Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/Fw_Eqa3IUcm63XRYjUPUYscHK7c.roa
File: Fw_Eqa3IUcm63XRYjUPUYscHK7c.roa (raw, json)
Hash identifier: iuv3ZOhWHA5RYwisQBG2KoYsz3CPFPG3G3fbKCprPzk=
Subject key identifier: 17:0F:C4:A9:AD:C8:51:C9:BA:DD:74:58:8D:43:D4:62:C7:07:2B:B7
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0344BE86
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/Fw_Eqa3IUcm63XRYjUPUYscHK7c.roa
Signing time: Thu 17 Feb 2022 08:55:17 +0000
ROA not before: Thu 17 Feb 2022 08:55:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51474
IP address blocks: 176.108.224.0/22 maxlen: 22
176.108.228.0/22 maxlen: 22
194.213.6.0/24 maxlen: 24
91.233.193.0/24 maxlen: 24
91.233.194.0/23 maxlen: 23
176.113.96.0/23 maxlen: 23
178.212.201.0/24 maxlen: 24
178.212.206.0/24 maxlen: 24
178.212.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54836870 (0x344be86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Feb 17 08:55:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=170fc4a9adc851c9badd74588d43d462c7072bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:60:f2:99:fd:95:e2:48:f1:f7:c2:ce:2d:
b6:7c:26:27:64:97:6c:f8:58:21:f6:8a:44:f7:c5:
6d:71:20:49:0c:20:e6:da:bf:68:1e:e8:fa:e5:ba:
39:d3:e9:99:96:3b:1b:4b:01:0d:3b:09:66:4c:c9:
84:ea:9f:9b:81:6b:2f:86:c4:55:54:62:bc:6f:4e:
d2:f8:1e:f4:47:5d:2a:c0:1e:99:d4:98:82:9f:eb:
6d:6c:62:35:9c:7a:72:3e:54:9d:e0:12:f0:dd:6e:
95:95:ce:ff:25:d9:53:49:65:40:ea:28:55:b0:d1:
3f:13:a6:02:6d:e9:01:e8:16:8d:84:ca:7a:12:8b:
6d:6c:a4:85:a0:6c:f0:5f:93:83:05:e0:1f:20:18:
7f:f3:ff:63:61:2f:69:f7:66:14:4f:2e:90:fd:9d:
3e:d2:02:55:c2:4a:f2:ad:78:f4:2f:de:98:e9:0c:
ac:2f:d6:04:e9:34:00:90:56:9a:ee:4d:c0:22:a7:
36:20:d5:6a:e1:30:02:cd:b3:e8:09:99:a7:46:7d:
46:e4:35:0b:87:93:b5:b3:4f:2e:1c:85:46:3b:8b:
f9:2a:6b:e9:f0:74:45:e8:fb:d7:6c:a7:2d:fa:fd:
95:8a:50:49:1e:a4:f4:97:4f:22:0f:fa:fa:de:4f:
32:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0F:C4:A9:AD:C8:51:C9:BA:DD:74:58:8D:43:D4:62:C7:07:2B:B7
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/Fw_Eqa3IUcm63XRYjUPUYscHK7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.193.0-91.233.195.255
176.108.224.0/21
176.113.96.0/23
178.212.200.0/23
178.212.206.0/24
194.213.6.0/24
Signature Algorithm: sha256WithRSAEncryption
98:65:d4:53:5c:d9:57:ec:32:34:72:f3:9a:e8:3c:01:c9:88:
57:80:57:10:a6:55:16:fe:6c:87:8c:ca:d3:e5:96:f7:64:20:
2f:c6:31:0b:34:76:9b:13:72:ad:6a:6d:5f:90:c6:b6:2a:d2:
15:60:e8:bd:41:25:25:ce:a9:bd:b9:2e:6b:7f:b5:d1:2e:a6:
5c:a0:c3:9d:d7:da:9e:3e:64:92:07:28:e9:22:a4:28:36:bc:
0c:37:2a:47:2b:65:19:92:7e:92:8d:b7:50:e9:2b:1e:ff:74:
15:f7:51:12:df:0e:1c:98:29:05:19:f7:eb:22:53:47:f3:50:
29:75:c0:22:73:eb:c6:8c:d0:0b:ed:ab:f1:8d:a8:c9:bb:67:
51:80:74:52:e0:26:4a:3c:98:5f:a7:22:0e:43:ca:32:09:b0:
ca:f4:ee:b8:d1:7d:de:5d:ab:17:5e:54:9b:c2:67:a7:f9:5e:
56:83:a2:31:76:04:04:fe:de:69:ae:87:01:a8:a7:d2:f0:fd:
55:8b:2f:2e:18:ae:0d:51:2e:ed:6f:a6:1a:f9:09:12:da:05:
e1:d1:ac:d4:9e:7c:db:d1:57:e4:fa:c9:06:89:28:4c:a4:fd:
08:8d:4d:84:4d:ad:b4:6c:51:fe:e3:b2:8f:48:fc:b3:14:7a:
22:d0:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org