb:8d:8b:3d:37:68:5a:d3:98:
ba:38:ef:44:b0:e6:c5:db:c9:c3:e4:cc:10:0a:e6:d5:a8:df:
b8:df:43:5d:1c:4e:9c:5a:80:fc:81:8c:6f:6f:47:2c:01:e4:
1c:61:51:06:a4:6e:99:aa:d9:55:47:50:d7:49:f1:da:f2:85:
02:fd:bb:13:72:a0:a8:ab:92:86:73:4e:96:4d:b0:ec:a0:31:
32:84:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:07 2024 by rpki-client on console-fra.rpki-client.org