Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/fAwIaA2gtcEM_vKVmOO1sZuXFC0.roa
File: fAwIaA2gtcEM_vKVmOO1sZuXFC0.roa (raw, json)
Hash identifier: BK4+BPRPlgtFuDkUMcmXI7FmLtuydb+6MO6M25dq8Cg=
Subject key identifier: 7C:0C:08:68:0D:A0:B5:C1:0C:FE:F2:95:98:E3:B5:B1:9B:97:14:2D
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 02DBBE96
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/fAwIaA2gtcEM_vKVmOO1sZuXFC0.roa
Signing time: Sat 01 Jan 2022 11:58:38 +0000
ROA not before: Sat 01 Jan 2022 11:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51474
IP address blocks: 91.233.193.0/24 maxlen: 24
91.233.194.0/23 maxlen: 23
176.113.96.0/23 maxlen: 23
178.212.201.0/24 maxlen: 24
178.212.206.0/24 maxlen: 24
178.212.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47955606 (0x2dbbe96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jan 1 11:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c0c08680da0b5c10cfef29598e3b5b19b97142d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:11:12:87:3d:72:1d:44:a5:39:85:94:8f:
42:01:2a:69:95:a9:dd:09:44:ba:7a:33:c9:52:66:
0c:15:70:f2:30:61:b3:2e:2d:99:08:23:d8:1f:31:
6a:c8:7e:69:99:b5:b9:b9:88:ed:d0:98:51:b3:15:
03:dc:8a:32:ca:67:99:a4:42:fd:75:6f:79:72:f9:
5a:8d:02:5e:1a:4d:d5:8b:0a:bb:2e:52:62:bb:b0:
6f:09:2f:2b:d5:dd:86:3d:d3:12:22:56:27:bb:0d:
74:8c:3b:1d:00:54:24:8a:94:8e:be:a8:3d:b7:6f:
39:de:e5:12:e6:f6:ec:90:3b:15:0e:ef:35:31:84:
f1:4b:dd:08:4e:f2:c7:08:80:64:66:06:39:69:43:
31:48:2d:5e:05:d5:a6:fb:c5:3d:10:56:10:24:2a:
b3:5f:12:03:a3:60:27:e6:1c:1a:a6:ed:e7:14:59:
20:3b:fd:f8:eb:21:ed:34:11:df:08:20:bf:1d:a8:
76:02:6d:42:31:95:84:d1:f8:49:95:fd:c0:89:a3:
9d:3b:1e:df:7e:8a:89:fd:c2:d2:de:1b:ea:ff:ed:
09:ba:d6:2f:8c:a6:60:f3:40:45:4a:47:76:9b:02:
18:64:9f:39:0a:b2:a6:ae:dd:7e:14:0d:1c:0e:00:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0C:08:68:0D:A0:B5:C1:0C:FE:F2:95:98:E3:B5:B1:9B:97:14:2D
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/fAwIaA2gtcEM_vKVmOO1sZuXFC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.193.0-91.233.195.255
176.113.96.0/23
178.212.200.0/23
178.212.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:40:b0:cd:9d:62:c6:5a:85:5f:82:04:42:71:c7:d6:3b:86:
0f:f1:de:56:97:b7:8f:ff:b4:be:d5:5a:d5:3d:43:1c:cb:9e:
02:1f:46:a2:ca:32:79:eb:d0:87:3e:e4:59:49:d1:e2:d4:d6:
04:ff:9d:90:a4:42:85:f0:5f:43:1f:9b:4e:ea:0c:af:00:92:
8a:0c:86:70:7e:58:a1:90:a6:31:5c:f6:50:0e:4a:31:f4:0c:
1d:f8:61:4d:11:bf:a7:06:f4:5e:12:6f:f6:8a:43:3b:69:02:
a9:6a:99:91:4d:23:af:8e:bb:17:c4:81:72:95:c9:56:ec:9d:
9d:aa:e9:77:90:70:b4:93:19:8b:2c:63:32:37:a1:70:e1:a1:
f0:45:fb:87:06:ff:90:c6:14:0d:62:35:09:38:ea:ef:4c:d6:
37:44:e5:62:a7:bb:2a:71:13:51:b5:3f:2b:c2:45:9c:6a:20:
2b:8f:c8:1c:23:95:c2:0a:2f:f7:d1:3e:03:2d:bc:16:d9:03:
20:90:bf:fe:f9:30:2b:86:2a:c3:e7:ad:c3:71:b6:5e:55:08:
6c:8d:be:c0:4c:7c:1a:7f:4f:df:bc:fa:6d:28:8e:d6:de:1b:
31:74:99:c2:9d:3e:f6:66:35:1b:4f:f2:7b:e3:bf:91:df:06:
26:51:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org