Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/I83gS1CL7Zksd19KmsF6FGrqIDw.roa
File: I83gS1CL7Zksd19KmsF6FGrqIDw.roa (raw, json)
Hash identifier: bW4hjSfoMyH4ff5fDA5YbIHDgWwgpVbIglT7OOqXq+E=
Subject key identifier: 23:CD:E0:4B:50:8B:ED:99:2C:77:5F:4A:9A:C1:7A:14:6A:EA:20:3C
Certificate issuer: /CN=170ef71a422a2f0fe91160579a4050618d8baf10
Certificate serial: 03589803
Authority key identifier: 17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/I83gS1CL7Zksd19KmsF6FGrqIDw.roa
Signing time: Sat 01 Jan 2022 05:54:34 +0000
ROA not before: Sat 01 Jan 2022 05:54:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 46.244.108.0/22 maxlen: 24
46.244.114.0/23 maxlen: 24
46.244.18.0/23 maxlen: 24
92.240.144.0/22 maxlen: 24
92.240.151.0/24 maxlen: 24
92.240.149.0/24 maxlen: 24
46.244.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56137731 (0x3589803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170ef71a422a2f0fe91160579a4050618d8baf10
Validity
Not Before: Jan 1 05:54:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23cde04b508bed992c775f4a9ac17a146aea203c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:d5:43:0d:01:cd:fe:51:f2:50:4f:a6:22:
4d:dc:8a:19:4c:cd:9c:dd:c3:f9:90:cf:fc:4c:79:
13:c0:7b:fd:cf:f2:56:1a:3f:98:eb:0c:26:1f:74:
a1:81:47:69:7b:c1:75:22:9d:61:34:03:77:ce:95:
18:1b:10:91:57:d3:7e:9b:da:63:d6:74:15:fb:5b:
36:e5:99:a6:9a:18:6a:0c:9d:0d:c8:5d:91:04:77:
40:bd:d5:ea:8d:ca:91:5e:08:b6:77:c6:4b:3f:37:
8a:5c:5d:76:40:4e:36:27:cf:37:b6:5c:69:b3:ec:
91:7c:87:e1:89:00:17:fb:ad:39:bf:51:b9:56:93:
df:97:a1:45:f2:db:91:e7:bf:d4:78:a9:a8:f9:f1:
60:9e:05:6d:7a:f3:a6:37:29:ef:a5:28:1b:b7:93:
15:3b:b4:cb:f9:59:57:c2:b7:cc:70:d6:c9:9c:e4:
8b:83:71:fd:49:bd:23:41:b4:26:34:6b:e9:bd:d9:
92:a3:48:fc:67:bc:5a:36:d3:16:e2:7e:18:38:ea:
d6:a1:16:b0:d7:fd:34:9c:6c:cd:81:42:05:9d:03:
22:6d:17:6c:ed:1b:dd:fe:41:31:94:3d:e4:f7:f4:
01:f9:c4:23:22:c4:3d:dc:56:de:90:4a:9b:a5:56:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:E0:4B:50:8B:ED:99:2C:77:5F:4A:9A:C1:7A:14:6A:EA:20:3C
X509v3 Authority Key Identifier:
keyid:17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/I83gS1CL7Zksd19KmsF6FGrqIDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Fw73GkIqLw_pEWBXmkBQYY2LrxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.18.0/23
46.244.97.0/24
46.244.108.0/22
46.244.114.0/23
92.240.144.0/22
92.240.149.0/24
92.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
43:92:72:50:ca:c7:1a:d6:8d:f0:1d:3a:e6:38:df:ed:29:71:
d8:6e:56:6f:d8:2e:a2:73:8e:44:c0:c9:e4:c9:f5:6c:77:21:
47:0c:10:87:a9:94:2c:d4:06:e3:b1:55:c6:f6:cd:bb:ee:ba:
a0:40:4e:11:1f:46:2c:be:7b:e8:56:f7:1b:68:4d:1a:f7:c1:
e8:76:5e:99:34:2b:f9:c3:7f:9c:bd:c5:a2:a6:60:55:d8:06:
b2:42:14:79:2a:29:e6:ea:14:05:1a:02:ed:89:86:e8:16:f0:
9d:9b:8b:ef:06:2e:c0:1d:09:25:fb:2c:16:b7:b5:da:2f:e2:
ea:38:2d:b7:aa:3c:31:1c:45:da:5a:04:41:b8:f1:4e:02:b3:
be:99:50:25:d4:e7:22:c9:d2:2e:3b:49:8c:62:74:6c:65:60:
b2:08:3d:d2:5d:6e:fe:ca:b9:aa:66:ba:45:50:c9:fa:64:a4:
b7:70:14:50:49:e5:f0:41:71:50:b1:55:71:10:4b:26:9c:72:
e3:1e:bb:9c:f5:7d:c5:04:e5:23:59:45:3d:e4:e5:98:11:81:
34:ec:ea:5e:c8:aa:80:ac:b9:92:b6:87:c5:a7:42:75:3b:64:
00:38:7a:36:a3:73:ad:d5:4f:a7:ea:d5:b7:56:61:6f:03:f1:
ee:fa:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:15 2024 by rpki-client on console-fra.rpki-client.org