Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/1b23a0-8aa6-4645-81dd-3ec9a85e906f/1/to5-SODd8XOTembzdTIKVhK0WOs.roa
File: to5-SODd8XOTembzdTIKVhK0WOs.roa (raw, json)
Hash identifier: VutRYSLH9VN9vrt+3mUHim1E1GM+yHJ9AyYMSJbaSG8=
Subject key identifier: B6:8E:7E:48:E0:DD:F1:73:93:7A:66:F3:75:32:0A:56:12:B4:58:EB
Certificate issuer: /CN=709b12a413072fe11cd74df104b1ca5616efc56b
Certificate serial: 01185A
Authority key identifier: 70:9B:12:A4:13:07:2F:E1:1C:D7:4D:F1:04:B1:CA:56:16:EF:C5:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJsSpBMHL-Ec103xBLHKVhbvxWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/1b23a0-8aa6-4645-81dd-3ec9a85e906f/1/to5-SODd8XOTembzdTIKVhK0WOs.roa
Signing time: Thu 28 Apr 2022 12:41:25 +0000
ROA not before: Thu 28 Apr 2022 12:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.201.122.0/23 maxlen: 23
193.150.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71770 (0x1185a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709b12a413072fe11cd74df104b1ca5616efc56b
Validity
Not Before: Apr 28 12:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b68e7e48e0ddf173937a66f375320a5612b458eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:f3:0d:61:fe:a8:72:38:a8:68:c5:21:fb:
39:6a:47:88:72:64:30:a8:15:ce:04:ee:06:40:9c:
7a:8a:f1:3c:a2:0f:fe:d3:0a:9a:c9:44:0b:85:7e:
fc:0f:c8:6f:3f:0e:e4:9f:ce:47:19:23:c4:30:7d:
2d:f2:bd:ee:53:da:69:eb:4e:72:4e:6a:84:f3:4b:
c5:8c:52:28:cd:9e:c6:6e:7d:9e:d7:f1:4d:85:df:
e4:a6:18:7f:75:81:4d:b1:ef:b4:8c:54:5b:81:92:
2b:56:49:dd:ca:94:e1:81:7d:bc:43:52:de:d0:a8:
00:d6:2d:6c:05:a0:2b:ce:34:37:8e:90:22:57:72:
d7:4b:2a:93:93:da:58:b8:19:93:21:43:3a:a9:3b:
0a:c6:2a:f5:93:59:9d:52:f9:3a:55:7a:5c:aa:d8:
fa:37:8b:41:5b:25:25:2c:93:64:59:aa:c2:e2:ae:
c6:c4:08:08:b8:90:9d:63:da:a8:91:a4:64:5d:c8:
ae:f3:d6:67:37:70:e9:38:83:71:d4:e2:28:6e:4e:
c9:f4:74:a6:6f:f2:29:ab:02:7b:27:85:4b:8c:43:
71:bb:23:98:66:1c:08:70:3c:98:31:dd:6e:22:5e:
bf:ea:cc:33:e3:32:08:89:b3:b5:87:fd:e6:e9:28:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8E:7E:48:E0:DD:F1:73:93:7A:66:F3:75:32:0A:56:12:B4:58:EB
X509v3 Authority Key Identifier:
keyid:70:9B:12:A4:13:07:2F:E1:1C:D7:4D:F1:04:B1:CA:56:16:EF:C5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJsSpBMHL-Ec103xBLHKVhbvxWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/1b23a0-8aa6-4645-81dd-3ec9a85e906f/1/to5-SODd8XOTembzdTIKVhK0WOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/1b23a0-8aa6-4645-81dd-3ec9a85e906f/1/cJsSpBMHL-Ec103xBLHKVhbvxWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.48.0/24
193.201.122.0/23
Signature Algorithm: sha256WithRSAEncryption
35:05:0f:50:15:51:d5:a5:c0:76:e7:3b:d5:91:a4:11:c2:78:
d1:ae:65:74:56:a6:88:b8:c1:da:4f:31:cb:25:b6:42:9e:c5:
0e:5e:1f:2c:8e:2b:53:54:d3:81:1a:f3:49:84:f5:69:b3:48:
a8:85:20:86:88:db:7e:47:7b:8a:d1:03:1d:9c:bc:1d:93:5d:
45:4b:73:8e:5d:3b:b0:bc:a8:df:a3:5f:3c:7e:b9:7c:3f:8b:
3e:f3:99:3b:7f:a5:15:f3:bd:a0:8d:8f:11:aa:f6:5f:55:69:
3a:ec:62:5b:ce:ad:b0:94:8e:ce:91:df:15:dc:c4:5c:6e:f1:
57:66:b2:07:fb:c1:8c:21:1b:6f:cd:21:eb:c8:df:fe:8d:72:
89:22:0f:19:eb:41:68:fb:c2:06:82:f4:88:7b:60:90:38:13:
f5:66:a8:0c:db:03:2f:eb:df:9d:66:1f:4b:3e:43:05:eb:5c:
01:d4:0f:62:7c:7f:00:83:c7:87:b9:cc:4b:d5:e2:ac:15:7e:
da:7a:89:91:7a:27:4a:f9:84:d6:e6:85:60:98:13:4e:12:35:
10:6a:fb:27:3f:a7:9f:b8:29:a2:bd:f6:22:a4:e1:67:66:cd:
26:09:2c:10:e3:e2:7d:67:7e:2b:b8:f7:e1:f1:02:a9:1d:20:
88:06:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:25 2024 by rpki-client on console-fra.rpki-client.org