Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/2lyP4mF9D1-Ok-FCWdr2SWV2o18.roa
File: 2lyP4mF9D1-Ok-FCWdr2SWV2o18.roa (raw, json)
Hash identifier: 6XtwLVxCkW4+14w+bHdq1gFOvA02HiWdUX0UeGtFtvw=
Subject key identifier: DA:5C:8F:E2:61:7D:0F:5F:8E:93:E1:42:59:DA:F6:49:65:76:A3:5F
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 033DC11F
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/2lyP4mF9D1-Ok-FCWdr2SWV2o18.roa
Signing time: Mon 14 Feb 2022 15:33:23 +0000
ROA not before: Mon 14 Feb 2022 15:33:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51474
IP address blocks: 176.108.228.0/22 maxlen: 22
91.233.193.0/24 maxlen: 24
91.233.194.0/23 maxlen: 23
176.113.96.0/23 maxlen: 23
178.212.201.0/24 maxlen: 24
178.212.206.0/24 maxlen: 24
178.212.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54378783 (0x33dc11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Feb 14 15:33:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da5c8fe2617d0f5f8e93e14259daf6496576a35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:61:10:79:cb:ed:00:84:b2:18:87:6d:2f:
c3:08:3c:a5:e9:1d:59:05:cc:05:fb:2b:29:b5:1f:
9a:08:65:24:75:71:46:65:09:5b:53:df:ce:2b:84:
1f:b1:83:ea:7f:e5:8a:78:95:0b:47:29:87:99:7c:
c9:97:d8:0f:c9:93:c7:1f:da:92:67:7b:89:6a:2d:
81:5e:25:10:d3:22:87:cc:f3:75:14:fe:3d:eb:2d:
e2:96:90:f2:63:fa:8d:52:65:3a:b6:57:29:2c:24:
7c:a0:23:5b:34:45:c5:85:fa:0d:77:fa:e7:74:2b:
f0:97:ba:21:88:e1:b5:60:9b:8e:cc:cc:02:22:e1:
e9:42:c3:d0:1e:60:36:04:78:71:f0:5d:0c:5b:5e:
fd:e5:7a:e2:91:aa:1a:13:dc:f2:62:7a:0d:52:c2:
7b:bd:5c:6b:70:c4:4c:64:70:a8:af:e4:48:fb:21:
14:d4:4c:0a:71:71:cf:5e:29:21:9a:9b:1f:7b:51:
ef:5a:64:4a:82:2c:fa:f3:6c:71:de:81:63:f2:05:
4c:2c:68:ed:5f:96:f3:8c:0e:88:4b:59:8d:6b:69:
4a:7f:6a:e6:39:fd:e9:58:ac:83:87:c4:59:82:61:
51:62:51:42:ac:01:af:a0:eb:01:1d:cd:c5:09:d5:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:8F:E2:61:7D:0F:5F:8E:93:E1:42:59:DA:F6:49:65:76:A3:5F
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/2lyP4mF9D1-Ok-FCWdr2SWV2o18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.193.0-91.233.195.255
176.108.228.0/22
176.113.96.0/23
178.212.200.0/23
178.212.206.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c3:b4:8b:4f:ef:6f:62:e9:e0:65:e8:cf:41:af:76:21:20:
69:2b:94:94:46:a1:07:0f:ab:5c:40:53:2a:99:96:dd:1a:1d:
29:4a:11:60:84:6b:9e:37:08:2d:97:63:1b:dd:48:d8:69:f3:
a4:9c:b4:94:6e:9e:82:8e:80:33:4b:1b:fe:03:b0:9e:d6:90:
86:e9:01:9e:c5:e1:73:c6:1c:6f:1c:34:de:d2:05:ba:58:2c:
2e:55:5f:8d:de:36:4e:87:01:f6:50:e5:0b:0f:02:f9:68:8e:
08:20:32:94:b6:8e:b5:95:09:a1:3a:0b:0c:d1:58:5d:fc:38:
b4:5d:25:1a:75:c8:07:4e:f5:e0:ed:59:7a:7b:ee:20:c3:40:
e0:ac:30:00:a3:14:04:d8:11:b9:22:23:7f:1b:67:23:92:d4:
28:e0:02:d2:00:c3:c4:cb:79:77:12:94:e1:ee:64:b5:b6:91:
bd:0a:3d:92:38:07:fd:7a:dd:e4:ed:10:7e:31:f1:7b:86:bc:
5f:a1:b3:aa:5f:d5:5b:05:3b:43:5e:3b:a1:40:ce:5a:51:11:
50:cd:1c:6e:49:58:c6:98:1d:65:29:05:de:dd:5e:46:d9:ce:
07:cc:ba:0e:f1:22:07:4d:5d:19:65:c6:a6:e8:e2:37:b2:65:
8a:00:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:45 2024 by rpki-client on console-ams.rpki-client.org